Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/vcvZbJ6b6c5N7rfFIBQNa_Gb8X4.roa
File: vcvZbJ6b6c5N7rfFIBQNa_Gb8X4.roa (raw, json)
Hash identifier: 4dRMYEER9r6erconShLwZpTFThQqc5unlycPaCSsPlA=
Subject key identifier: BD:CB:D9:6C:9E:9B:E9:CE:4D:EE:B7:C5:20:14:0D:6B:F1:9B:F1:7E
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 01857082987DF96E3FF64A92E448CB391D84
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/vcvZbJ6b6c5N7rfFIBQNa_Gb8X4.roa
Signing time: Mon 02 Jan 2023 03:24:44 +0000
ROA not before: Mon 02 Jan 2023 03:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8542
IP address blocks: 185.81.12.0/22 maxlen: 22
2a00:ce60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:98:7d:f9:6e:3f:f6:4a:92:e4:48:cb:39:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 2 03:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdcbd96c9e9be9ce4deeb7c520140d6bf19bf17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:7d:77:6b:d0:a8:a3:bb:0d:32:83:6d:c9:
4b:53:1d:cb:a5:7f:70:f7:73:84:4e:18:bd:33:31:
3e:b1:59:77:5d:57:81:f0:56:09:f8:65:05:12:19:
9f:aa:2f:69:ba:92:3c:e4:e8:14:0e:ac:a4:72:c2:
ff:32:0c:f2:cc:58:4d:3f:56:54:bc:e3:db:17:ff:
6b:a2:6a:10:89:88:5d:49:ab:5f:22:d2:93:e8:aa:
04:10:35:94:95:f3:48:64:3a:72:33:20:e8:49:25:
05:ea:d8:88:a1:c8:c0:86:a2:ab:f4:cc:2e:4f:78:
d2:09:0c:5e:a0:84:f4:a1:97:61:da:15:66:f7:43:
ec:93:df:b3:ea:0e:69:b7:3d:e1:03:e5:34:9a:b6:
e0:49:7a:8f:0f:6e:72:84:58:69:26:68:d0:fe:f6:
72:11:03:c4:db:0e:47:bf:08:74:7a:b0:1e:ac:48:
74:b8:ed:6b:c4:08:5d:ca:ae:fe:3c:c3:44:20:6c:
72:8f:fc:77:10:74:f0:a9:56:79:5f:de:4f:bd:2e:
c3:68:a0:1a:0b:9c:b5:fa:3a:90:e1:06:e9:20:e0:
2c:15:65:ad:d0:93:4c:64:b1:85:80:86:ca:39:fc:
a5:ec:89:56:64:26:b9:d2:d8:52:24:43:fb:fa:50:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:D9:6C:9E:9B:E9:CE:4D:EE:B7:C5:20:14:0D:6B:F1:9B:F1:7E
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/vcvZbJ6b6c5N7rfFIBQNa_Gb8X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.12.0/22
IPv6:
2a00:ce60::/32
Signature Algorithm: sha256WithRSAEncryption
99:b1:8d:a3:76:c6:0d:7c:81:e5:3a:63:a8:a3:56:f4:f3:9d:
fb:84:5a:aa:e8:7f:92:b3:7e:aa:d0:13:59:0a:23:45:6a:b4:
34:e3:f0:cc:62:cd:bb:29:20:1c:15:4f:b3:8f:67:f0:2e:c6:
66:24:73:55:9a:44:43:fe:ab:0b:eb:4a:17:4c:ef:69:4e:40:
2c:39:6f:ad:b7:6b:ef:4d:67:a1:5f:bf:ae:b5:b1:fe:3d:f7:
51:44:aa:29:9e:62:62:7d:9a:38:cb:af:af:60:34:14:21:63:
f7:f2:7d:06:29:73:6e:09:f9:fe:e5:fb:61:63:aa:a0:d1:28:
2e:81:5e:8a:1b:39:1e:bf:b6:79:75:12:c9:63:ab:5c:fe:02:
24:50:cc:c4:50:2d:3f:ed:2d:4b:67:e5:62:73:01:35:6b:c3:
4d:ac:69:4e:da:85:92:6b:7a:b6:52:f4:ce:88:17:63:f4:ce:
77:62:35:96:73:14:c5:53:b5:98:e9:75:2f:36:19:4d:b3:79:
f9:6b:b3:89:9c:ca:f8:70:a7:bc:ec:c1:9b:56:11:7a:00:9d:
3a:7b:b2:0f:08:8a:41:6d:f6:e5:65:bf:df:c5:0f:35:ca:07:
25:68:29:73:01:2a:37:98:ed:4a:45:06:a6:b0:d7:02:2d:53:
6d:02:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:20 2025 by rpki-client