Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Vn9VPvqbsU8h6O9sy3mxn7qRPK4.roa
File: Vn9VPvqbsU8h6O9sy3mxn7qRPK4.roa (raw, json)
Hash identifier: XB9nZ9pKNI/lrZ24kVi5Ca2klDcqU0Xb/las75Bku+Y=
Subject key identifier: 56:7F:55:3E:FA:9B:B1:4F:21:E8:EF:6C:CB:79:B1:9F:BA:91:3C:AE
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018A41B487CD2DA3C2B7ED699CA4F8660AF6
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Vn9VPvqbsU8h6O9sy3mxn7qRPK4.roa
Signing time: Tue 29 Aug 2023 14:31:04 +0000
ROA not before: Tue 29 Aug 2023 14:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58139
IP address blocks: 188.93.241.224/29 maxlen: 29
91.219.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:b4:87:cd:2d:a3:c2:b7:ed:69:9c:a4:f8:66:0a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Aug 29 14:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=567f553efa9bb14f21e8ef6ccb79b19fba913cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:a8:79:9d:30:65:bc:86:a9:28:0f:8f:89:
d5:64:6e:85:16:0d:6b:e3:00:92:4f:3f:1e:f1:d3:
d7:06:3a:19:17:ae:4c:d7:b4:e0:f4:ea:6f:e3:79:
94:a6:88:7e:3a:56:ac:0c:a9:6a:a0:c0:57:cf:2e:
f1:3e:76:01:35:14:23:a7:a2:bb:9e:3c:70:75:48:
a8:72:ae:9e:11:cd:0b:f5:73:90:3e:63:64:72:f7:
74:0c:ed:ad:28:9f:42:ee:b5:f8:6a:ed:a0:ef:81:
49:65:3a:ce:bd:53:17:d2:0b:5f:43:49:4b:63:ff:
4b:c3:08:b8:11:d8:32:1a:df:d7:50:d1:44:f0:61:
d5:78:e0:6c:e8:be:6b:5e:c3:f9:82:05:b7:a3:98:
b4:08:79:5a:fa:8e:10:c7:aa:3f:fa:3d:de:d6:9e:
d5:b9:23:4d:51:c5:40:8e:a7:de:d7:de:51:04:b5:
5a:fe:ee:b7:40:02:71:89:f2:54:5d:e3:02:03:d4:
3c:77:a6:c0:ae:a8:61:20:d7:80:5f:d1:06:a2:63:
4a:e4:8c:0c:1c:b6:c6:18:51:99:a4:4a:50:4d:b8:
ef:8f:df:00:84:d2:d2:1f:df:b0:6f:2a:97:2e:4f:
d2:d9:79:82:d1:53:f0:ff:01:26:56:5c:11:b0:3c:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:55:3E:FA:9B:B1:4F:21:E8:EF:6C:CB:79:B1:9F:BA:91:3C:AE
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Vn9VPvqbsU8h6O9sy3mxn7qRPK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.182.0/24
188.93.241.224/29
Signature Algorithm: sha256WithRSAEncryption
09:dd:e4:0e:eb:41:db:b2:91:05:13:38:10:3e:27:1b:51:06:
ee:52:32:c7:5f:7b:61:51:dc:ec:c6:b2:83:ac:76:c8:36:ae:
4d:40:ff:9d:4c:84:2b:90:bf:2d:e6:73:c2:d9:48:42:89:67:
bf:4f:da:a6:7b:48:34:88:25:86:6e:d3:0b:90:3d:dd:15:cd:
8d:11:e3:52:54:3f:be:24:ea:f6:46:33:36:93:07:70:04:e4:
fe:a2:ab:eb:52:e1:19:d1:bf:63:6d:dd:40:17:60:b6:0e:fe:
bc:25:27:0d:66:5d:4b:0f:28:f7:6f:0b:af:6e:ba:1c:16:d2:
ac:60:9f:54:79:9c:92:87:f8:93:4b:7b:c7:0c:88:9b:bc:fb:
51:d8:cf:80:6f:6c:f5:62:61:29:42:21:56:bd:3f:02:4f:85:
66:84:92:c5:ac:c3:d4:7c:fe:61:f6:57:ed:a5:f1:6e:aa:a4:
69:9c:01:71:54:9a:c7:9a:68:06:45:57:fa:93:22:a7:bd:af:
57:c9:ba:89:9a:5e:49:07:dc:d9:7c:10:9b:e9:bc:94:ec:29:
fc:83:03:b9:1e:40:f4:a3:a9:1f:1a:de:88:a8:95:88:db:25:
29:84:4c:62:77:dd:dc:c5:26:38:e2:91:65:6c:7b:79:ca:76:
84:f3:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:42 2025 by rpki-client