Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/vkcz1C15JQsNHSvVs48gwiXJgwM.roa
File: vkcz1C15JQsNHSvVs48gwiXJgwM.roa (raw, json)
Hash identifier: JiW1mvtAhoF1c1MnqQya486OMwjWeye/6fUjWos29Ao=
Subject key identifier: BE:47:33:D4:2D:79:25:0B:0D:1D:2B:D5:B3:8F:20:C2:25:C9:83:03
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 01856D2F3BA32406A6B56A7702C793C38B7F
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/vkcz1C15JQsNHSvVs48gwiXJgwM.roa
Signing time: Sun 01 Jan 2023 11:54:50 +0000
ROA not before: Sun 01 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6696
IP address blocks: 194.1.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3b:a3:24:06:a6:b5:6a:77:02:c7:93:c3:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jan 1 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be4733d42d79250b0d1d2bd5b38f20c225c98303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:0f:bc:f6:9a:90:30:7c:1e:f2:b6:f0:ab:
d6:74:c7:90:92:02:5f:26:a1:22:61:1d:6e:39:44:
7b:63:70:e4:ca:a9:f8:9c:94:0c:1a:3e:ca:43:61:
4f:c5:f3:29:fc:c8:3a:0c:52:6f:fc:0e:63:91:2f:
77:9a:66:a2:5a:f5:20:2b:b7:c1:b6:06:ed:50:69:
f4:91:bd:7b:60:b8:a5:89:78:62:f0:3c:17:0a:61:
2e:36:2b:55:01:44:80:47:78:88:22:61:0a:0b:49:
f6:d4:60:4a:6f:24:17:6f:f9:95:97:d5:46:01:55:
a7:0c:04:34:51:a9:99:8f:25:ef:38:8c:84:47:b7:
c0:5d:37:04:cf:37:fb:f5:16:7c:12:54:58:90:4b:
22:73:ce:cb:5d:ab:50:d4:e8:8a:3c:5d:2e:81:46:
53:6b:75:6d:c6:ef:30:6d:ff:53:b0:64:0e:52:6f:
a0:89:b6:af:8d:64:3c:c0:b2:ba:15:70:17:2f:97:
77:7a:79:ba:f6:41:7d:8b:8e:05:82:69:06:b2:3f:
57:6a:0d:6c:92:56:0f:9b:a5:8d:e1:5a:56:cd:ec:
69:cb:a7:7e:ef:cf:92:d0:c3:24:98:35:55:93:6e:
07:8c:9a:47:68:13:81:67:c2:46:b8:53:3c:50:52:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:33:D4:2D:79:25:0B:0D:1D:2B:D5:B3:8F:20:C2:25:C9:83:03
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/vkcz1C15JQsNHSvVs48gwiXJgwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7f:e3:a5:07:b0:ff:17:64:c2:17:24:fd:02:2e:cc:ce:23:
22:15:f9:cc:3a:f7:f7:73:3d:88:03:fb:d6:06:37:31:2a:ff:
22:ff:55:1f:ad:43:b4:24:3b:58:59:94:4b:71:01:7d:d6:06:
44:56:1b:a7:63:cb:2a:ed:e0:33:96:9a:2d:2c:51:d7:5c:31:
1d:6e:63:df:07:2c:46:5f:12:3a:39:71:68:24:25:5a:e0:27:
1b:35:4d:f6:51:06:28:45:2f:71:bf:40:0f:b6:c3:2e:5a:2f:
15:04:65:7d:97:81:bb:19:8a:51:13:16:c4:e4:f2:3e:c5:b4:
82:7f:35:59:79:83:2f:d0:fc:1c:08:4d:82:1d:09:a9:4e:aa:
cf:72:70:08:c5:ad:f1:d2:54:1f:b1:ab:a2:b3:0e:a9:2f:df:
4e:cf:9f:b5:fc:61:68:de:00:d4:cf:7e:35:05:e5:aa:12:d0:
fe:72:ce:df:3f:16:6d:a0:06:11:d3:61:6e:b7:a8:9d:43:30:
e9:92:1e:5d:80:3b:b5:76:f5:0d:e1:ab:40:18:0b:16:31:f0:
22:c2:64:5b:b1:b2:a5:64:c9:6c:18:fe:0c:d1:d5:69:cd:99:
f8:5c:84:8c:a9:85:46:55:dd:de:59:57:fd:87:39:e2:13:74:
88:f7:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:47:54 2025 by rpki-client