Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/VEUQvoyCN8tuVktDPisZhdY6Ra4.roa
File: VEUQvoyCN8tuVktDPisZhdY6Ra4.roa (raw, json)
Hash identifier: GDO+O986IbADsm9CW0wQrJCvKbi3DcxP9LNmuuLek2Y=
Subject key identifier: 54:45:10:BE:8C:82:37:CB:6E:56:4B:43:3E:2B:19:85:D6:3A:45:AE
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 018C8073DD9494E747566E7BC3EB5BEFEE75
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/VEUQvoyCN8tuVktDPisZhdY6Ra4.roa
Signing time: Tue 19 Dec 2023 05:02:06 +0000
ROA not before: Tue 19 Dec 2023 05:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15969
IP address blocks: 45.86.212.0/22 maxlen: 22
185.7.170.0/23 maxlen: 23
185.7.168.0/23 maxlen: 23
46.227.240.0/23 maxlen: 23
46.227.246.0/23 maxlen: 23
46.227.242.0/23 maxlen: 23
46.227.244.0/24 maxlen: 24
46.227.245.0/24 maxlen: 24
2a01:5e00::/29 maxlen: 29
2a01:7600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:73:dd:94:94:e7:47:56:6e:7b:c3:eb:5b:ef:ee:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Dec 19 05:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=544510be8c8237cb6e564b433e2b1985d63a45ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:51:88:52:9c:44:e6:54:71:19:a6:04:18:
a2:9a:cd:6a:41:25:41:91:b0:8e:31:3a:f6:9d:cc:
ce:6e:71:6a:bb:ac:29:b5:c4:3a:16:cf:24:2e:05:
c0:b5:a5:ef:ae:5f:a0:80:06:0f:1f:3c:a6:fd:8d:
80:5a:23:86:d8:b7:3c:d4:56:de:e4:b2:e7:6c:54:
03:71:4e:20:67:7c:86:d1:ad:d7:3f:5f:25:39:26:
7c:61:b7:ee:83:d6:91:f6:a5:77:9d:dc:25:5f:08:
cd:90:af:b4:4c:a0:f0:f0:31:21:18:11:50:29:c0:
12:00:d9:87:3a:9c:8b:77:7c:83:2d:63:c9:c9:5b:
22:ed:de:5f:82:5c:4f:de:dd:7d:49:de:ac:05:ed:
18:35:2a:dd:df:fc:fd:e9:ec:49:a1:1f:25:c0:92:
fe:2a:8a:9e:85:5d:c8:e3:43:59:6c:a7:1f:a0:07:
ff:40:14:37:bd:9e:7f:ee:da:da:25:d8:69:0b:27:
6f:64:72:61:ba:16:e5:11:50:e5:f8:01:76:a5:5f:
28:51:de:39:23:25:6d:f4:de:e4:e2:88:46:0f:91:
40:b5:6e:dd:c6:12:d8:e7:ab:65:de:f4:60:1d:ad:
ec:5e:f5:8b:44:ea:e9:8a:9a:45:e4:81:d5:6e:81:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:10:BE:8C:82:37:CB:6E:56:4B:43:3E:2B:19:85:D6:3A:45:AE
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/VEUQvoyCN8tuVktDPisZhdY6Ra4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.212.0/22
46.227.240.0/21
185.7.168.0/22
IPv6:
2a01:5e00::/29
2a01:7600::/29
Signature Algorithm: sha256WithRSAEncryption
7c:0b:f2:b6:fa:8a:9f:31:7a:e7:6c:88:1e:c8:8d:31:70:3b:
08:3a:e6:99:9f:37:38:0b:72:9e:94:cd:45:62:d7:ab:dd:c9:
b3:4f:11:a9:fa:6d:94:64:9b:73:72:7b:2c:08:7a:01:29:6a:
13:2b:ee:31:39:08:4c:ad:18:61:96:24:43:88:6f:15:99:40:
c6:06:bc:97:a5:68:61:9c:7b:af:4b:5c:cd:e1:a0:d8:1c:93:
25:3a:44:e1:0b:6a:98:4b:a7:e8:6b:0d:c8:46:d7:cf:aa:a6:
95:b0:e6:aa:4a:e0:70:db:ac:94:42:b4:8f:75:83:ed:df:fa:
0f:32:f3:5a:85:18:57:4d:ae:75:98:7a:16:00:d6:6b:98:8d:
a0:92:0f:1c:54:84:8d:da:83:4f:3e:9c:81:d2:5b:e5:08:21:
58:6f:82:dc:31:35:e1:6f:63:78:d4:56:58:3f:58:1c:3b:fe:
45:2c:e0:c4:60:73:ca:b0:62:33:d8:9c:ec:03:7b:8f:56:23:
ac:03:28:34:2d:ed:6c:67:6a:93:a9:8c:a0:9b:c9:d5:fd:c3:
ef:1a:be:c5:33:45:3b:86:4d:18:5c:78:eb:6e:92:f6:37:10:
6c:e1:35:7c:d5:e8:71:c4:29:07:33:25:02:92:57:d7:3a:99:
bc:7d:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:12 2025 by rpki-client