Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vb1u-MjAlJsOkkXwDJc5XhusTtU.roa
File: vb1u-MjAlJsOkkXwDJc5XhusTtU.roa (raw, json)
Hash identifier: +Es7u7giyCD5JZIs/CM2zKcL/kTek8jtUDA8IHzx2Zo=
Subject key identifier: BD:BD:6E:F8:C8:C0:94:9B:0E:92:45:F0:0C:97:39:5E:1B:AC:4E:D5
Certificate issuer: /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial: 018824E96BA6D3B122512099F8C959D27894
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vb1u-MjAlJsOkkXwDJc5XhusTtU.roa
Signing time: Tue 16 May 2023 14:14:17 +0000
ROA not before: Tue 16 May 2023 14:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213065
IP address blocks: 145.84.24.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:e9:6b:a6:d3:b1:22:51:20:99:f8:c9:59:d2:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Validity
Not Before: May 16 14:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdbd6ef8c8c0949b0e9245f00c97395e1bac4ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:25:0a:78:9a:fa:a8:57:9b:a1:36:a4:20:
2c:eb:4a:a3:d0:00:f9:eb:46:38:fd:cf:fd:80:b3:
95:99:1e:e4:e1:a7:fb:02:85:30:bd:7e:16:e5:0a:
0b:8c:48:a6:cf:dc:8c:4e:f9:a0:64:62:c1:92:46:
c7:c1:55:37:2f:1a:a1:78:5d:09:82:00:0e:05:15:
8e:81:da:ce:c1:9f:10:a8:4e:e3:1b:25:bb:7a:db:
3b:e9:bd:39:fa:69:7d:52:6d:d9:f0:3c:e9:f9:2d:
07:d4:ac:9d:b0:fd:e2:0d:84:c0:b4:f9:6b:8d:4e:
66:7e:ea:24:71:6b:77:e9:3b:48:a4:f9:51:c0:f7:
02:85:50:07:9b:e5:cc:1a:34:2d:c5:f7:fb:f8:0a:
08:51:85:ed:c2:ad:ba:47:0c:ee:bc:52:cf:d3:11:
50:64:42:0c:6b:9b:10:14:44:35:88:70:cb:8e:bb:
ec:43:31:9d:c8:87:18:25:0f:88:48:35:05:70:fa:
b4:99:ba:8c:84:66:26:15:39:ce:44:9d:1d:4b:84:
75:83:e4:79:4d:16:9b:65:75:55:23:4c:c0:06:f6:
0f:bb:37:26:bf:9f:a6:3c:8f:a5:d8:ad:7b:5c:27:
bd:4e:2f:d4:1a:9f:d5:b1:26:44:4e:41:ec:6d:d1:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:6E:F8:C8:C0:94:9B:0E:92:45:F0:0C:97:39:5E:1B:AC:4E:D5
X509v3 Authority Key Identifier:
keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vb1u-MjAlJsOkkXwDJc5XhusTtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.84.24.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:03:04:40:96:52:50:4a:d4:58:8f:68:3e:59:1e:62:dd:c9:
f2:5b:31:a7:81:99:60:55:b6:0a:25:ee:44:e9:56:20:05:94:
25:a9:9e:a2:d8:dc:74:8c:19:26:f5:9b:bd:3b:34:31:95:4c:
e4:fb:b0:48:03:2d:64:66:cd:22:11:05:b3:de:af:51:40:9b:
60:45:38:91:7b:99:97:0e:96:4b:3e:46:81:31:8a:46:3f:08:
35:64:2f:7e:6e:21:d8:93:3f:4e:6b:6b:f2:ff:d3:cb:ba:15:
3c:56:16:a2:40:4a:0f:25:98:7b:6c:ea:49:25:33:e7:75:ea:
47:75:aa:2b:13:fd:a9:51:35:07:a9:dd:8b:18:44:a1:d9:3c:
d4:76:c6:3f:8e:48:30:00:0d:38:5f:cf:6e:4e:9a:3e:fd:7f:
46:eb:e8:d6:c8:86:35:f7:9a:c5:29:e7:8d:bb:dd:90:18:3b:
50:e7:5f:87:ca:e5:f1:06:85:ea:6e:97:b4:d9:5f:8a:b8:5f:
95:ec:8c:cb:4d:f1:84:03:f2:73:e8:b8:2e:02:7a:fd:53:0d:
95:dc:79:66:de:a0:b9:0c:73:8f:e7:94:55:4d:9d:c0:7c:e0:
17:a0:c0:f9:59:3c:86:69:ff:37:d9:ed:91:9d:39:4c:69:e8:
2f:7d:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:19 2025 by rpki-client