Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/VymwHUeNIdmdO2_B53m3HbDyn0U.roa
File: VymwHUeNIdmdO2_B53m3HbDyn0U.roa (raw, json)
Hash identifier: ah6tDZEBVi1oQSydCHpYB9B7KdYVItRME37tfbzLtiU=
Subject key identifier: 57:29:B0:1D:47:8D:21:D9:9D:3B:6F:C1:E7:79:B7:1D:B0:F2:9F:45
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 03295E74
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/VymwHUeNIdmdO2_B53m3HbDyn0U.roa
Signing time: Sat 01 Jan 2022 16:07:39 +0000
ROA not before: Sat 01 Jan 2022 16:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.34.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53042804 (0x3295e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Jan 1 16:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5729b01d478d21d99d3b6fc1e779b71db0f29f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:19:19:e7:01:5e:94:7a:33:2b:54:04:ef:
32:36:11:da:79:a2:1d:50:3f:f9:49:5c:9a:da:a9:
65:10:e6:2b:0e:44:8b:57:4d:b6:0d:df:c2:ed:bf:
de:3b:5a:e9:c1:c5:c6:ab:e2:60:b4:7c:0b:8b:df:
67:ee:6b:05:f6:67:71:29:f2:85:f2:25:a7:cc:7f:
74:4b:81:b1:94:6a:c4:35:63:c7:4f:ad:88:e7:bf:
41:76:ed:10:d3:15:e5:e1:8f:e6:ea:dd:f2:0e:d6:
e9:06:97:11:17:bd:fa:19:c1:74:f2:e7:e2:0c:85:
28:5c:91:27:97:9e:d7:ef:0e:ac:e8:ce:f2:2a:c5:
d0:90:14:dd:70:d4:b4:bd:e6:c4:14:d8:71:d0:c8:
04:27:05:32:dc:2e:a2:92:b8:ca:7a:34:16:13:af:
85:41:1b:d6:17:ed:9f:aa:d2:d2:0e:6e:27:35:55:
70:26:87:ef:5f:50:64:85:a6:6c:54:99:8f:05:fb:
eb:0e:7d:51:e7:06:89:24:fe:3f:34:5e:65:29:7e:
e0:07:d9:61:14:33:53:13:1e:77:aa:93:8c:6d:32:
6d:ae:f9:21:f8:d9:b5:de:d0:0b:c5:ac:8c:fd:27:
62:f9:80:68:e2:8c:95:a8:33:f1:c4:ad:e3:75:5a:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:B0:1D:47:8D:21:D9:9D:3B:6F:C1:E7:79:B7:1D:B0:F2:9F:45
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/VymwHUeNIdmdO2_B53m3HbDyn0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.128.0/24
Signature Algorithm: sha256WithRSAEncryption
78:61:66:48:d5:5d:0d:2e:9f:e4:c8:ca:db:96:11:fb:4c:b0:
4e:7a:e5:cb:f0:01:c2:ad:68:74:5e:72:5a:2c:10:be:af:31:
3f:ad:13:bd:fa:6a:b8:8c:1f:0f:15:85:d5:df:97:4f:7a:50:
ba:a6:bb:bb:8a:e3:1c:64:1e:44:01:80:dc:62:4d:35:c0:e2:
21:03:9c:73:05:99:1a:4b:44:ed:b5:90:7f:62:75:6e:a8:4d:
f7:86:96:41:8f:86:90:df:98:48:52:92:a8:13:a5:67:55:54:
30:4d:f4:87:26:a0:9e:64:5b:54:40:12:de:e0:10:77:b1:70:
49:f9:7c:f5:71:07:09:d9:bc:f1:17:b6:9c:4b:47:bc:8b:d9:
d3:19:a4:a6:4f:af:3b:58:ef:19:1e:98:d7:e0:33:4a:76:95:
98:59:b8:14:5d:84:2f:57:84:9f:30:cf:d1:06:3e:4a:b4:af:
6b:8e:a6:67:82:c7:43:ea:ad:bc:8e:2b:47:61:45:7e:17:93:
6d:ac:a2:12:3a:a0:aa:be:9f:cc:84:e6:b7:f6:57:d1:c7:f9:
37:42:9b:aa:31:9a:a7:7c:6d:97:a9:69:3d:82:96:a2:ba:2c:
95:e5:4a:7e:13:eb:7d:26:78:89:f7:33:ef:71:c0:4a:0c:41:
1e:ba:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:38:53 2025 by rpki-client