Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/VUlubGcG7OY2g56ar4yfZQ68rrk.roa
File: VUlubGcG7OY2g56ar4yfZQ68rrk.roa (raw, json)
Hash identifier: ZGEsUrAC96mYx5pYWp17GOKgihhSKpMdlRvHwlVIbDo=
Subject key identifier: 55:49:6E:6C:67:06:EC:E6:36:83:9E:9A:AF:8C:9F:65:0E:BC:AE:B9
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 018B1D4C84953F4E1CFF309D1DF9B98EE451
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/VUlubGcG7OY2g56ar4yfZQ68rrk.roa
Signing time: Wed 11 Oct 2023 05:53:55 +0000
ROA not before: Wed 11 Oct 2023 05:53:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25446
IP address blocks: 93.183.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:4c:84:95:3f:4e:1c:ff:30:9d:1d:f9:b9:8e:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Oct 11 05:53:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55496e6c6706ece636839e9aaf8c9f650ebcaeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:f0:f0:e9:2c:05:2d:fa:ea:ed:0c:8d:6d:
48:4a:c3:27:cc:88:fb:8b:76:73:d6:91:e2:42:32:
c1:e6:de:c8:84:93:2b:69:1c:69:b6:cd:4f:f9:f1:
08:0b:11:af:2a:10:dd:a0:b6:74:fc:5e:ad:f0:86:
f2:9b:99:90:9f:5f:52:3f:95:84:de:ad:db:28:e8:
ae:60:dd:d5:38:2e:bf:bb:68:e9:7e:8b:92:6c:d4:
23:f2:37:5a:a4:00:a8:e5:20:b1:a8:fe:39:17:0d:
c8:36:bf:b7:0d:5a:0d:c1:3b:49:7d:ac:b4:78:88:
6d:78:31:33:14:44:a8:9f:d3:76:7c:03:61:85:17:
68:1b:96:b3:09:ff:ba:30:2e:77:68:99:88:bd:27:
ea:fc:ce:89:63:d5:22:05:59:5e:84:33:71:18:a5:
19:55:70:55:bf:ec:e6:75:3d:94:f3:ee:0f:8f:ab:
7a:53:d4:87:f8:05:cb:33:7b:97:64:21:3d:7d:02:
f1:f4:45:f7:37:f3:a1:43:32:71:7b:06:4b:88:32:
8e:be:80:28:ac:ab:09:0c:6e:d5:13:39:60:26:10:
60:34:ea:cb:85:83:ab:66:b1:40:4e:a2:ba:3a:75:
07:22:76:6e:e3:fc:14:3c:30:66:03:c5:bc:7b:38:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:49:6E:6C:67:06:EC:E6:36:83:9E:9A:AF:8C:9F:65:0E:BC:AE:B9
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/VUlubGcG7OY2g56ar4yfZQ68rrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.104.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e2:4e:00:b5:55:70:8e:ed:76:74:64:19:13:5b:03:8b:33:
cb:a9:80:bb:fe:09:ab:be:4c:cf:54:79:63:1b:5d:e7:c8:37:
8a:ae:e5:f6:cb:f8:b5:d0:95:34:aa:bd:08:5b:6c:07:7e:3e:
c1:fc:34:45:44:28:a7:10:1f:b7:b5:3f:97:28:78:90:60:7c:
9a:4d:ed:be:4d:c3:e4:13:be:22:0b:9a:d5:9b:47:f5:69:b0:
71:f6:da:7a:23:b0:0f:b2:8b:14:24:7d:6b:d6:8f:7f:9c:5b:
52:97:0f:0d:64:3a:5e:5f:eb:95:3f:a9:c3:76:47:bd:9a:eb:
41:da:92:29:29:38:00:e8:e5:c1:fc:d2:7a:7b:aa:93:db:e7:
1b:04:cb:9d:b2:3a:51:82:1b:7a:c3:25:fe:7d:7e:f3:35:61:
73:98:0b:92:4c:24:79:79:c8:d5:0e:ad:de:8e:64:4c:d9:84:
8a:18:6a:74:f7:8e:a8:ba:ca:07:65:91:00:27:f5:cd:80:92:
57:59:f7:af:d4:91:d6:9a:5a:0e:48:42:11:5d:36:4e:63:47:
19:a3:e0:39:d0:3b:b7:ef:56:a4:02:63:9a:fb:e2:13:f3:1a:
ed:cb:90:5c:48:24:d7:5e:e3:15:40:9e:0d:d7:bc:45:0b:1a:
6f:f2:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:56 2025 by rpki-client