Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/VDAV2yPOPDrqCjUAddUEdLUKhbM.roa
File: VDAV2yPOPDrqCjUAddUEdLUKhbM.roa (raw, json)
Hash identifier: jz5uS/2BgzPcolrhGb3fBbnrvbv1fajcAd2wJjMxLFk=
Subject key identifier: 54:30:15:DB:23:CE:3C:3A:EA:0A:35:00:75:D5:04:74:B5:0A:85:B3
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 12DE396A
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/VDAV2yPOPDrqCjUAddUEdLUKhbM.roa
Signing time: Sat 01 Jan 2022 11:01:00 +0000
ROA not before: Sat 01 Jan 2022 11:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.46.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316553578 (0x12de396a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Jan 1 11:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=543015db23ce3c3aea0a350075d50474b50a85b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:8d:98:c0:b8:61:a5:cb:ba:86:01:40:92:
b7:94:ef:6a:43:ad:90:29:39:b2:69:9a:8d:b2:bd:
56:05:f2:d5:06:52:09:ab:35:2a:05:00:1f:f9:eb:
50:a3:43:c8:b4:4f:52:9c:29:46:40:aa:62:02:b4:
89:3c:aa:7f:c8:a1:8b:5e:23:c6:82:76:ad:3a:57:
14:7f:86:35:38:98:e2:e7:6a:e2:83:66:40:8a:7f:
11:ec:85:42:32:b3:37:39:4e:4b:a2:f2:8a:37:7b:
5c:6c:e8:86:a9:20:c7:4b:d1:bd:74:bb:26:98:db:
71:e1:0b:0f:85:bf:d4:c5:48:59:bd:27:7a:a8:9e:
ba:6d:b6:a5:3f:79:b1:27:0b:1a:61:12:15:4c:ef:
21:d7:3c:c9:63:8b:bf:43:3e:3d:61:20:20:db:8f:
6a:7a:77:bf:bf:ce:a7:fe:1f:75:86:5c:64:be:9e:
68:97:44:5b:3d:a1:6c:8e:96:3c:19:c1:11:c6:3f:
38:dc:78:62:07:f2:bd:3e:18:a9:3c:90:83:30:7a:
2c:ef:c9:c4:f3:d7:c3:f8:6d:94:7d:b6:1f:8e:38:
b8:f3:ec:f0:d8:0e:c2:43:23:21:15:ff:c1:80:9d:
89:48:5b:f2:78:82:08:b7:da:92:90:08:6f:25:0b:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:15:DB:23:CE:3C:3A:EA:0A:35:00:75:D5:04:74:B5:0A:85:B3
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/VDAV2yPOPDrqCjUAddUEdLUKhbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:b2:86:2f:0a:20:35:ba:10:d8:80:2d:a0:50:93:40:9d:98:
d5:0d:41:5c:7d:d7:48:e1:a5:a9:7f:d9:c2:f0:e9:f1:7f:a4:
7f:ce:83:36:50:71:1a:fd:60:32:e1:d0:56:91:a6:aa:82:8b:
e8:70:a7:2b:59:fa:85:be:d6:af:50:69:bc:01:33:bf:a0:e0:
1f:f5:75:82:a5:ec:07:de:21:2b:32:89:d1:d6:64:cb:d2:00:
17:27:36:8c:af:bc:73:7e:da:88:d7:60:30:f9:a7:d3:b1:4f:
ab:be:0b:62:dd:1c:7c:c0:11:ce:23:56:79:9e:00:6b:8c:06:
27:87:8a:00:47:2b:a3:0c:ac:d1:45:f0:15:46:3f:64:6f:0e:
f8:0b:5a:12:05:0d:59:b5:67:c5:86:37:b1:8d:38:a5:38:31:
9a:b4:dc:0a:10:86:97:70:5b:b3:d3:2b:87:11:f4:54:0c:c2:
2e:54:f4:95:35:1e:1b:46:e7:38:a8:53:4e:eb:c8:8b:42:c6:
90:bf:da:9a:96:6f:38:af:2b:df:7d:b6:10:ef:f3:d9:2f:65:
79:85:5d:be:4a:7c:c7:c8:fc:9c:96:7a:cf:ac:74:f0:c1:61:
f3:19:d0:de:da:58:3f:d5:95:08:f6:96:7e:59:b2:8a:bb:45:
4e:e6:ab:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:30 2025 by rpki-client