Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/vbuHmQs2WLAaoUh1QCvoXH5j0_4.roa
File: vbuHmQs2WLAaoUh1QCvoXH5j0_4.roa (raw, json)
Hash identifier: qVg0HLvxIzOmZySn5ClbwNwrvyRzZnD8oXr9Xd4u+qY=
Subject key identifier: BD:BB:87:99:0B:36:58:B0:1A:A1:48:75:40:2B:E8:5C:7E:63:D3:FE
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 0188AE3732ACC227D8C090572D8767AE9458
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/vbuHmQs2WLAaoUh1QCvoXH5j0_4.roa
Signing time: Mon 12 Jun 2023 06:07:12 +0000
ROA not before: Mon 12 Jun 2023 06:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8473
IP address blocks: 109.228.128.0/18 maxlen: 18
213.80.96.0/19 maxlen: 19
5.150.192.0/18 maxlen: 18
85.24.128.0/17 maxlen: 17
82.196.96.0/19 maxlen: 19
178.174.128.0/17 maxlen: 17
212.85.64.0/19 maxlen: 19
79.136.0.0/17 maxlen: 17
217.31.160.0/19 maxlen: 19
94.254.0.0/17 maxlen: 17
213.164.192.0/19 maxlen: 19
213.136.32.0/19 maxlen: 19
185.57.4.0/22 maxlen: 22
185.90.176.0/22 maxlen: 22
62.63.192.0/18 maxlen: 18
81.170.128.0/17 maxlen: 17
176.10.128.0/17 maxlen: 17
98.128.0.0/16 maxlen: 16
212.116.64.0/19 maxlen: 19
46.59.0.0/17 maxlen: 17
195.178.160.0/19 maxlen: 19
217.27.160.0/19 maxlen: 19
37.123.128.0/18 maxlen: 18
2a02:508::/32 maxlen: 32
2001:9b2::/34 maxlen: 34
2a02:508::/29 maxlen: 29
2001:9b0::/32 maxlen: 32
2001:9b0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:37:32:ac:c2:27:d8:c0:90:57:2d:87:67:ae:94:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jun 12 06:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdbb87990b3658b01aa14875402be85c7e63d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:6e:e8:91:93:8c:c5:57:00:eb:1e:01:cc:
2a:dc:b3:fe:96:e6:d3:5d:9f:06:17:4f:2e:8c:3b:
b8:e2:c7:0f:b4:cb:34:43:21:d8:30:cf:07:3e:1c:
1e:64:4c:85:2d:96:de:e7:bf:1a:0f:89:39:74:b6:
58:65:7f:e6:9b:aa:b9:ce:d3:c5:40:d9:ed:46:97:
6e:62:75:5a:fe:91:9c:65:b7:a6:f3:1e:49:71:51:
17:f0:d3:20:0a:0a:82:c2:b9:91:51:44:57:f4:0d:
89:50:85:3e:42:8b:34:b9:ec:52:e9:dc:6d:3e:3c:
22:c6:11:78:76:5c:92:40:32:a8:91:d9:c2:9d:a9:
56:4d:47:05:67:4e:52:b3:57:67:35:22:7f:94:d9:
85:e5:84:ba:32:ad:75:5e:59:e4:e0:85:cf:23:28:
a2:d3:65:59:67:47:29:b0:fa:b5:ff:ab:1c:5a:82:
75:c7:b9:d4:28:52:b0:a3:1f:d2:b6:fb:bc:65:78:
96:4d:48:68:78:34:3d:6c:92:25:81:58:f7:76:b7:
b5:f2:49:35:aa:74:a3:d6:8d:b1:9c:23:9d:1e:44:
7e:09:86:63:0c:e9:01:8c:f8:78:ae:49:03:a3:c6:
d4:85:e4:91:55:ba:6b:e5:87:2c:21:3e:9c:ae:a2:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:87:99:0B:36:58:B0:1A:A1:48:75:40:2B:E8:5C:7E:63:D3:FE
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/vbuHmQs2WLAaoUh1QCvoXH5j0_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.192.0/18
37.123.128.0/18
46.59.0.0/17
62.63.192.0/18
79.136.0.0/17
81.170.128.0/17
82.196.96.0/19
85.24.128.0/17
94.254.0.0/17
98.128.0.0/16
109.228.128.0/18
176.10.128.0/17
178.174.128.0/17
185.57.4.0/22
185.90.176.0/22
195.178.160.0/19
212.85.64.0/19
212.116.64.0/19
213.80.96.0/19
213.136.32.0/19
213.164.192.0/19
217.27.160.0/19
217.31.160.0/19
IPv6:
2001:9b0::/29
2a02:508::/29
Signature Algorithm: sha256WithRSAEncryption
df:00:4e:38:35:76:62:6f:31:ee:e8:f1:a5:af:9e:4d:8b:f0:
72:16:27:11:3b:0f:bb:51:0b:f3:b6:90:54:19:d2:26:94:76:
17:96:fd:da:35:d5:81:cd:43:f3:68:80:16:46:e3:97:f8:b2:
f7:78:df:a0:f9:02:65:72:3f:94:8c:e0:27:a3:0d:17:2d:77:
02:1e:26:29:85:4a:ba:ac:d1:a1:bd:32:e0:e1:f9:2d:50:a0:
90:39:68:9e:41:3a:41:75:52:53:eb:38:e6:d7:1a:6e:42:04:
42:65:b2:57:ce:5a:75:31:3d:50:18:b4:66:ed:09:5b:53:91:
c6:ae:1a:70:47:08:2b:e1:1d:22:40:ff:63:b7:03:9b:f2:7b:
78:28:96:8c:1d:2a:66:a7:f2:36:b7:26:67:7e:72:0e:7b:b9:
18:56:a8:e3:66:93:f6:80:08:1c:49:73:c0:ff:49:a8:ee:e7:
04:fb:f5:6d:6d:78:68:30:6f:51:f2:b9:49:36:02:3d:cf:ba:
1a:d0:33:3e:a9:e5:50:cb:ef:00:10:46:de:23:1f:3c:37:c6:
eb:05:ab:f8:b5:fe:b0:91:19:d7:23:0b:36:24:97:91:95:86:
2c:4d:6c:f3:93:89:39:7c:ec:54:2e:45:d8:2a:a4:29:f5:55:
ff:4c:5f:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:51:10 2025 by rpki-client