Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/VcZXby94OprerFHM5ScUfADi7gQ.roa
File: VcZXby94OprerFHM5ScUfADi7gQ.roa (raw, json)
Hash identifier: V4qIcxJhijZmQc5aJTej3VxE3YYtLoph2Jca5MJHTC8=
Subject key identifier: 55:C6:57:6F:2F:78:3A:9A:DE:AC:51:CC:E5:27:14:7C:00:E2:EE:04
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 01869771D721A08B78DCECB1C42CE1094CC8
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/VcZXby94OprerFHM5ScUfADi7gQ.roa
Signing time: Tue 28 Feb 2023 09:54:25 +0000
ROA not before: Tue 28 Feb 2023 09:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201225
IP address blocks: 109.232.160.0/24 maxlen: 24
109.232.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:71:d7:21:a0:8b:78:dc:ec:b1:c4:2c:e1:09:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Feb 28 09:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55c6576f2f783a9adeac51cce527147c00e2ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:91:f1:cc:ad:0e:05:f2:38:0c:aa:72:64:
e2:ac:4b:59:1a:c8:61:d3:2c:dc:08:e4:5a:d3:f0:
db:c3:ca:a0:5c:6e:a5:79:b7:e5:12:68:1b:2b:91:
0b:0c:3c:c4:c6:a7:dc:53:d1:93:6a:2a:3a:54:a6:
ac:88:7d:b1:ee:5e:86:a7:46:13:27:bf:47:fa:7f:
73:2e:8e:7a:a2:12:32:97:83:fe:85:08:17:aa:bf:
e4:4c:87:25:7f:eb:a6:15:9a:02:75:28:6a:77:2d:
7e:f4:20:33:c1:e9:fc:85:b7:bc:2a:e4:28:ff:d4:
83:e4:24:80:cb:f6:57:f7:7f:ed:97:8b:64:9d:6c:
5d:7d:6b:b8:85:4c:82:7f:47:7f:8d:02:5f:85:4a:
d6:fc:6d:27:c0:30:f2:26:4b:83:bc:85:c9:88:a0:
9b:10:7f:01:78:ff:5c:7f:9e:fd:0c:e1:c2:10:3b:
56:b2:0c:09:ad:13:99:a4:87:53:d4:91:dc:8a:d4:
9a:53:51:a8:ff:68:d1:eb:cc:81:96:2a:57:7e:8e:
db:ae:5d:7b:f8:d6:34:01:ed:4f:ee:96:83:17:89:
34:b0:7c:3f:2c:c6:c2:42:aa:0e:eb:60:51:b0:49:
f3:ee:ea:5a:7d:75:74:ac:a7:10:0b:da:89:6c:81:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:57:6F:2F:78:3A:9A:DE:AC:51:CC:E5:27:14:7C:00:E2:EE:04
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/VcZXby94OprerFHM5ScUfADi7gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.160.0/23
Signature Algorithm: sha256WithRSAEncryption
77:25:53:cc:ea:5f:a6:b6:bb:77:42:d0:51:46:67:df:59:b8:
c1:59:c8:3b:a2:d7:18:b8:fa:ee:c5:99:24:3a:d6:b4:25:6b:
db:13:26:3d:7b:51:14:62:90:b9:67:41:1e:f8:c9:8e:6b:a5:
9f:0f:d1:90:14:a6:c4:a4:a6:e5:1f:81:17:e7:f5:d1:66:8d:
81:f0:56:83:e7:e4:bd:c9:7e:24:57:5d:be:99:57:27:59:3c:
e4:3f:aa:78:35:d5:78:69:b7:a7:c9:be:91:71:d8:8c:41:38:
9b:16:8f:a6:f8:ba:f8:5a:f9:6b:a5:a8:df:bd:cf:d2:a0:10:
17:21:42:d5:45:20:8e:ad:39:70:0c:5b:dd:3c:cd:44:08:ff:
db:b1:8c:fb:4c:d5:90:25:99:16:68:4a:1c:b5:a8:8b:d2:b5:
bc:52:92:b3:70:a2:05:2e:b5:71:e9:34:d7:97:a3:2c:b2:a4:
3f:67:03:02:e3:f2:60:ce:32:3d:76:44:13:b6:a6:16:7d:91:
2f:7d:3d:03:79:03:12:7d:05:dc:1d:d6:91:08:35:2a:a6:f9:
8b:9f:cb:6f:b1:59:98:62:a2:0e:f8:dd:24:75:d8:d4:0e:4c:
36:30:14:c4:3d:0e:d3:c3:25:40:54:06:7f:f0:3d:aa:fe:cf:
e5:dd:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:53 2025 by rpki-client