Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/VfOX8CnvzBAQCpYQYR9yzKC5R7Y.roa
File: VfOX8CnvzBAQCpYQYR9yzKC5R7Y.roa (raw, json)
Hash identifier: IhJ0XtFvBScHVrNoKJ23rvDuvTE3EquafQ9aTzyNUxw=
Subject key identifier: 55:F3:97:F0:29:EF:CC:10:10:0A:96:10:61:1F:72:CC:A0:B9:47:B6
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 01856F390DDCA315236C085695D3AC7AF968
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/VfOX8CnvzBAQCpYQYR9yzKC5R7Y.roa
Signing time: Sun 01 Jan 2023 21:24:48 +0000
ROA not before: Sun 01 Jan 2023 21:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12693
IP address blocks: 134.101.32.0/19 maxlen: 19
212.110.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:0d:dc:a3:15:23:6c:08:56:95:d3:ac:7a:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jan 1 21:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f397f029efcc10100a9610611f72cca0b947b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:29:68:2b:f8:36:df:fb:5e:96:54:4f:d7:
ac:89:c2:2e:73:cf:5e:79:7a:f4:d9:f5:e7:39:14:
6d:4d:7c:7d:95:f4:6b:a4:28:ec:6a:43:5e:a9:f1:
93:4c:04:90:68:f5:4b:d3:c7:17:af:3a:f4:05:bd:
1c:87:a4:30:4b:a8:df:71:49:11:e0:01:54:01:63:
74:76:11:87:e7:b6:2e:96:5d:ee:af:a9:36:ed:0f:
f0:a5:62:cc:db:e9:fd:5c:7a:5d:15:91:bd:66:04:
ff:a6:5f:bb:65:14:37:0a:58:0b:77:00:8d:ad:48:
45:b6:fe:d3:b1:11:f8:db:9c:4f:7f:8b:50:ad:ff:
22:58:95:66:61:79:77:5a:96:2a:c5:df:14:2f:e2:
94:f8:43:a9:f9:62:6a:1c:ff:e0:34:96:89:4e:b6:
fe:5c:c6:f9:9e:8f:a0:d0:24:c0:e7:e5:c2:01:f7:
c7:f3:18:37:7d:42:65:ae:74:81:58:16:62:27:90:
35:d5:de:5c:39:cd:eb:a3:fe:02:fa:09:50:ec:c0:
c3:23:b0:ca:92:f9:49:97:1e:d5:98:16:95:f4:05:
c1:62:93:21:61:62:f1:aa:90:a4:98:57:80:7c:ba:
91:d1:f7:92:d1:86:36:ae:2a:af:83:4e:cd:ff:3e:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:97:F0:29:EF:CC:10:10:0A:96:10:61:1F:72:CC:A0:B9:47:B6
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/VfOX8CnvzBAQCpYQYR9yzKC5R7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.32.0/19
212.110.224.0/19
Signature Algorithm: sha256WithRSAEncryption
25:98:bd:9d:da:fc:dd:d1:d2:0b:9f:0f:ee:17:6d:53:07:d6:
8d:ce:c7:63:4f:b9:77:5d:eb:5e:18:e5:11:8a:a0:c5:6f:70:
64:01:2a:e1:eb:f2:78:86:db:69:c6:45:f9:9a:db:0a:ce:de:
99:37:68:e8:c9:2a:a5:e1:17:1c:87:6c:5d:9a:0a:46:b2:4f:
e0:2a:a4:1c:9f:f9:19:a7:78:6d:61:dc:06:41:32:cf:3c:c6:
4b:60:35:ec:83:5f:25:2d:4d:4f:5f:a9:18:73:ac:37:3f:f4:
c5:48:64:b5:9e:e3:f8:86:e8:21:d3:94:40:93:7f:d2:a9:48:
87:2a:31:78:d6:95:15:b8:61:f6:cd:40:a9:f9:35:03:41:93:
3f:0c:ac:5f:f6:84:8d:dd:9c:29:cc:e4:74:d4:4f:21:b5:79:
e0:32:6f:28:21:a1:1e:22:0d:4c:3b:d3:f3:93:52:06:40:09:
38:6e:8f:bf:62:ad:c9:f4:04:6f:05:5d:7f:67:06:e6:ac:9e:
07:dd:d2:8c:ad:6a:eb:6a:08:e3:cd:26:db:45:6d:a6:17:26:
3c:e0:e5:bc:53:ba:8a:37:21:b5:17:06:5b:38:33:99:6b:b1:
f1:70:9c:ae:05:01:00:5c:ef:c3:48:71:4e:8b:c8:89:db:6f:
c5:c3:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:57 2025 by rpki-client