Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vYPLool2JSEft5GOgoySqhsRBXQ.roa
File: vYPLool2JSEft5GOgoySqhsRBXQ.roa (raw, json)
Hash identifier: gbi9aqaV7uD6oJ8tlXhXMo0VIh7oOIL9Ch79JLIbq10=
Subject key identifier: BD:83:CB:A2:89:76:25:21:1F:B7:91:8E:82:8C:92:AA:1B:11:05:74
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0186E94520B98F1D2E87166416F15E128ECF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vYPLool2JSEft5GOgoySqhsRBXQ.roa
Signing time: Thu 16 Mar 2023 07:14:27 +0000
ROA not before: Thu 16 Mar 2023 07:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:202::/32 maxlen: 32
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:45:20:b9:8f:1d:2e:87:16:64:16:f1:5e:12:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 16 07:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd83cba2897625211fb7918e828c92aa1b110574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:a8:07:99:41:41:7f:52:67:7c:b4:be:bf:
23:9e:1e:9d:ac:a3:66:ed:4c:09:46:a2:97:51:0c:
db:e4:a2:7b:ab:03:fa:b5:a1:0a:82:05:b1:ec:c3:
51:2f:a7:17:53:60:ca:76:45:00:5d:3f:69:09:5b:
35:93:56:f8:0e:0a:04:56:fe:77:90:86:1a:dc:fa:
f9:a5:07:30:33:03:e5:1e:58:46:93:6d:8c:65:b1:
fe:1c:78:db:80:cf:88:2c:1b:f7:14:0f:51:c5:15:
61:8c:ab:2e:d2:7f:94:33:ef:1d:a1:b6:dc:e0:8a:
a0:4d:e9:7a:82:a8:d0:b9:54:32:d2:93:25:f5:14:
62:ee:a2:8e:3d:8f:31:12:18:72:e3:07:b9:ca:70:
6f:b9:96:84:fd:b1:bd:87:3b:5a:0b:e6:8b:d3:49:
46:61:56:74:6c:7e:a0:35:6d:46:34:e0:f2:f3:e2:
94:c7:1d:18:5c:f8:2d:e5:af:84:0d:d9:83:97:fa:
78:66:a5:1d:66:56:d6:2a:3a:f1:9e:55:73:aa:d5:
27:12:4b:03:2c:12:70:e3:9b:86:5e:8b:e1:00:45:
b4:58:db:42:00:75:fb:ed:a3:cb:ea:5a:2c:1b:90:
7c:d7:3d:d4:26:85:80:54:c2:fb:16:18:f8:ac:08:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:CB:A2:89:76:25:21:1F:B7:91:8E:82:8C:92:AA:1B:11:05:74
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vYPLool2JSEft5GOgoySqhsRBXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a09:4e01:3000::-2a09:4e01:4fff:ffff:ffff:ffff:ffff:ffff
2a10:c0c0::/29
2a11:200::/36
2a11:200:4000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:c8:12:ac:15:7b:45:dc:77:06:8a:d0:2d:16:ef:cb:57:af:
13:d3:ea:4e:dd:08:b1:79:3a:a1:36:19:40:d8:68:27:e9:3d:
5b:57:e5:64:29:31:d4:f0:a5:7c:38:de:d4:b6:e3:7e:75:2b:
d0:f6:c0:9b:ca:f8:60:79:17:8f:16:28:d0:14:17:c3:05:a1:
04:73:fe:ac:af:be:b8:e5:5a:13:91:08:4d:43:d4:22:86:51:
1d:7b:3b:44:88:4f:5f:7b:59:2f:ef:9a:3b:20:72:bb:e9:c3:
be:f0:2a:27:33:1d:24:82:3d:e7:2d:c0:06:38:25:df:28:db:
d5:bf:db:d4:37:b3:c8:a3:f5:24:ed:ae:e6:e3:6c:eb:5b:ed:
76:aa:ac:9b:ca:4c:01:f1:6c:ce:55:2c:89:b8:b2:b6:17:00:
a1:3f:29:cb:47:56:24:c5:cf:9e:44:c2:5d:2a:3e:3e:91:22:
77:e6:ea:59:ec:55:ac:51:bd:5e:35:bd:19:ad:41:db:9b:17:
e3:64:5e:96:52:24:de:ae:65:31:2d:3e:d0:42:ce:79:dc:82:
28:f8:10:0d:ff:d0:00:5c:1d:fc:cb:e9:84:1b:56:d1:e5:c0:
41:8b:c9:73:16:97:9a:a1:3d:f0:8e:87:22:26:77:fe:b8:4b:
db:9d:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:05 2025 by rpki-client