Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/VLuiIPiP09_fPo9-CF1zFXGC3pk.roa
File: VLuiIPiP09_fPo9-CF1zFXGC3pk.roa (raw, json)
Hash identifier: 0Gg2mswUVhSoBBlIyPOdJBT+J28ldzLpfaSnFfAxZcI=
Subject key identifier: 54:BB:A2:20:F8:8F:D3:DF:DF:3E:8F:7E:08:5D:73:15:71:82:DE:99
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 018571D7D2CA0E715E0F9C63AC0C37DB4736
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/VLuiIPiP09_fPo9-CF1zFXGC3pk.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33988
IP address blocks: 185.63.128.0/22 maxlen: 24
2a04:f500::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d2:ca:0e:71:5e:0f:9c:63:ac:0c:37:db:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54bba220f88fd3dfdf3e8f7e085d73157182de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:28:01:c4:2b:b9:fe:7f:d3:1f:c6:f5:4c:
9b:02:b8:82:19:4a:47:97:7d:a9:95:6c:1b:07:85:
23:34:21:2d:c6:6e:b4:da:6b:7b:a8:24:4d:06:ca:
f1:2e:9a:2d:8e:5e:81:42:75:cf:73:82:fa:e0:42:
3d:cc:3a:e2:96:2b:12:41:e4:fc:66:8d:7a:35:d6:
dd:a8:56:e9:f4:a4:76:d3:8c:47:ee:73:1c:3c:95:
b9:e1:40:b0:a4:ae:51:6b:a9:9e:0a:4a:14:31:0a:
a8:15:ef:d0:ba:7a:18:0c:08:19:bb:6f:c1:0e:25:
be:8f:3b:92:24:89:c1:4e:63:cc:c6:5f:dd:30:77:
b4:37:cf:3b:47:6a:5e:11:03:50:16:d2:73:c6:d4:
07:01:5a:43:37:2f:54:ca:79:cf:e0:49:67:6c:b7:
55:98:71:99:ea:e2:3e:8d:95:44:29:3a:88:0d:61:
55:df:fc:d2:4b:3e:b1:ce:dd:6c:d8:42:21:e7:1b:
c2:7f:0e:8d:f3:e5:1f:03:c2:09:c6:1b:81:1b:69:
c0:ef:2a:cf:9f:81:44:13:a0:d5:02:27:bf:bf:d5:
4a:eb:90:e8:4a:91:4d:d9:8b:8e:cc:1c:fe:02:e9:
80:2a:23:3c:4f:3c:93:06:4f:ba:11:f4:00:63:66:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:A2:20:F8:8F:D3:DF:DF:3E:8F:7E:08:5D:73:15:71:82:DE:99
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/VLuiIPiP09_fPo9-CF1zFXGC3pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.128.0/22
IPv6:
2a04:f500::/29
Signature Algorithm: sha256WithRSAEncryption
a2:6a:2c:81:d0:a1:fd:c4:a2:f1:55:8b:81:8c:6d:3c:96:f2:
bd:65:81:d3:71:c6:db:65:51:fb:a5:63:5d:2e:cb:e6:5d:3a:
61:c4:86:0d:c7:61:b0:0d:6e:4d:ea:cb:5d:6c:d0:e1:9f:06:
d8:b7:ca:b4:0d:9e:85:0a:cd:c6:3c:48:45:dd:77:08:b0:27:
44:b6:1e:4c:75:37:b1:c1:ce:67:0f:c1:d2:96:2b:2b:c2:89:
48:c1:1c:a4:fc:1d:38:90:12:1b:08:d5:e7:d6:38:04:69:3a:
03:fa:ea:03:74:82:fb:7a:df:e4:f5:ba:b5:46:0c:ff:5e:a0:
f5:d6:a6:cc:b1:d2:52:a1:cd:be:45:aa:cd:62:c6:14:bb:4d:
0f:b4:63:3e:4a:97:94:dd:35:de:63:7f:02:8e:24:e0:cd:3c:
e9:e2:f9:d3:e1:cc:ce:aa:77:27:b9:35:55:21:56:c2:0a:3e:
33:fc:12:14:c3:41:ea:96:35:a5:6f:02:69:6c:cf:db:92:fd:
87:2f:54:81:68:f3:47:bd:8c:cd:03:89:26:9f:1d:78:60:7a:
62:ae:1a:11:c8:ca:57:57:e1:a3:63:a3:07:81:7b:3d:d5:24:
47:e1:a1:51:45:1e:d1:5b:6a:94:fe:5b:a9:4f:65:eb:e8:f1:
64:c3:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:29 2025 by rpki-client