Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/VrL6rikZv9ly3r8i9DmwJ6vXCVE.roa
File: VrL6rikZv9ly3r8i9DmwJ6vXCVE.roa (raw, json)
Hash identifier: q5y9SlBvlN1rcyhdDOProTQPFG3Lzy2gCJ9AO4J2GRA=
Subject key identifier: 56:B2:FA:AE:29:19:BF:D9:72:DE:BF:22:F4:39:B0:27:AB:D7:09:51
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 01856E144E8BFE8A8A00E47B4BE8C9CDED6B
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/VrL6rikZv9ly3r8i9DmwJ6vXCVE.roa
Signing time: Sun 01 Jan 2023 16:05:02 +0000
ROA not before: Sun 01 Jan 2023 16:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50107
IP address blocks: 45.66.24.0/22 maxlen: 22
45.66.25.0/24 maxlen: 24
2a09:6140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:4e:8b:fe:8a:8a:00:e4:7b:4b:e8:c9:cd:ed:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Jan 1 16:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56b2faae2919bfd972debf22f439b027abd70951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:57:f4:ed:32:6d:e7:ab:d9:f4:0d:fd:4a:
8c:9c:b9:f8:4e:ac:5b:fb:26:ac:e1:0f:b3:1c:98:
0e:19:7c:1f:b2:11:ff:65:2d:15:58:de:05:f4:99:
aa:26:a3:4f:7c:d2:e0:48:9f:25:b6:41:e6:ab:bf:
45:03:05:e9:c8:b7:47:1a:9e:aa:b7:08:18:d0:e0:
f9:0c:dd:21:23:5f:1d:7b:2a:cd:ad:fe:42:2c:20:
4a:9a:e1:b0:3f:45:aa:39:4a:9b:9f:7c:4d:99:0e:
93:ed:cd:b1:c6:a0:08:fb:d7:7f:0f:d7:2f:3c:f2:
5e:a8:30:3c:bb:5f:c8:c2:71:b2:e4:4b:a9:77:6d:
01:c3:91:60:83:9b:4d:9d:be:56:e3:2b:ef:fa:73:
48:a9:79:be:ef:4e:14:6a:ab:d3:83:fc:85:59:14:
0d:e5:70:fa:2b:16:2a:c2:9a:e7:c0:61:f3:2d:06:
21:c7:83:36:30:2d:90:1d:bb:16:2a:ef:5b:ae:b0:
f3:1e:b8:3a:56:93:91:71:97:f1:09:71:10:6e:cd:
e0:45:38:92:c0:ce:e3:d2:8a:f7:f4:6e:04:6c:d4:
bc:1a:e2:70:53:42:ea:dd:fb:11:b3:af:9c:1f:3e:
25:be:77:bc:7c:70:64:3e:82:ea:61:1d:60:82:ce:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:FA:AE:29:19:BF:D9:72:DE:BF:22:F4:39:B0:27:AB:D7:09:51
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/VrL6rikZv9ly3r8i9DmwJ6vXCVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.24.0/22
IPv6:
2a09:6140::/29
Signature Algorithm: sha256WithRSAEncryption
aa:fa:99:23:87:2f:c4:46:85:78:05:e1:97:2a:d8:2d:f8:2c:
bc:59:2c:50:fa:76:a2:8d:76:26:40:55:36:94:b0:68:ef:e8:
47:7d:fd:37:55:bb:d0:73:b9:dc:7c:86:e6:ed:4a:1f:b1:8d:
6f:fa:7a:28:bd:23:bb:89:46:2c:4c:55:71:c6:08:85:7f:98:
a9:47:04:78:30:98:aa:ab:ff:55:6e:6c:35:7f:75:61:23:9f:
ba:2f:7d:fe:7c:18:bc:60:3b:4d:35:61:89:61:02:0b:f8:4b:
a2:61:9c:9d:33:7e:84:75:09:38:1d:90:db:82:65:0d:a8:e2:
69:6e:41:a3:50:38:fc:c9:41:45:0b:a6:19:de:f4:5e:b0:01:
74:37:39:9f:28:aa:24:1f:b2:3d:11:81:ba:58:d4:b6:52:6a:
b1:0f:92:49:d4:5a:d3:cb:e9:57:3e:32:53:dd:8e:84:49:ed:
ce:09:ce:f0:4a:44:4e:d2:6d:82:5b:f5:31:f7:84:54:44:b8:
3f:c3:1a:67:1d:e6:01:2f:4b:3f:34:d3:5b:62:17:fe:ff:6b:
4c:fb:38:8a:06:94:26:a9:66:69:60:38:74:f4:45:0d:21:67:
66:c3:04:2e:8e:b0:28:9e:b0:79:a6:ce:39:a4:43:84:d1:2f:
2c:ed:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:25 2025 by rpki-client