Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/VgzZT2YAFQ29x71LSaR_vYLdckA.roa
File: VgzZT2YAFQ29x71LSaR_vYLdckA.roa (raw, json)
Hash identifier: kB8SVCtMqSeWed86movHwVKh9Vctc2lN8GuDI0kYgvw=
Subject key identifier: 56:0C:D9:4F:66:00:15:0D:BD:C7:BD:4B:49:A4:7F:BD:82:DD:72:40
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018A4AAE7FA4FEB52758DA46891CD2B965E6
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/VgzZT2YAFQ29x71LSaR_vYLdckA.roa
Signing time: Thu 31 Aug 2023 08:21:04 +0000
ROA not before: Thu 31 Aug 2023 08:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 2a07:3500:19e0::/48 maxlen: 48
2a07:3500:19a0::/48 maxlen: 48
2a07:3500:19b0::/48 maxlen: 48
2a07:3500:1998::/48 maxlen: 48
2a07:3500:19d8::/48 maxlen: 48
2a07:3500:1200::/48 maxlen: 48
2a07:3500:19a8::/48 maxlen: 48
2a07:3500:19e8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:ae:7f:a4:fe:b5:27:58:da:46:89:1c:d2:b9:65:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Aug 31 08:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=560cd94f6600150dbdc7bd4b49a47fbd82dd7240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:dd:af:4d:6a:cb:3c:f0:ba:1b:05:43:12:
a1:37:bf:16:7e:bb:3d:d1:7b:8b:9a:26:4e:20:40:
2f:9b:fb:3b:da:b8:a3:2b:2c:ee:70:48:2c:99:a7:
5e:be:50:3a:20:46:08:a6:37:3b:91:9e:1a:e5:6d:
95:48:b2:ed:56:8b:92:cc:a3:1b:dd:a4:63:fd:9d:
e4:6d:df:99:9f:05:67:e6:e8:c2:1b:8a:7b:81:e5:
35:4f:f0:c4:f3:a4:d9:6c:7d:93:16:09:14:7e:d0:
4c:ab:ef:72:a6:5b:26:8b:7c:b6:90:0e:c4:94:ef:
63:17:ec:74:6d:77:e9:41:cb:c3:b7:e4:c9:ca:dc:
4d:2e:60:e8:a9:0b:f7:43:4d:a7:14:3b:35:16:39:
3e:61:44:b4:77:c4:4c:d9:86:7c:25:00:5c:dc:c3:
65:93:d0:d7:e9:da:c7:c6:ba:2c:f6:26:86:d5:5c:
3e:4e:a6:75:d5:24:f5:c4:f3:90:ac:c5:f6:15:fd:
94:2e:75:f4:4b:68:1d:95:e4:06:8f:d8:06:9b:54:
d7:01:b2:2c:f1:9c:91:9a:95:17:f3:29:be:3d:12:
ad:16:15:2f:75:64:03:c5:17:d8:19:f7:56:a5:c9:
16:d9:0d:f5:ec:8b:fe:b1:19:4f:d5:f3:69:ef:64:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0C:D9:4F:66:00:15:0D:BD:C7:BD:4B:49:A4:7F:BD:82:DD:72:40
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/VgzZT2YAFQ29x71LSaR_vYLdckA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1200::/48
2a07:3500:1998::/48
2a07:3500:19a0::/48
2a07:3500:19a8::/48
2a07:3500:19b0::/48
2a07:3500:19d8::/48
2a07:3500:19e0::/48
2a07:3500:19e8::/48
Signature Algorithm: sha256WithRSAEncryption
36:77:ab:4d:1a:a0:8e:5e:0d:77:2d:de:19:bc:14:72:78:74:
80:37:46:d2:5a:04:a4:13:c3:c9:88:d4:3c:64:6b:52:27:6f:
c4:f3:68:5c:23:d9:87:70:43:10:3e:fc:e0:a9:6e:37:93:61:
f6:c9:51:f9:a3:16:9e:c0:01:12:2e:45:ae:e9:c6:8f:3e:da:
1b:15:35:f9:21:e4:ed:69:0b:ae:3d:07:29:9d:f1:76:16:03:
39:08:7e:95:35:34:e4:52:9f:11:53:2a:31:38:57:9c:55:4d:
1b:48:ce:d4:9e:49:8b:41:80:98:2b:c2:d1:8b:ff:5b:4a:98:
d9:00:c8:ae:2c:cb:f3:3a:eb:08:63:17:5d:5f:41:4b:36:86:
1a:63:d1:fd:a5:94:1a:fc:88:6f:18:5b:6f:07:19:d9:b3:17:
a4:c4:98:27:64:f0:b1:b6:73:8b:87:7b:09:5d:88:ac:fe:52:
f3:1a:6a:0b:e6:14:43:85:f1:80:0e:ef:56:05:a7:40:5b:a8:
a9:04:c2:99:4f:11:60:bf:ff:8a:54:93:91:45:82:58:45:23:
db:4b:40:b6:60:8c:c3:62:1f:f6:31:61:e1:80:97:ba:14:13:
95:be:60:47:a7:e5:bb:bb:b0:c9:e3:1a:80:10:6a:cd:81:69:
78:fd:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:57 2025 by rpki-client