Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/VZuxX0hJ4zIyLtekFBhFcOA2z1A.roa
File: VZuxX0hJ4zIyLtekFBhFcOA2z1A.roa (raw, json)
Hash identifier: xSCVzyyubviqjrnP/zeD3VXd488keWw1WZd4JArhK3U=
Subject key identifier: 55:9B:B1:5F:48:49:E3:32:32:2E:D7:A4:14:18:45:70:E0:36:CF:50
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 37BE4B4E
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/VZuxX0hJ4zIyLtekFBhFcOA2z1A.roa
Signing time: Sat 01 Jan 2022 12:06:55 +0000
ROA not before: Sat 01 Jan 2022 12:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199279
IP address blocks: 83.230.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935217998 (0x37be4b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 12:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=559bb15f4849e332322ed7a414184570e036cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:c9:88:6b:b0:b2:c1:40:c5:ab:a2:bb:e4:
35:c1:ed:a1:12:53:94:87:9e:3d:5f:0b:87:34:de:
a5:46:b0:e2:2f:80:37:51:5b:63:47:ef:8f:9b:2f:
b7:8c:e0:01:20:5e:f5:c7:de:6f:ca:cf:4e:cc:6a:
c6:3c:8b:ea:26:73:64:f0:e2:f3:e1:fa:43:b1:8f:
3d:eb:02:b8:f9:e7:89:c5:1b:99:34:5a:5f:8d:b4:
ef:a8:bf:43:83:37:49:a4:88:81:99:da:c2:69:f6:
ce:a1:31:86:f4:46:3c:95:bb:be:77:7c:0d:67:19:
e1:11:13:14:94:77:06:2a:6e:56:89:99:96:81:1e:
03:17:0b:11:ed:3d:d6:12:c1:dc:1f:47:39:d9:4e:
99:86:09:49:d8:00:89:98:a1:05:bd:c3:54:4c:d9:
61:fb:f9:e9:24:99:84:81:21:69:4a:ab:47:1a:4b:
9e:e7:de:41:b9:8b:fe:a5:5e:e6:9f:08:92:d7:bd:
ee:c1:c6:14:79:f5:13:9e:ab:ad:d5:57:ce:f9:12:
b6:d8:74:6d:75:8d:a0:4a:c6:7d:71:12:c2:04:2a:
bf:3a:84:f9:8f:9e:8d:16:b7:c7:ea:d4:ad:73:1c:
0a:23:49:86:13:51:ce:be:31:bb:7e:e8:19:5d:dd:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:B1:5F:48:49:E3:32:32:2E:D7:A4:14:18:45:70:E0:36:CF:50
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/VZuxX0hJ4zIyLtekFBhFcOA2z1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.94.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c7:57:0b:29:9f:5f:e9:d2:a6:75:bb:89:91:4e:0a:34:ba:
17:8f:7b:e5:3c:9d:bf:01:6a:e1:1c:fb:9b:96:1a:e9:94:6e:
9f:6f:b8:e6:13:0f:06:8a:ef:9e:6a:93:28:32:98:fa:8d:48:
46:98:6d:70:a1:77:76:b4:4b:45:5a:77:0e:5d:f5:a9:38:df:
dd:97:72:53:25:fd:12:26:cb:03:a6:1c:5c:6d:df:ac:a0:51:
fc:bc:d6:6b:7b:2c:2f:4c:4b:90:33:59:5d:d0:1b:be:23:09:
ab:fb:53:b5:76:14:09:f3:5c:44:92:ec:33:8a:67:12:7d:9e:
a8:e7:21:5c:b8:1b:8b:27:a6:3b:20:07:aa:18:7a:f4:4a:8b:
2e:9a:b7:9c:64:d0:2e:1c:c7:25:f4:76:1a:43:1a:e1:1d:2f:
97:8f:6f:6a:90:21:9a:37:1e:e1:6f:57:0b:43:6c:17:cd:f1:
1a:0b:2c:a9:03:c1:f4:6d:cb:a1:53:cd:da:f6:ba:19:60:9e:
20:3d:4b:fa:e6:49:c6:db:29:d1:81:d2:94:24:3c:bb:36:40:
c7:90:93:35:ba:2e:97:a3:9c:a3:d7:0e:86:ef:c7:02:12:c8:
cc:b3:bd:d1:a1:1a:89:23:e8:7f:ef:ee:8d:1f:98:d2:e4:5a:
8c:c2:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:32 2025 by rpki-client