Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/vHpqmbc6tZ05wJsouXLl1DHmBv4.roa
File: vHpqmbc6tZ05wJsouXLl1DHmBv4.roa (raw, json)
Hash identifier: 1PKhORIwksCMLfQKdRnhI30ilj30H66yXNPxJn1Zomk=
Subject key identifier: BC:7A:6A:99:B7:3A:B5:9D:39:C0:9B:28:B9:72:E5:D4:31:E6:06:FE
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 18F829E6
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/vHpqmbc6tZ05wJsouXLl1DHmBv4.roa
Signing time: Sat 01 Jan 2022 14:01:01 +0000
ROA not before: Sat 01 Jan 2022 14:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49673
IP address blocks: 185.54.244.0/24 maxlen: 24
94.247.111.0/24 maxlen: 24
94.247.110.0/23 maxlen: 23
94.247.110.0/24 maxlen: 24
2a02:47a0:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418916838 (0x18f829e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jan 1 14:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc7a6a99b73ab59d39c09b28b972e5d431e606fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:bb:69:92:1d:82:d7:b7:80:9f:7f:d5:d7:
7b:17:eb:c5:10:3b:f4:c2:ff:08:42:7b:b6:9f:0f:
44:66:9c:85:70:9a:c8:01:78:ae:97:b7:1d:f3:e2:
68:cb:9f:b3:5c:27:84:cb:8b:59:63:7b:e7:3f:8d:
f7:ef:eb:f9:d1:55:d4:50:76:2e:48:d8:14:c4:9f:
7e:37:8e:42:7f:37:36:51:34:6a:c4:1d:79:f4:6b:
30:9a:5f:dc:71:83:39:39:c7:6c:08:01:99:fc:41:
41:d5:e9:30:a3:6b:17:8c:29:82:cf:7b:69:df:5d:
ae:ad:4c:e3:d7:33:6d:3b:89:3e:e6:e8:0e:75:55:
e4:71:91:0c:eb:a1:31:2d:42:67:82:62:6f:36:6a:
56:22:f8:70:d8:e8:0d:c6:27:c4:96:d7:b5:e8:c7:
cb:6f:06:f7:7e:15:d1:e2:60:7a:df:01:89:e5:a0:
c8:30:89:6d:77:97:2e:f8:0f:1f:26:96:09:8a:de:
59:4f:05:8d:10:97:d0:39:67:48:56:82:b4:56:5c:
32:87:19:46:45:5d:86:80:e1:c3:1e:69:6b:b7:1e:
1c:9a:8d:55:a9:ac:62:14:fc:53:e5:5e:45:a1:0b:
cc:cc:68:60:79:66:8b:00:2c:07:b9:eb:60:50:bb:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:6A:99:B7:3A:B5:9D:39:C0:9B:28:B9:72:E5:D4:31:E6:06:FE
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/vHpqmbc6tZ05wJsouXLl1DHmBv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.110.0/23
185.54.244.0/24
IPv6:
2a02:47a0:a::/48
Signature Algorithm: sha256WithRSAEncryption
2c:ef:c0:f0:bf:78:2b:73:b6:57:88:ec:76:b6:1c:8f:85:91:
be:c0:50:65:4f:2b:54:bc:db:37:be:66:10:d1:5a:d1:8e:43:
e9:18:99:cc:79:a7:a2:3d:dd:44:1d:b4:af:aa:77:6d:92:2c:
94:60:04:f7:bb:95:41:30:f1:8d:e0:d6:cf:61:aa:b2:27:82:
b2:ae:85:25:f9:e8:e5:6a:19:f1:53:d9:89:a2:6c:79:b6:f9:
44:9f:8b:29:a0:3e:fc:ab:a0:30:5f:34:08:83:a7:0f:f3:13:
ef:10:55:03:a3:ef:07:ad:98:34:03:52:60:9c:6c:6b:5a:db:
2b:18:f2:0c:b1:92:13:7c:25:1e:1c:6f:65:8e:6e:13:33:01:
16:23:63:de:15:24:f3:ec:7b:cb:ec:54:90:23:78:c2:38:42:
40:b6:70:64:9b:2c:ea:c6:9a:14:49:d1:53:ad:ed:74:95:f3:
fb:d3:9d:d8:14:ea:80:1b:9a:91:b0:f7:00:e7:7d:7a:27:0f:
25:89:37:c1:c0:96:54:51:8a:c7:68:ed:f8:eb:83:23:c1:cb:
7f:1e:19:94:65:96:fc:15:50:20:25:8a:da:94:e8:c6:5e:18:
41:da:fb:fa:db:cd:53:92:af:0d:70:80:83:ce:dd:07:2e:2b:
74:56:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:42 2025 by rpki-client