Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/vBnMD6l0HDyJ5AmDU9gzdvgSfbg.roa
File: vBnMD6l0HDyJ5AmDU9gzdvgSfbg.roa (raw, json)
Hash identifier: vblJbYJ1C8LEIdUOtfy+UkwLIwa+Bdj4aJSNs7UZ1Mw=
Subject key identifier: BC:19:CC:0F:A9:74:1C:3C:89:E4:09:83:53:D8:33:76:F8:12:7D:B8
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 0593D212
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/vBnMD6l0HDyJ5AmDU9gzdvgSfbg.roa
Signing time: Sat 01 Jan 2022 11:59:04 +0000
ROA not before: Sat 01 Jan 2022 11:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35139
IP address blocks: 2.58.104.0/24 maxlen: 24
2.58.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93573650 (0x593d212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jan 1 11:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc19cc0fa9741c3c89e4098353d83376f8127db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:8d:9f:42:76:05:7b:19:87:3c:1a:8f:1f:
37:2c:84:23:d7:8c:8f:67:46:6f:6c:9f:a1:a6:ed:
90:7e:ca:2a:f6:5b:51:7c:ce:8c:c5:38:07:bc:b3:
74:21:b3:21:5c:85:81:ed:3b:1d:42:62:ee:8f:b3:
07:9e:ca:3b:8c:c9:70:89:b4:49:b4:b8:7c:e6:94:
c8:96:d6:3b:75:43:cb:d2:21:95:d2:d8:ed:84:46:
72:f2:68:9d:9c:bb:70:f8:af:c4:c8:09:4f:d4:6d:
b5:11:0a:23:00:e1:62:17:6f:2c:44:19:b5:86:37:
b4:5e:cd:b6:54:3d:84:b7:58:d7:2a:87:71:de:b0:
9c:99:e1:d5:85:d4:93:85:b8:82:c8:f2:54:75:86:
88:fa:02:d5:a0:d1:f5:46:b7:6f:cd:ac:6c:48:ca:
06:76:38:82:40:61:87:c9:2c:85:6a:01:1e:ce:ff:
45:9a:b4:1a:b0:70:9b:e5:0c:30:e6:a3:a1:7b:a8:
70:21:a9:eb:34:aa:ff:eb:64:93:e6:f7:11:85:b5:
95:1a:4a:de:34:fc:b8:22:81:dd:6a:76:ac:cf:4b:
48:6a:1b:a0:e1:a9:70:1a:02:9a:1a:43:95:74:69:
eb:07:3c:89:cc:73:00:8f:9d:79:6f:f5:2b:0f:3e:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:CC:0F:A9:74:1C:3C:89:E4:09:83:53:D8:33:76:F8:12:7D:B8
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/vBnMD6l0HDyJ5AmDU9gzdvgSfbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.104.0/23
Signature Algorithm: sha256WithRSAEncryption
21:ef:ee:11:2c:dc:bc:cb:0c:a1:94:df:92:fe:36:d6:09:ce:
eb:d9:16:be:b4:26:ce:fe:95:5c:37:83:df:26:0d:6b:38:4a:
47:b4:66:17:14:f2:a6:29:51:75:5b:67:96:76:7d:f0:07:07:
c3:ec:f9:c4:6d:72:39:48:aa:c8:08:f3:dc:11:f5:a1:8c:a8:
ac:81:ea:b9:fe:35:57:08:09:a5:7b:26:aa:96:c4:f9:6c:6f:
e2:e2:a6:55:fe:aa:3f:fa:66:f8:9e:68:fe:1a:82:e8:d6:f5:
62:df:3a:1f:2f:88:96:b8:51:5c:37:f2:74:98:f5:7d:50:92:
22:14:5b:c8:13:a5:5d:a9:32:26:2b:ca:01:66:a3:f4:17:2f:
66:1c:d3:23:50:e7:e8:99:ce:fd:77:42:83:af:59:f1:18:7c:
65:8c:fc:14:4a:41:e1:89:36:8f:90:3e:4f:74:b5:5a:43:ed:
0f:d9:07:12:c7:0f:7c:10:1e:24:4d:f8:fb:f7:6a:76:3d:5d:
f8:32:56:2d:b5:73:37:89:12:af:04:0a:26:fb:87:07:c3:e0:
12:4a:b3:7c:be:e5:2e:88:b1:50:5e:9e:ee:c3:c1:0b:ff:8c:
10:72:0c:48:38:b5:6b:3b:b2:13:15:d2:1a:04:af:b6:86:68:
1e:1e:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:28 2025 by rpki-client