Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vzp2HH413g54GoKvmnvZSCVYKyQ.roa
File: Vzp2HH413g54GoKvmnvZSCVYKyQ.roa (raw, json)
Hash identifier: 2ZbRmmLCv3+qaXUadp7rly1H93MTEv0P68enHPMn+ac=
Subject key identifier: 57:3A:76:1C:7E:35:DE:0E:78:1A:82:AF:9A:7B:D9:48:25:58:2B:24
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018921B707EA67013DC921ED487929DE2D15
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vzp2HH413g54GoKvmnvZSCVYKyQ.roa
Signing time: Tue 04 Jul 2023 16:23:10 +0000
ROA not before: Tue 04 Jul 2023 16:23:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.176.219.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:b7:07:ea:67:01:3d:c9:21:ed:48:79:29:de:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 4 16:23:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=573a761c7e35de0e781a82af9a7bd94825582b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:c8:37:eb:e6:51:0b:7c:7d:dd:1c:3e:75:
35:2b:6c:43:96:6e:85:79:fa:c5:de:9e:79:af:a9:
85:6d:ca:3e:3e:d3:55:10:e3:0b:41:06:11:c7:7e:
2a:30:f8:9a:6c:8f:d3:e2:4b:72:3c:b8:33:5c:e3:
09:80:5c:d8:de:08:17:3a:b0:af:39:c7:16:78:25:
36:49:5d:ad:78:84:76:3f:59:ca:1c:2f:4a:30:d3:
fd:7d:0d:12:14:a9:4f:78:5a:56:5b:42:fc:07:3c:
98:d1:bf:3d:4f:65:d0:fa:57:d2:28:66:0e:ef:42:
13:d0:9e:6d:1b:c7:29:1d:af:45:d3:58:bf:2b:d0:
af:13:a0:4c:99:43:04:a7:8a:b1:48:5a:9a:a4:d1:
c3:87:b1:87:a7:86:30:93:d5:b4:8f:31:d7:ee:a5:
77:c9:2f:33:cd:0f:b2:90:28:0c:97:3a:40:bf:f3:
5b:48:5a:0c:a1:6d:ec:ce:a5:c4:a1:6b:a8:25:71:
d5:83:91:c3:c2:5c:cb:47:9d:22:a4:45:a3:66:f5:
ee:73:ef:39:4a:6c:d5:27:8b:64:25:b1:56:be:5b:
d0:95:08:3c:4f:03:31:3e:c0:36:3e:70:d1:ab:ad:
85:c4:2d:8b:d5:24:37:7a:e6:b6:67:de:fb:e5:95:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:76:1C:7E:35:DE:0E:78:1A:82:AF:9A:7B:D9:48:25:58:2B:24
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Vzp2HH413g54GoKvmnvZSCVYKyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.78.0/24
89.213.41.0/24
89.213.151.0/24
89.213.170.0/24
109.176.208.0/23
109.176.211.0-109.176.212.255
109.176.217.0/24
109.176.219.0/24
109.176.221.0/24
109.176.223.0/24
109.176.245.0/24
109.176.247.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5d:9e:c1:10:87:e8:5e:5d:81:6e:16:94:4c:81:cc:45:ad:
17:14:e5:be:9c:5c:63:dd:d1:74:5a:8f:96:00:ff:91:31:2c:
f1:5d:c4:1a:f7:7f:e5:c6:d1:5b:e4:7f:d5:0a:1d:e9:00:b8:
34:5c:d1:64:97:31:11:ef:11:ed:78:4b:f5:0c:ac:c6:31:98:
ef:d3:a1:bc:b2:c3:0e:cf:cc:de:94:69:d9:a8:de:a2:c9:31:
0e:6b:08:ab:33:b9:fc:db:52:5f:6b:55:16:ce:52:6f:d1:47:
33:de:56:10:82:89:88:a1:ea:17:a4:11:17:aa:28:a1:11:34:
6f:f6:fe:7d:8f:a5:d0:d4:29:27:90:22:50:b1:14:d0:2e:96:
75:8d:3d:70:72:a9:3c:b2:e8:ed:7a:27:ac:4c:87:f3:4b:3f:
a5:0f:ae:68:5d:17:dd:3f:18:82:91:66:88:cc:5b:47:e2:37:
67:18:3a:56:77:54:ce:5d:ff:1e:e5:23:cf:17:3b:93:6a:0d:
72:89:e5:14:ac:0e:3e:8d:90:4d:00:0b:65:7a:e8:e4:b4:52:
3b:61:38:1c:7a:a7:49:99:38:55:b7:19:86:65:5c:93:dc:08:
fa:86:9c:32:35:07:b4:37:67:29:9b:8b:f4:68:8b:6d:21:e5:
b4:0a:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:57 2025 by rpki-client