Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/VLUg0tm9AEysWlWlnXRkZAY1zXg.roa
File: VLUg0tm9AEysWlWlnXRkZAY1zXg.roa (raw, json)
Hash identifier: IyHZV5lRXz/k3ExuvPbhWfYqOWTv27qAlGv3P/Q3F8g=
Subject key identifier: 54:B5:20:D2:D9:BD:00:4C:AC:5A:55:A5:9D:74:64:64:06:35:CD:78
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 061C6B2B
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/VLUg0tm9AEysWlWlnXRkZAY1zXg.roa
Signing time: Sat 01 Jan 2022 07:01:57 +0000
ROA not before: Sat 01 Jan 2022 07:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12516
IP address blocks: 195.54.48.0/23 maxlen: 24
91.216.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102525739 (0x61c6b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Jan 1 07:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54b520d2d9bd004cac5a55a59d7464640635cd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:16:d5:a6:74:1f:57:d0:b4:d7:ac:97:21:
90:43:74:36:6a:39:75:4b:23:47:57:b4:1e:be:9f:
cb:20:eb:1c:cb:ea:ed:50:df:bf:56:c7:46:5d:3a:
40:67:ef:7d:37:10:bc:22:2d:50:21:5d:3c:62:c5:
12:38:84:4b:54:c8:38:82:1c:5a:68:66:7d:a9:a9:
8e:3a:89:4e:78:04:2f:67:52:17:1a:74:2a:ff:6f:
26:73:fb:64:4d:5b:31:21:a4:b1:00:04:c2:aa:01:
5c:72:4d:6c:35:6e:fa:2e:a1:7f:80:ca:81:dd:26:
58:9b:81:2f:20:c5:b8:85:72:61:c0:17:93:a8:2f:
d8:8b:b7:6c:ef:44:9f:9c:dc:73:a4:3e:0e:de:37:
f5:20:c9:7c:05:dd:51:fe:bf:b7:bc:68:a3:1d:b1:
40:32:f2:5a:3a:68:7f:22:3b:ef:a8:0d:ed:59:0b:
47:87:91:c4:12:38:35:bd:79:dc:0b:de:26:50:f0:
55:b3:2b:50:fc:74:62:6f:42:c3:f4:9c:52:db:bc:
c0:38:a2:fe:24:54:25:6c:45:df:fe:df:85:f2:c4:
e2:82:51:3e:19:c5:9c:46:63:dc:ff:2a:d1:ac:cd:
08:bb:23:5c:b6:a8:84:c5:9e:d8:b7:fa:b0:a4:47:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:20:D2:D9:BD:00:4C:AC:5A:55:A5:9D:74:64:64:06:35:CD:78
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/VLUg0tm9AEysWlWlnXRkZAY1zXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.195.0/24
195.54.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:55:09:fa:27:2a:fa:85:d1:93:e5:33:23:85:93:47:3a:8b:
9c:0a:7b:91:64:fd:83:76:6d:48:05:44:2a:89:66:ec:90:97:
0a:7b:20:e5:6f:c7:4d:8f:4c:5d:76:7e:be:35:13:1e:34:20:
7c:e4:03:f6:d4:67:88:cb:d0:cc:ee:7e:12:21:f0:a4:fd:b5:
fe:9a:7e:6b:1b:8c:8d:81:e8:0e:1f:35:05:38:73:85:6f:35:
7e:b7:b5:a8:94:db:18:81:4f:5b:ea:b2:a3:0b:3f:92:17:73:
65:09:6f:c1:a2:d0:e3:9d:23:10:d0:9c:ca:93:9d:a8:f0:fa:
0a:c1:7a:b0:61:be:3b:e9:dd:df:a0:ee:83:59:ff:90:3a:c0:
0b:62:70:72:fc:5d:58:ef:64:82:53:6b:d5:6c:5b:06:df:ad:
79:9c:3b:65:23:60:5d:ce:35:d0:d9:db:bb:27:c8:29:ad:fd:
5b:14:0d:77:7b:5e:da:c3:d8:d3:eb:0a:ff:67:15:b0:e1:9b:
8a:77:2b:9d:5f:ef:43:62:76:8b:87:3a:fd:c8:a4:78:c0:a3:
c9:ec:cb:40:16:d8:0f:2b:77:ac:46:71:73:02:96:61:0f:c0:
0e:18:ba:ce:ad:79:ad:d4:46:35:23:8d:f2:02:f8:b8:de:5b:
23:ef:55:d7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBhxrKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NzZiYTYyMjljNDU5ZDc2OTVkMzUyOWIxMjA3ZTJjMjliMDg0MmIxMB4XDTIyMDEw
MTA3MDE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTRiNTIwZDJkOWJk
MDA0Y2FjNWE1NWE1OWQ3NDY0NjQwNjM1Y2Q3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjKFtWmdB9X0LTXrJchkEN0Nmo5dUsjR1e0Hr6fyyDrHMvq
7VDfv1bHRl06QGfvfTcQvCItUCFdPGLFEjiES1TIOIIcWmhmfampjjqJTngEL2dS
Fxp0Kv9vJnP7ZE1bMSGksQAEwqoBXHJNbDVu+i6hf4DKgd0mWJuBLyDFuIVyYcAX
k6gv2Iu3bO9En5zcc6Q+Dt439SDJfAXdUf6/t7xoox2xQDLyWjpofyI776gN7VkL
R4eRxBI4Nb153AveJlDwVbMrUPx0Ym9Cw/ScUtu8wDii/iRUJWxF3/7fhfLE4oJR
PhnFnEZj3P8q0azNCLsjXLaohMWe2Lf6sKRH62cCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRUtSDS2b0ATKxaVaWddGRkBjXNeDAfBgNVHSMEGDAWgBSXa6YinEWddpXT
UpsSB+LCmwhCsTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2wydW1JcHhGblhhVjAxS2JFZ2Zpd3BzSVFyRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvZDk1ZjE1LTJhMmQtNDY1Yi1hODIyLWM4ZWU0NjY0OGRiZi8x
L1ZMVWcwdG05QUV5c1dsV2xuWFJrWkFZMXpYZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
ZDk1ZjE1LTJhMmQtNDY1Yi1hODIyLWM4ZWU0NjY0OGRiZi8xL2wydW1JcHhGblhh
VjAxS2JFZ2Zpd3BzSVFyRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvYwwMEAcM2MDANBgkqhkiG9w0B
AQsFAAOCAQEAfVUJ+icq+oXRk+UzI4WTRzqLnAp7kWT9g3ZtSAVEKolm7JCXCnsg
5W/HTY9MXXZ+vjUTHjQgfOQD9tRniMvQzO5+EiHwpP21/pp+axuMjYHoDh81BThz
hW81fre1qJTbGIFPW+qyows/khdzZQlvwaLQ450jENCcypOdqPD6CsF6sGG+O+nd
36Dug1n/kDrAC2JwcvxdWO9kglNr1WxbBt+teZw7ZSNgXc410NnbuyfIKa39WxQN
d3te2sPY0+sK/2cVsOGbincrnV/vQ2J2i4c6/cikeMCjyezLQBbYDyt3rEZxcwKW
YQ/ADhi6zq15rdRGNSON8gL4uN5bI+9V1w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:20 2025 by rpki-client