Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa
File: Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa (raw, json)
Hash identifier: MVcaffMAzcoSUfe3n6YZzEG/UToSu16Y5EZbpOafvtw=
Subject key identifier: 56:18:B4:AC:2C:DF:5D:6D:07:A5:CE:A2:56:25:0C:43:5F:1F:DE:53
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 4319CD8B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa
Signing time: Tue 24 May 2022 11:01:13 +0000
ROA not before: Tue 24 May 2022 11:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60033
IP address blocks: 188.213.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125764491 (0x4319cd8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 24 11:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5618b4ac2cdf5d6d07a5cea256250c435f1fde53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:16:3d:5b:c1:97:b5:f5:1c:3a:6c:d6:05:
20:69:24:c6:fe:b7:be:92:92:eb:04:ab:53:6c:04:
f2:3f:a2:50:84:37:e2:f1:5b:95:c5:52:d5:d6:97:
b1:65:66:86:30:64:79:c8:77:99:7d:ed:86:e5:f1:
24:b7:0f:05:81:a2:ea:80:ce:89:bf:13:db:6c:48:
37:d6:bb:88:ca:41:cc:97:b0:d8:84:8a:b7:2a:14:
56:27:99:81:90:25:0b:f4:25:9d:d3:f4:20:be:16:
15:a9:68:10:bf:dd:7d:a6:c3:95:fd:0d:2e:2c:5b:
81:a8:67:74:a6:b7:d9:e1:4f:4b:50:4a:fb:2d:a6:
4f:75:e6:38:04:de:a1:55:23:bd:4a:38:fc:2a:3d:
58:3c:6d:0a:5a:aa:f5:b6:33:8d:0d:be:7c:1e:04:
90:71:a3:f7:3d:7c:f7:f4:6e:13:0a:d0:86:bb:ce:
a2:d3:bf:88:be:8c:bf:b8:94:05:c8:3f:02:66:b3:
d9:77:0f:61:01:f7:c7:c7:97:03:51:c2:57:c3:f0:
76:38:7d:42:07:36:8e:30:77:51:21:fd:90:ab:45:
14:9a:5b:fc:91:2b:bf:80:65:95:f1:b7:fc:01:fe:
06:4d:71:3f:ca:23:fb:38:09:82:d1:fe:dd:fe:ab:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:B4:AC:2C:DF:5D:6D:07:A5:CE:A2:56:25:0C:43:5F:1F:DE:53
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Vhi0rCzfXW0Hpc6iViUMQ18f3lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.217.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1d:e4:cf:5e:21:f6:b2:f8:69:64:61:05:bd:bd:e1:c4:8c:
e7:c7:13:ec:f2:85:57:c6:28:c3:dd:95:51:5b:21:11:bf:43:
3d:66:d0:f6:9f:85:c8:58:71:e5:11:64:35:aa:c2:ef:bc:b1:
b4:19:b9:a5:b0:af:4e:a8:ac:8d:f2:55:28:bb:78:98:93:b5:
7c:1e:1c:e2:5d:f6:69:78:d5:d6:e4:62:e7:12:9f:41:6f:f9:
e5:93:b6:9f:08:ed:06:a3:7e:6d:a2:7f:67:21:49:7c:58:2f:
66:55:15:5c:b9:50:2a:56:2b:e3:1d:8a:c7:1e:63:5b:c6:7c:
f9:f9:29:b0:e1:02:10:3b:78:02:77:d0:9f:0a:a0:d7:7d:9a:
b7:b5:a7:ad:ec:43:92:f4:0d:2d:0a:fe:3c:14:c6:ea:17:76:
a2:b9:3b:ce:94:b6:2c:bc:4e:8d:ef:34:c1:00:17:bd:0e:2e:
ba:e0:ea:3c:67:c5:98:cd:12:b5:bd:72:9c:10:b9:f4:39:03:
49:2f:1f:41:73:bb:4b:cc:0b:49:fe:c2:70:f9:5f:6b:86:ca:
55:5e:6d:1f:a8:ee:2d:cb:b4:77:7f:27:60:5e:11:6a:ea:d1:
7b:63:2f:ab:6f:04:df:36:8b:c4:d8:af:fc:18:63:52:bc:44:
c3:3d:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:50 2025 by rpki-client