Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/VlG8nzn1mE5O2QpctEeSMiNARbE.roa
File: VlG8nzn1mE5O2QpctEeSMiNARbE.roa (raw, json)
Hash identifier: pLLItfpTCbtzBVEpk6CVz5t5HxbZu7lJBPyPjcl0VKE=
Subject key identifier: 56:51:BC:9F:39:F5:98:4E:4E:D9:0A:5C:B4:47:92:32:23:40:45:B1
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 03C75126
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/VlG8nzn1mE5O2QpctEeSMiNARbE.roa
Signing time: Sat 01 Jan 2022 09:55:21 +0000
ROA not before: Sat 01 Jan 2022 09:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39007
IP address blocks: 86.100.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63394086 (0x3c75126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jan 1 09:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5651bc9f39f5984e4ed90a5cb4479232234045b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:16:3f:00:d3:05:6f:25:78:eb:37:95:1e:
45:e1:22:86:3f:bb:3f:b1:45:8b:d2:67:15:42:5a:
5c:43:d5:8f:a1:4d:86:75:56:08:d5:2f:4c:af:43:
80:bb:ab:47:2e:1a:4c:68:b9:d2:22:f1:1f:b5:17:
f3:c4:a8:4b:c0:dd:de:8d:ee:e4:15:7e:64:b9:c9:
69:46:70:96:81:15:dc:d8:9d:8e:98:31:40:1d:e0:
d1:e9:bd:4f:69:2e:1a:18:de:86:7a:e6:f5:a5:aa:
47:a5:ef:50:fc:25:3b:1c:e6:b5:98:1f:80:3b:f0:
a5:40:5b:7c:72:0b:65:32:cb:3a:5e:c8:99:6f:b7:
97:7a:69:ed:5d:59:3b:04:0e:40:64:be:2b:fb:e9:
52:92:a3:e5:b8:17:31:22:39:97:53:01:21:c5:34:
a7:b0:89:95:b1:2f:30:2a:ab:70:de:3a:73:bb:58:
cb:d2:76:5b:55:39:02:f7:ff:4e:94:63:96:f2:0f:
89:33:88:14:cb:fc:0a:3a:78:ff:6c:7e:3e:db:8e:
f8:44:6b:0e:b3:5b:5a:2b:60:a8:d9:12:64:f7:78:
2b:d4:1b:a2:c2:e8:b4:47:1b:56:4b:27:8f:92:ee:
03:99:42:7d:bb:b2:93:6b:f2:42:60:75:12:b3:6c:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:51:BC:9F:39:F5:98:4E:4E:D9:0A:5C:B4:47:92:32:23:40:45:B1
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/VlG8nzn1mE5O2QpctEeSMiNARbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:d2:9c:eb:89:66:43:89:0b:36:6a:6a:0d:7c:6e:24:1e:05:
4d:65:07:5f:8e:7f:e8:8e:fd:39:d3:9d:e5:4f:3d:14:a8:20:
02:92:29:fe:45:85:28:a6:8b:d7:d4:06:25:8c:6f:d3:21:aa:
65:cd:ba:9b:09:7a:38:e7:78:99:ab:fa:f6:ef:c3:e2:2f:8f:
8a:aa:e1:be:8f:10:04:0f:62:ca:6d:65:da:aa:f9:65:42:a2:
c8:af:01:12:77:d8:d0:49:d2:9e:d6:d0:a1:5e:61:9d:8d:3d:
7c:e2:62:97:bc:8d:13:f4:dc:72:c7:eb:c0:ff:9a:07:c3:ee:
6a:0c:7c:b8:15:a2:7f:16:bb:6a:56:09:5c:fb:9b:d1:f7:68:
97:a5:9b:bb:07:62:7b:2d:8b:7f:fc:0e:ca:d9:4f:b5:73:da:
b6:76:f3:72:34:f2:af:fd:83:94:10:76:8b:d6:f3:30:37:b9:
46:bd:c1:0c:a3:e7:22:08:a1:75:cf:17:bc:ed:06:cd:a2:ed:
38:3f:40:ab:71:f5:64:e7:26:4b:72:63:0b:93:0f:b9:75:0e:
a8:97:d3:02:db:18:27:01:03:bb:54:8b:a8:c3:06:57:3a:88:
2e:bd:ad:26:15:df:48:a3:80:f1:80:6a:5f:84:20:e4:0e:71:
5f:3a:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:50 2025 by rpki-client