Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/VivkNDSxI1BIB6wHAaGBMIaMn9I.roa
File: VivkNDSxI1BIB6wHAaGBMIaMn9I.roa (raw, json)
Hash identifier: XMnbuxJJwAlJ1uvPTyQ4YrVT7uNSGYx+5Gx+eJ+jF54=
Subject key identifier: 56:2B:E4:34:34:B1:23:50:48:07:AC:07:01:A1:81:30:86:8C:9F:D2
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 0BA8EFEF
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/VivkNDSxI1BIB6wHAaGBMIaMn9I.roa
Signing time: Sat 01 Jan 2022 15:55:39 +0000
ROA not before: Sat 01 Jan 2022 15:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29608
IP address blocks: 194.146.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195620847 (0xba8efef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Jan 1 15:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=562be43434b123504807ac0701a18130868c9fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:cf:68:db:b7:58:dc:b6:8c:a3:13:2e:a6:
12:74:00:db:49:45:ff:76:a3:fb:d4:27:07:74:c6:
56:0a:a4:1b:22:bf:8d:4d:4f:eb:b1:30:05:53:69:
69:3d:50:96:4a:81:59:4a:bc:30:9b:ce:35:f2:89:
ef:60:ef:f0:8d:93:b8:7a:c7:7a:3d:51:ae:15:8b:
06:29:d4:60:64:3a:38:38:d0:82:02:09:85:9e:27:
7e:83:d3:6c:3f:93:0e:71:14:f7:e1:79:e1:0e:7b:
39:d6:ae:84:43:26:9c:81:f3:32:30:49:32:9d:3d:
5f:f8:75:a9:3d:a3:f1:21:5a:a3:d3:97:35:7b:e9:
2a:13:ce:3d:39:fc:0d:08:d3:1d:22:53:bf:1e:74:
96:aa:33:a4:a9:f6:c7:b7:ee:fa:db:15:dc:c2:c8:
ac:b4:e7:b2:68:7a:ce:01:85:98:bc:21:cc:7d:87:
af:6f:d1:71:1d:2f:95:f6:f6:47:57:9e:99:69:42:
4c:bc:b7:8d:0f:f2:de:e1:21:7c:12:20:10:b7:94:
a3:2c:9a:bd:55:e1:d1:21:c2:04:96:47:34:38:a5:
09:6d:88:85:17:94:09:a0:35:be:3c:9a:c6:1b:cf:
ea:fb:6a:7d:d5:2b:02:c6:cd:ba:15:93:7e:4b:6c:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:E4:34:34:B1:23:50:48:07:AC:07:01:A1:81:30:86:8C:9F:D2
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/VivkNDSxI1BIB6wHAaGBMIaMn9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:43:5b:22:fa:21:a4:4a:9e:f2:3d:08:54:2e:4d:43:6f:fe:
3d:83:be:57:75:5e:49:30:81:1d:0b:49:5f:e3:5f:67:fc:b3:
93:c2:b8:de:78:0a:c5:15:f9:02:a5:4d:db:3d:1f:ec:86:1d:
98:0a:c4:4f:7d:85:13:00:59:fd:e0:95:e8:03:48:bd:be:bf:
18:92:0f:b2:d8:d1:0f:a6:0c:59:81:fb:05:34:ba:40:80:98:
04:0d:6e:fb:65:54:a9:aa:33:3d:7e:ec:27:a6:e6:46:18:c4:
07:28:31:c6:17:3a:55:f9:6c:6d:99:60:01:1d:58:07:e5:39:
ca:6d:1a:ec:d0:7d:ad:99:a6:bd:2a:8d:c9:fd:e7:5f:8d:6a:
a5:01:b5:c9:9c:1f:c9:1b:e4:ea:b8:2f:e0:de:c3:3c:b5:d3:
04:c4:7f:38:ff:c0:ef:7a:4a:81:ff:6c:15:97:71:3c:10:00:
e1:7b:56:6d:91:ff:60:91:8c:f2:47:b0:41:78:5b:80:82:ab:
d0:32:86:a0:5c:e4:69:00:5f:9f:a7:4c:c7:e1:14:36:07:1b:
75:5c:88:e0:88:18:e3:b5:05:eb:e3:1e:89:75:a7:ed:49:49:
20:7a:d6:d2:e4:2e:fa:4b:06:ea:67:ba:6c:ed:21:1d:57:8b:
c0:34:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:55 2025 by rpki-client