Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vpxJC9HIf3hqHc-NeXn73hfjCCo.roa
File: vpxJC9HIf3hqHc-NeXn73hfjCCo.roa (raw, json)
Hash identifier: 5exqD7GOXRXtzD5wUu9TaCIVpdclw8k8Cg3iWN9TKaQ=
Subject key identifier: BE:9C:49:0B:D1:C8:7F:78:6A:1D:CF:8D:79:79:FB:DE:17:E3:08:2A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BD20137F41B421A9502630743A8C9DD2C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vpxJC9HIf3hqHc-NeXn73hfjCCo.roa
Signing time: Wed 15 Nov 2023 08:02:57 +0000
ROA not before: Wed 15 Nov 2023 08:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.152.179.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
109.176.248.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:01:37:f4:1b:42:1a:95:02:63:07:43:a8:c9:dd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 15 08:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be9c490bd1c87f786a1dcf8d7979fbde17e3082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:7a:4d:40:cf:70:ac:b1:b8:df:6f:d6:47:
9c:f6:f2:cf:02:da:4d:0c:10:ee:20:8a:b4:63:72:
ae:94:ef:8d:e6:2f:95:cb:ae:e3:9d:cb:bb:cb:33:
eb:c3:ef:07:2f:67:7b:c0:37:d9:53:3c:aa:f9:79:
80:4a:22:d6:cc:7b:2c:5a:a5:a0:87:f8:4e:71:27:
74:f8:45:0b:29:f9:ef:4e:ee:ff:80:53:c3:a9:da:
c2:45:71:88:37:df:76:d8:8e:5e:4e:b6:fa:95:45:
d3:dd:8a:76:af:36:33:04:b8:4b:1a:73:5a:5a:3d:
bf:ed:33:eb:c2:70:07:ed:af:64:7d:10:44:a5:8f:
f1:78:06:62:2d:bf:5c:e5:82:44:5e:1a:c1:47:cb:
67:88:7d:31:27:ac:12:bc:3f:7b:b1:5c:2f:0b:74:
33:cc:70:bb:5f:36:96:d3:8f:c4:f5:4d:f4:54:cc:
f4:09:3a:10:de:a7:d7:f4:78:c9:6a:b2:51:9f:5a:
02:d6:67:3f:41:11:ef:7b:81:0f:8c:c8:7d:f8:08:
d8:ce:1a:6c:72:ea:5c:20:e6:29:ba:49:6d:f2:82:
67:80:eb:c1:df:f3:23:5e:cc:64:f3:4f:fc:41:4a:
6b:60:5b:42:02:dd:99:71:46:8e:65:d3:9e:d9:99:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:49:0B:D1:C8:7F:78:6A:1D:CF:8D:79:79:FB:DE:17:E3:08:2A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vpxJC9HIf3hqHc-NeXn73hfjCCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.152.179.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.180.0/22
109.176.248.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a5:71:f6:f6:30:0f:28:a4:d1:1c:99:9a:b9:5a:4c:00:4f:
aa:06:f4:54:c4:48:5f:63:1f:6b:c8:fd:50:66:be:81:69:e5:
f6:bd:d1:a0:bd:38:50:74:bc:dd:42:be:f2:b2:c5:7e:bc:dd:
39:9a:f6:9e:69:b0:f6:17:21:5c:6e:b9:25:5b:81:2f:64:19:
b2:5a:22:04:f1:30:c1:c0:23:ce:ad:4a:a6:4a:1c:45:0c:ba:
44:01:e8:e3:03:8d:bd:92:60:ec:6e:49:f3:a8:9e:b6:7f:b5:
48:10:48:1a:9b:b8:a7:62:74:c7:dc:61:ac:c5:bb:b8:eb:4e:
a1:c2:9f:95:72:f0:63:46:00:27:9c:52:fa:f2:3e:78:4f:31:
49:79:d3:13:da:b4:aa:68:64:1b:80:3e:3d:e0:44:2e:55:27:
26:29:c7:d5:aa:2d:35:da:25:74:b0:7e:3f:02:2a:68:b4:47:
72:99:44:57:60:0a:8e:36:02:9f:44:9d:ba:9b:63:fc:25:5d:
d2:e3:72:30:27:4c:0e:59:46:d0:b0:d6:96:56:1d:3a:ea:21:
fa:74:38:96:87:55:e4:4b:6e:6f:ce:b0:e0:e3:fd:7a:0f:c7:
1b:5f:02:fd:f1:d9:d9:77:7a:07:44:65:30:d0:83:3d:43:3c:
5a:ce:ac:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:53 2025 by rpki-client