Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VviXYwRATrXMp8Avpus27U3Suz8.roa
File: VviXYwRATrXMp8Avpus27U3Suz8.roa (raw, json)
Hash identifier: M9dJaEnB/YHRlgE7Vh0RvjtsqW3raSsfG+hC6T30F9g=
Subject key identifier: 56:F8:97:63:04:40:4E:B5:CC:A7:C0:2F:A6:EB:36:ED:4D:D2:BB:3F
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01870DA5417136A5284C671584E6B3823DC3
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VviXYwRATrXMp8Avpus27U3Suz8.roa
Signing time: Thu 23 Mar 2023 08:45:46 +0000
ROA not before: Thu 23 Mar 2023 08:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209774
IP address blocks: 212.170.158.0/24 maxlen: 24
194.179.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:a5:41:71:36:a5:28:4c:67:15:84:e6:b3:82:3d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 23 08:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f8976304404eb5cca7c02fa6eb36ed4dd2bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:26:53:50:72:3a:47:95:e1:7f:42:67:87:
8d:58:66:20:bb:73:f9:e3:2c:c1:ae:bc:e9:0e:bd:
e4:eb:d5:3c:a2:e4:51:c2:5c:eb:a6:9d:80:64:ae:
29:2a:6f:19:ae:18:b1:8d:cf:77:20:03:fa:8e:cd:
6a:d3:cb:3f:57:15:6a:5b:ad:86:43:3e:83:c1:88:
db:fd:45:03:a6:87:4d:4d:35:a9:d1:31:b7:9e:72:
b9:ce:e9:4f:89:87:df:f1:8a:d3:af:74:ff:34:a6:
85:45:f0:ad:9a:04:98:b8:eb:53:ca:05:16:b9:60:
62:10:11:9e:d5:e8:af:78:d1:fa:12:e7:2e:49:7d:
45:1f:62:0a:25:87:a7:96:1d:16:64:33:7a:58:fa:
ca:77:6e:60:7e:a6:0b:2a:ca:cd:88:88:d8:2c:9a:
8a:5e:e1:a4:30:4a:ed:cc:50:ea:b7:aa:91:81:2b:
26:2f:0d:e4:bc:f4:9a:d2:01:6a:6e:87:67:ca:93:
c9:8f:e7:9f:ef:05:5e:16:30:6a:00:79:2c:66:77:
68:d3:f0:c1:b1:f1:3e:85:b7:e9:47:76:a4:2b:1c:
81:24:35:a4:59:e9:d8:15:21:4e:95:3b:41:b9:2b:
53:83:4d:7a:2d:8b:da:7b:f5:78:b2:0c:5d:09:9c:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:97:63:04:40:4E:B5:CC:A7:C0:2F:A6:EB:36:ED:4D:D2:BB:3F
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VviXYwRATrXMp8Avpus27U3Suz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.123.0/24
212.170.158.0/24
Signature Algorithm: sha256WithRSAEncryption
83:27:17:31:0b:a0:89:b9:a9:7a:30:8c:c0:b7:45:bd:93:05:
33:45:25:93:c7:b3:18:0e:59:2f:4f:84:42:80:6b:b3:b2:83:
ac:80:38:ba:dc:80:02:58:2b:71:f6:87:76:22:c6:e7:59:d1:
39:e8:ce:ec:b3:24:94:3e:2b:79:76:8b:59:44:fd:0a:f6:30:
7e:1d:6f:ae:02:dd:eb:c3:8d:08:ca:7c:06:fd:fc:98:e3:83:
d0:4d:f5:85:f9:7f:76:19:3e:6a:f8:03:9e:51:e7:19:4d:be:
4c:4b:fa:e8:f5:02:b3:b4:fd:36:48:5c:ac:f9:f4:56:08:6c:
34:5b:01:c6:e4:bc:f5:a9:ee:a5:ca:e6:b5:d7:ed:b4:29:d5:
ea:17:3e:6f:f0:d4:86:49:30:66:10:1e:54:48:fa:9b:3a:cf:
49:72:51:50:78:11:3c:c2:df:9b:40:f1:d1:66:e9:dc:f9:94:
9c:8d:8c:d3:54:fe:1f:f9:d8:e5:d6:40:f0:11:76:67:0e:f4:
1b:d7:06:88:db:58:64:a3:fc:f0:8c:3b:a1:47:9a:7a:cb:30:
a1:d7:17:e4:33:1e:cf:68:48:09:12:f5:a0:70:0d:33:f4:54:
60:b9:01:4a:8d:58:14:5d:8f:c5:da:54:3c:7c:67:80:34:48:
74:e5:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:42 2025 by rpki-client