Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/vAtnW6503pH7Lz-m_AvYKxFZviE.roa
File: vAtnW6503pH7Lz-m_AvYKxFZviE.roa (raw, json)
Hash identifier: 1vnM5GUyKnaE7duIg0ouvBzR+l6njac6brVBrH1GcMQ=
Subject key identifier: BC:0B:67:5B:AE:74:DE:91:FB:2F:3F:A6:FC:0B:D8:2B:11:59:BE:21
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 2929867B
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/vAtnW6503pH7Lz-m_AvYKxFZviE.roa
Signing time: Sat 01 Jan 2022 12:07:02 +0000
ROA not before: Sat 01 Jan 2022 12:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57997
IP address blocks: 176.110.116.0/23 maxlen: 23
2001:67c:1070::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690587259 (0x2929867b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 12:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0b675bae74de91fb2f3fa6fc0bd82b1159be21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:d8:d0:50:e6:03:08:1c:83:a2:5b:49:4d:
a0:d1:7b:34:24:4e:68:39:28:de:91:a4:e4:4f:a9:
53:2e:60:b8:4e:17:34:4b:a6:12:ab:21:5c:af:9d:
5c:52:04:29:f7:4d:16:33:83:6a:0b:28:2d:ec:de:
fa:ae:42:34:d3:76:40:29:fc:1f:53:21:7d:00:cd:
e2:9e:67:77:8a:ed:63:ed:8f:d9:52:4a:27:f1:da:
43:dd:9a:81:b6:9c:1e:7c:7f:a2:d7:b8:98:66:0f:
5d:1b:19:25:dd:d5:cc:db:42:81:2b:41:85:0a:70:
f1:0c:95:a7:ca:94:f4:40:4b:e6:8a:98:16:3c:fa:
0f:af:c3:7c:50:ce:bf:e4:d4:e1:9d:d3:c4:94:a0:
60:0a:19:5d:79:19:ef:46:c4:2e:29:5f:9e:00:9f:
01:99:56:28:c5:a7:fd:b2:cf:f5:82:43:2c:09:63:
bd:04:39:6d:db:fc:84:e7:b3:78:f0:e2:e6:1c:cf:
a0:5e:e1:ff:fb:e9:5c:6e:1b:be:08:fe:35:a7:dc:
fb:e0:df:85:65:fd:c5:68:fc:97:7f:43:e4:3f:62:
64:aa:bb:c3:58:cc:0f:84:26:5f:1c:57:12:c0:0e:
6b:fb:b4:fa:6b:5c:90:e3:77:f6:bf:24:f6:80:d9:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:67:5B:AE:74:DE:91:FB:2F:3F:A6:FC:0B:D8:2B:11:59:BE:21
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/vAtnW6503pH7Lz-m_AvYKxFZviE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.116.0/23
IPv6:
2001:67c:1070::/47
Signature Algorithm: sha256WithRSAEncryption
3e:4f:bb:e9:3c:4a:69:54:53:8d:6c:98:5c:7b:5d:3e:25:b3:
fa:8c:00:e0:72:d8:92:96:00:46:38:62:86:a6:a5:d6:ba:72:
28:75:14:21:09:8e:1c:ea:a2:2f:97:b2:78:ac:92:0f:4a:54:
07:87:0c:72:ff:f2:a9:a3:a3:d4:3d:e5:65:2a:18:dd:91:06:
10:06:2b:23:fb:57:d6:bf:55:4d:b3:00:02:a5:f9:29:19:59:
d1:83:58:66:06:80:9c:9a:f5:75:68:dd:49:01:d5:9f:cd:22:
fe:90:21:6c:58:e9:1a:a1:0b:91:9d:ae:b1:af:ad:5b:a8:4d:
a8:a5:a7:ba:3a:62:ab:b1:e4:73:e8:7b:75:72:c5:90:24:ed:
b3:11:36:df:42:87:dc:67:53:b3:a2:13:b9:e3:7a:7b:70:0a:
38:ce:b5:44:55:4e:db:4b:16:0b:93:c4:83:87:b4:37:56:68:
08:05:0c:f1:5b:97:19:45:5f:3a:6c:dd:b5:04:6b:d6:71:69:
7d:57:cd:52:3a:cc:41:f4:c8:62:42:54:8f:b6:6f:75:70:00:
7b:1f:3f:8b:83:48:95:19:86:6b:f4:d5:ff:44:7c:06:ba:d2:
f8:40:a6:84:33:dc:41:41:48:3d:46:c1:69:45:14:93:57:e8:
d6:2a:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:40 2025 by rpki-client