Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/vUWiUm_QKrG2U_b5lZA56t5M8p4.roa
File: vUWiUm_QKrG2U_b5lZA56t5M8p4.roa (raw, json)
Hash identifier: GDtR6R2hwCSZb17UCjCwbwPbYxyIBcrDpG/WbHgYlmo=
Subject key identifier: BD:45:A2:52:6F:D0:2A:B1:B6:53:F6:F9:95:90:39:EA:DE:4C:F2:9E
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 01856B37A40376D5C8A17DF814C497E97110
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/vUWiUm_QKrG2U_b5lZA56t5M8p4.roa
Signing time: Sun 01 Jan 2023 02:44:46 +0000
ROA not before: Sun 01 Jan 2023 02:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43623
IP address blocks: 194.127.132.0/23 maxlen: 23
194.127.132.0/24 maxlen: 24
194.127.133.0/24 maxlen: 24
194.59.34.0/23 maxlen: 23
194.59.35.0/24 maxlen: 24
217.66.33.0/24 maxlen: 24
217.66.32.0/24 maxlen: 24
217.66.32.0/20 maxlen: 20
217.66.36.0/24 maxlen: 24
217.66.35.0/24 maxlen: 24
217.66.38.0/24 maxlen: 24
217.66.37.0/24 maxlen: 24
217.66.39.0/24 maxlen: 24
217.66.43.0/24 maxlen: 24
217.66.42.0/24 maxlen: 24
217.66.44.0/24 maxlen: 24
217.66.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:a4:03:76:d5:c8:a1:7d:f8:14:c4:97:e9:71:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Jan 1 02:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd45a2526fd02ab1b653f6f9959039eade4cf29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:5a:eb:a5:4f:99:e9:63:a3:77:40:56:8e:
7b:74:1d:34:71:b3:77:e2:57:16:7d:e8:41:0b:ae:
2a:01:bf:ab:b5:ce:fa:84:24:8d:e3:ea:7e:52:ca:
a3:9b:a3:be:6b:d3:ab:03:ae:12:1e:e7:fa:2e:51:
aa:cc:c7:db:c1:2c:68:ce:6f:c2:98:eb:b9:95:b2:
3d:b6:a5:fb:79:57:8e:d1:64:ab:60:ad:85:2c:1d:
3c:77:7b:6e:80:58:fb:7c:e0:b7:d7:8a:27:3e:1b:
e8:0b:2d:1c:11:f8:bf:01:02:89:71:e1:83:1c:00:
29:34:c2:67:58:66:87:af:80:8d:ac:f7:c4:d8:eb:
2b:d3:2a:f2:d5:72:cf:9d:f2:d3:6e:44:46:a5:7a:
17:e8:cc:1d:fb:32:ff:1b:5b:69:fc:09:71:6b:69:
62:a5:10:74:c4:9f:a8:37:d3:66:c9:74:11:76:4e:
38:f1:75:c6:22:bd:40:a2:c8:12:5b:c2:15:db:7c:
fb:4f:04:19:73:fd:0e:e0:1f:08:df:aa:9f:c2:1f:
7b:58:d1:17:7b:94:73:ea:97:a0:f7:d4:3d:19:f5:
74:a6:5d:29:25:52:f8:25:65:bc:5b:30:2e:47:9c:
b1:a8:d5:17:12:c1:41:b0:26:75:a6:af:8b:ed:15:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:A2:52:6F:D0:2A:B1:B6:53:F6:F9:95:90:39:EA:DE:4C:F2:9E
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/vUWiUm_QKrG2U_b5lZA56t5M8p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.34.0/23
194.127.132.0/23
217.66.32.0/20
Signature Algorithm: sha256WithRSAEncryption
85:08:ed:10:ed:ba:cd:45:9a:c9:e5:2d:8f:14:cd:25:05:05:
1c:54:76:a3:0c:df:a7:58:3f:63:14:8c:1e:07:5d:9c:84:3b:
5b:d3:a1:a2:1e:73:89:f3:7c:52:5f:04:87:a7:d1:bf:52:8f:
96:19:80:77:fe:f5:9b:6d:f6:6c:d4:c7:2b:62:80:f4:f3:57:
04:4f:78:89:f3:29:3e:3d:21:d2:0e:0d:e1:07:21:c9:9b:f2:
89:1d:4f:ec:c1:ce:4d:b3:6c:29:23:46:82:72:ea:08:c2:1b:
d8:75:d8:27:60:d9:ee:9a:10:14:ca:41:12:cc:58:b5:7d:49:
b2:d7:2e:33:60:61:06:9e:40:06:a6:d6:ee:70:31:56:ee:b3:
28:be:36:3e:19:33:69:93:4d:44:6a:7d:09:6b:13:5f:5c:fb:
21:36:b6:ab:c5:ba:6f:f3:28:71:c5:6f:d2:d7:3b:e0:79:03:
1e:de:55:45:c6:81:84:02:50:de:1c:12:67:68:70:43:59:26:
0e:cd:00:cc:f3:20:17:c7:94:93:64:80:3d:38:d4:7d:7c:ad:
bf:aa:81:88:a2:48:e5:0f:8e:60:16:90:ec:e5:66:7d:59:03:
38:da:91:55:e2:05:0c:1c:d1:b7:50:1c:c4:d5:6d:fa:40:a6:
9d:d4:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:29 2025 by rpki-client