Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/vi-WjmwwiFmsi3aMf6uCogHsQzs.roa
File: vi-WjmwwiFmsi3aMf6uCogHsQzs.roa (raw, json)
Hash identifier: YamkJuWO8B88+CYyR81hYOvKg7QAmq+fj9no1zzpdOM=
Subject key identifier: BE:2F:96:8E:6C:30:88:59:AC:8B:76:8C:7F:AB:82:A2:01:EC:43:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 018C33EE8FFA133BA73BF89FF0A080EEAF11
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/vi-WjmwwiFmsi3aMf6uCogHsQzs.roa
Signing time: Mon 04 Dec 2023 08:25:21 +0000
ROA not before: Mon 04 Dec 2023 08:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197075
IP address blocks: 81.29.176.0/22 maxlen: 23
46.31.104.0/21 maxlen: 24
185.186.12.0/22 maxlen: 23
185.47.138.0/24 maxlen: 24
185.37.116.0/22 maxlen: 23
185.246.95.0/24 maxlen: 24
185.59.20.0/22 maxlen: 23
37.77.160.0/21 maxlen: 24
2a02:2420::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:ee:8f:fa:13:3b:a7:3b:f8:9f:f0:a0:80:ee:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Dec 4 08:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2f968e6c308859ac8b768c7fab82a201ec433b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7f:5c:40:50:c2:ea:6a:81:88:b8:1b:36:98:
b5:08:4c:a8:82:56:eb:99:9e:1e:7b:9d:61:ab:4b:
ee:82:53:0c:79:0b:b6:08:c4:6a:46:4b:46:02:c1:
b3:54:23:18:b8:2f:e4:16:b7:a2:6d:25:ed:99:d0:
6e:7e:81:03:d9:37:0c:a3:bf:c9:e5:6e:e5:ce:fb:
27:ad:d0:7b:63:02:86:75:d6:03:5e:17:38:56:56:
34:17:8c:43:6f:11:f9:2a:78:94:c8:e3:47:53:63:
cb:b7:94:c9:1a:32:b9:14:e6:ad:65:86:7c:44:a6:
39:01:65:28:09:4c:0b:a0:f4:71:bd:01:57:91:99:
c9:f3:8d:e1:eb:23:87:59:3e:b1:12:0e:3f:94:43:
d2:cf:0d:02:c4:83:ff:77:8b:4f:88:b8:8e:13:95:
47:ca:6f:4c:12:68:ba:c2:c5:fd:d2:77:7e:e9:6b:
7b:e1:62:86:76:06:79:70:6b:f1:18:61:23:76:7f:
41:46:e5:17:4c:a6:fd:80:53:ec:69:56:92:5a:b7:
5c:78:a6:19:c5:ad:92:ac:ee:b5:ac:0a:17:4b:e5:
4f:fe:d6:21:e1:cb:83:da:de:f7:ca:3e:2f:7e:17:
f8:86:54:4d:f6:0a:4f:2d:0c:2b:66:2d:a4:52:75:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:96:8E:6C:30:88:59:AC:8B:76:8C:7F:AB:82:A2:01:EC:43:3B
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/vi-WjmwwiFmsi3aMf6uCogHsQzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.160.0/21
46.31.104.0/21
81.29.176.0/22
185.37.116.0/22
185.47.138.0/24
185.59.20.0/22
185.186.12.0/22
185.246.95.0/24
IPv6:
2a02:2420::/32
Signature Algorithm: sha256WithRSAEncryption
8d:8e:24:17:79:60:25:52:fb:37:98:4e:83:bb:b7:e2:0a:49:
96:9e:b8:df:83:c8:33:5c:55:01:b3:a4:56:fb:03:cb:42:cd:
d4:d8:af:51:86:53:7e:88:e7:cc:88:d9:c0:ba:1e:e1:46:85:
eb:de:2f:35:6a:db:df:ec:62:6b:b2:24:35:69:81:f2:b2:69:
b6:c7:c0:d4:8d:9a:46:d4:07:64:e7:28:be:b5:3b:20:6d:fc:
2a:fb:1c:a8:71:44:8a:67:40:25:e9:93:50:f4:2c:f7:d1:07:
48:bd:67:29:f9:05:eb:5d:5d:9d:85:83:b3:c7:59:ca:28:6d:
ed:95:fa:9c:38:3d:70:df:84:0e:bf:c4:9d:c8:a7:97:ab:2f:
a9:a6:26:31:f8:3d:ac:5e:6d:5b:c5:d0:28:c8:36:29:dd:6a:
f4:4a:f7:53:74:6e:9a:d0:45:ab:98:ed:0d:b8:74:1b:73:e4:
05:8a:4d:a9:e2:ea:b5:4d:ba:b3:1e:5e:df:cd:d4:d7:66:f1:
7c:66:42:0a:34:da:6b:50:b0:25:97:b9:15:45:77:62:b6:f4:
67:d9:86:65:9a:bf:97:b3:b0:5a:fe:a4:b3:f6:fb:6b:f4:d6:
08:ee:99:e9:36:ea:6a:ae:da:51:34:0e:63:4d:2f:09:90:8b:
ff:8c:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:56 2025 by rpki-client