Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Vrii54Q_mYztXPkeKbPvdHuDOMo.roa
File: Vrii54Q_mYztXPkeKbPvdHuDOMo.roa (raw, json)
Hash identifier: BoHxRC+ER9s7OSr4/GNzdBZBSaeq8uKaPdnWJmPR/W4=
Subject key identifier: 56:B8:A2:E7:84:3F:99:8C:ED:5C:F9:1E:29:B3:EF:74:7B:83:38:CA
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF97133C7EA26438852FAFB1F60994A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Vrii54Q_mYztXPkeKbPvdHuDOMo.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203252
IP address blocks: 185.246.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:71:33:c7:ea:26:43:88:52:fa:fb:1f:60:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56b8a2e7843f998ced5cf91e29b3ef747b8338ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:e7:b6:e5:39:c5:a5:3b:d6:27:77:42:a7:
99:7b:39:6a:3d:90:d5:9d:4e:a8:c4:0e:ae:b3:73:
69:34:eb:02:6f:e5:7c:52:d4:b8:3f:8b:23:13:7c:
0d:a7:fc:de:0b:70:13:9f:44:27:03:1c:5a:c7:b5:
e7:b0:af:a3:fe:e0:b7:2d:4d:67:80:ec:e7:f9:a4:
a6:b3:87:81:6c:70:cc:e8:71:75:48:42:1d:73:61:
9f:05:4a:5e:fd:9a:90:82:b9:1b:31:d5:db:9d:ec:
f4:d6:72:16:6f:02:31:01:9a:f1:fc:cb:59:83:d7:
1d:1f:1c:63:e0:d0:08:ba:6d:fa:f8:63:b2:72:55:
4a:57:89:e6:25:da:76:80:66:61:e3:e9:fb:1c:36:
33:d8:fd:4a:22:c1:fc:ed:aa:03:b9:03:67:02:41:
3c:a6:02:da:31:dd:1d:62:8a:26:0b:f3:91:4e:c1:
79:d6:2b:c5:44:a8:dd:ec:a3:63:d7:20:2b:29:7e:
03:7b:3b:ec:46:2a:74:b1:31:fe:c7:3a:95:c5:1d:
94:bd:ab:89:74:fe:c2:37:26:ee:0d:c6:c3:8c:5c:
73:15:c7:83:b8:c0:8c:f1:bc:95:40:20:6b:8e:94:
1d:8b:84:60:28:48:bc:00:2a:6f:d5:34:ac:c0:d9:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:A2:E7:84:3F:99:8C:ED:5C:F9:1E:29:B3:EF:74:7B:83:38:CA
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Vrii54Q_mYztXPkeKbPvdHuDOMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:10:ae:67:03:e8:5e:39:3b:ba:9a:6d:11:a9:6a:bc:e8:a4:
1c:bc:4a:bd:74:23:cf:8e:f0:6c:1b:85:42:03:1d:e5:0c:41:
15:07:e7:2f:02:ab:6b:ee:b7:d3:f8:97:3e:28:be:86:8d:5a:
4a:44:8f:04:6a:6a:cc:92:b7:ac:2e:bf:89:c6:14:b5:a3:cd:
7b:92:d9:ac:15:f7:83:32:ae:0e:38:69:2a:f6:22:bd:39:61:
5e:fc:81:97:bf:ac:c7:c4:62:d6:21:d3:81:9c:2c:17:b1:09:
7f:67:7f:42:d2:3b:cc:f2:a4:ac:55:85:45:18:b0:4d:5f:d2:
9d:5e:a2:07:ed:db:b2:7e:8f:f7:f6:02:f3:fd:2f:00:23:61:
df:5a:83:98:13:fd:cc:fa:c1:4c:73:ad:b1:9a:5e:79:d6:d1:
d3:64:63:d7:19:f9:3d:20:82:71:45:8e:64:86:81:4b:e5:d2:
d6:18:3a:1a:3d:b1:97:7d:53:21:83:c7:33:6f:30:61:41:82:
e5:d8:8c:de:d7:93:be:49:e8:82:ec:b7:c7:69:f9:33:22:a4:
76:90:28:d4:7c:54:1e:b2:7a:18:7b:3b:96:55:de:05:0e:78:
09:3e:d8:11:a0:25:79:49:a1:1e:45:9e:d2:e1:b4:fd:55:9d:
40:2d:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:34 2025 by rpki-client