Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/vbpAO3LqiI86VSF4U6UPE1Qs4qY.roa
File: vbpAO3LqiI86VSF4U6UPE1Qs4qY.roa (raw, json)
Hash identifier: yXphPmKk+E2hFwdBQpmTjfa59A3s1YFkM5kIAal98o8=
Subject key identifier: BD:BA:40:3B:72:EA:88:8F:3A:55:21:78:53:A5:0F:13:54:2C:E2:A6
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 01857014F9A44A4E094AFA48004AD5292194
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/vbpAO3LqiI86VSF4U6UPE1Qs4qY.roa
Signing time: Mon 02 Jan 2023 01:25:00 +0000
ROA not before: Mon 02 Jan 2023 01:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34602
IP address blocks: 185.185.140.0/22 maxlen: 22
77.50.0.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.2.0/23 maxlen: 23
77.50.0.0/16 maxlen: 16
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.243.96.0/20 maxlen: 20
94.141.160.0/19 maxlen: 19
81.17.144.0/20 maxlen: 20
91.204.128.0/22 maxlen: 22
77.50.128.0/17 maxlen: 17
31.130.128.0/19 maxlen: 19
77.50.32.0/19 maxlen: 19
77.233.192.0/19 maxlen: 19
45.151.60.0/22 maxlen: 22
77.50.64.0/18 maxlen: 18
2a00:e79::/36 maxlen: 36
2a00:e79::/32 maxlen: 32
2a00:e78::/34 maxlen: 34
2a00:e78::/33 maxlen: 33
2a00:e78:6000::/36 maxlen: 36
2a00:e7a::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:f9:a4:4a:4e:09:4a:fa:48:00:4a:d5:29:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 01:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdba403b72ea888f3a55217853a50f13542ce2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:3e:bd:e8:f3:b8:2b:ea:37:f2:2e:13:9a:
d4:5c:b2:13:55:3a:db:60:4c:6b:8a:02:9f:2e:d9:
0f:f1:18:d9:bb:42:8b:33:ac:49:ae:17:13:4f:87:
d8:a3:68:c9:fb:d4:fe:c4:5e:5e:2c:a6:87:7a:45:
c7:41:dc:73:90:5c:22:7f:8f:68:bc:05:69:3c:46:
e9:bd:3f:5f:54:64:3e:b6:f4:cb:d7:72:e1:d5:3d:
f9:86:43:48:e6:a2:2b:f9:63:16:3b:c2:73:15:db:
47:88:97:85:9a:61:e4:68:86:e5:4f:94:5e:44:99:
6f:8c:9b:46:42:1d:c2:36:bf:5e:d6:03:35:bb:f7:
ec:2f:d5:58:56:75:4e:52:46:01:05:40:a9:ba:39:
f2:b8:b0:b7:2a:4c:7a:51:d6:8a:eb:15:fe:87:a8:
af:4e:99:6f:74:f7:24:24:0a:53:59:18:8c:3c:c5:
cf:e2:c4:c1:9f:c9:9a:9e:c8:b5:6c:34:81:e6:43:
d6:05:f5:71:71:92:a7:57:d6:6e:1d:eb:63:2c:41:
7c:73:c8:c4:1a:43:a3:1b:8b:7e:c6:28:2d:44:44:
c1:b1:13:c3:d2:6c:dc:2a:b4:6d:11:70:f3:92:50:
17:f3:dd:93:56:8d:4b:96:90:fe:72:1f:b7:c9:70:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:40:3B:72:EA:88:8F:3A:55:21:78:53:A5:0F:13:54:2C:E2:A6
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/vbpAO3LqiI86VSF4U6UPE1Qs4qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/19
45.151.60.0/22
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/22
IPv6:
2a00:e78::/33
2a00:e79::-2a00:e7b:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:57:fb:7c:19:87:40:f5:f6:c1:08:ec:bf:14:24:94:07:aa:
ff:39:49:42:87:31:df:f0:ad:18:af:17:ce:c9:98:ad:f9:ac:
3c:7a:45:d6:72:46:ec:67:06:80:69:c5:0a:e3:d8:b0:98:f4:
03:b8:34:26:32:ea:a1:34:ba:51:f9:46:3d:d1:d4:cb:46:a0:
c8:34:c9:0b:84:94:93:42:a0:0d:aa:20:05:71:c7:2d:24:24:
a6:5f:d3:37:e9:e7:b4:8f:93:53:90:41:36:ac:af:56:e1:67:
55:be:c5:4e:a5:b1:f2:87:5a:e4:33:16:c6:e9:7c:f7:ef:ac:
4e:60:ec:e1:a0:78:1e:bd:ac:0f:c5:c4:2c:ba:dd:50:25:72:
73:44:49:d0:36:e3:03:89:26:e0:7d:95:98:d8:10:06:b2:da:
3c:29:9c:56:a2:da:7f:54:a1:dd:d9:66:0b:3d:a8:a5:20:04:
f3:fe:f7:ee:0d:b1:42:e4:56:2e:5e:82:55:5d:cc:e9:21:57:
b1:47:c6:d0:79:95:66:de:22:a1:9a:1d:a3:a1:68:db:8e:85:
90:d8:35:51:99:47:a4:a9:18:eb:e5:6c:a4:e4:f3:ad:85:3d:
c7:73:6e:7f:36:f3:3e:b2:b7:7a:40:b1:5a:ee:72:2c:27:f8:
28:84:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:13 2025 by rpki-client