Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/vppZOvx9zkstjMeS7OsmvJBOUMo.roa
File: vppZOvx9zkstjMeS7OsmvJBOUMo.roa (raw, json)
Hash identifier: mBAdR/Kh8hZWS99EZUcXdWrBFWEvXhZG5SwJR554tkc=
Subject key identifier: BE:9A:59:3A:FC:7D:CE:4B:2D:8C:C7:92:EC:EB:26:BC:90:4E:50:CA
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 034B3BC3
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/vppZOvx9zkstjMeS7OsmvJBOUMo.roa
Signing time: Sat 01 Jan 2022 10:53:48 +0000
ROA not before: Sat 01 Jan 2022 10:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8881
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55262147 (0x34b3bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 1 10:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be9a593afc7dce4b2d8cc792eceb26bc904e50ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:7b:64:c1:cc:b3:d0:d8:6b:c1:09:99:02:
d3:07:e6:42:19:93:6e:53:e7:96:0f:bf:63:f4:0c:
92:0f:3d:b1:5a:74:33:b0:fc:ca:d0:da:74:e2:dd:
5a:18:b7:fb:48:2b:59:25:2a:12:c8:12:fc:ce:64:
a9:f0:bc:c1:f2:69:3e:e7:5a:70:30:5a:50:cb:c7:
69:14:ce:78:d7:18:76:9c:67:53:94:96:26:2a:6d:
15:57:9e:ea:fc:ed:ae:13:25:3e:3f:62:6c:11:fe:
0b:73:e3:70:d8:4d:80:dd:50:8e:80:a3:c2:22:cb:
18:52:dc:50:b1:1b:97:db:e0:41:bb:77:b7:ba:01:
37:35:4e:f9:87:65:ab:17:78:65:5e:7b:09:4f:16:
51:64:50:2c:01:6a:47:8e:dd:77:29:a3:d9:7a:ab:
ab:08:b0:cb:3d:1f:2b:16:3d:76:51:84:47:25:68:
5f:f9:9a:ee:b7:b7:d4:5b:cd:8c:41:28:41:d1:df:
f8:e3:a1:c3:99:a0:65:1b:16:d6:03:83:ec:28:f3:
37:91:1e:af:cb:bc:03:42:ee:af:d6:5a:6c:45:b6:
32:2b:5f:01:66:d2:8f:19:90:55:0c:d7:19:73:a8:
75:84:f5:0a:62:19:f0:1a:f4:0f:6a:10:cb:00:ca:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:59:3A:FC:7D:CE:4B:2D:8C:C7:92:EC:EB:26:BC:90:4E:50:CA
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/vppZOvx9zkstjMeS7OsmvJBOUMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:bd:d0:d2:a9:3a:02:96:95:28:9f:3a:4d:dd:aa:67:cd:a7:
bb:e1:00:17:76:af:f2:65:2d:a6:0d:c3:4a:31:33:92:d8:79:
74:cf:c1:1b:14:8c:79:f0:79:09:dd:cc:b9:a7:87:d5:eb:7d:
72:d2:a5:82:a5:01:da:d6:8f:2c:18:52:68:9d:37:30:65:33:
95:6a:41:cf:f7:33:8b:8d:d3:08:5b:a7:7b:6d:83:62:85:f9:
90:c2:fa:1f:60:e9:0b:53:61:f8:0b:8e:39:67:29:a2:36:bd:
11:94:92:c1:ee:ac:29:6e:a0:95:a6:99:8f:eb:f4:6c:82:99:
80:41:82:d5:a5:66:63:c5:d7:fb:2d:03:2a:39:03:e4:2a:14:
00:da:07:ea:fe:76:7b:3d:7b:77:a1:36:9d:ff:21:83:64:20:
71:ef:72:e4:a1:5c:35:3a:30:e4:e9:81:7a:12:e9:d6:79:65:
99:a4:71:4e:8c:f3:e7:e2:c5:73:c2:69:e7:1e:d1:38:d8:ce:
b9:19:c0:9c:db:e2:08:10:66:d3:ab:d8:31:3b:3f:d7:70:4c:
bc:1f:e5:3b:92:11:47:f9:74:e9:cb:74:77:25:6f:b5:ef:4f:
18:cd:06:42:19:b6:00:6a:db:84:0d:eb:33:0f:01:f7:4f:63:
f4:e7:1c:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA0s7wzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YmZmYzlhOTgzMjY2N2FjMGQ2ZDFlMjQwNjU1MDUzM2MzYjU1NjE4MB4XDTIyMDEw
MTEwNTM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU5YTU5M2FmYzdk
Y2U0YjJkOGNjNzkyZWNlYjI2YmM5MDRlNTBjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbke2TBzLPQ2GvBCZkC0wfmQhmTblPnlg+/Y/QMkg89sVp0
M7D8ytDadOLdWhi3+0grWSUqEsgS/M5kqfC8wfJpPudacDBaUMvHaRTOeNcYdpxn
U5SWJiptFVee6vztrhMlPj9ibBH+C3PjcNhNgN1QjoCjwiLLGFLcULEbl9vgQbt3
t7oBNzVO+Ydlqxd4ZV57CU8WUWRQLAFqR47ddymj2Xqrqwiwyz0fKxY9dlGERyVo
X/ma7re31FvNjEEoQdHf+OOhw5mgZRsW1gOD7CjzN5Eer8u8A0Lur9ZabEW2Mitf
AWbSjxmQVQzXGXOodYT1CmIZ8Br0D2oQywDKh4UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+mlk6/H3OSy2Mx5Ls6ya8kE5QyjAfBgNVHSMEGDAWgBS7/8mpgyZnrA1t
HiQGVQUzw7VWGDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VfX0pxWU1tWjZ3TmJSNGtCbFVGTThPMVZoZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvZmUxYjI4LTE1MTktNDA1NS1iMGZiLTc0OTdlNWE4ZjExYi8x
L3ZwcFpPdng5emtzdGpNZVM3T3NtdkpCT1VNby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
ZmUxYjI4LTE1MTktNDA1NS1iMGZiLTc0OTdlNWE4ZjExYi8xL3VfX0pxWU1tWjZ3
TmJSNGtCbFVGTThPMVZoZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcJztjANBgkqhkiG9w0BAQsFAAOC
AQEAi73Q0qk6ApaVKJ86Td2qZ82nu+EAF3av8mUtpg3DSjEzkth5dM/BGxSMefB5
Cd3MuaeH1et9ctKlgqUB2taPLBhSaJ03MGUzlWpBz/czi43TCFune22DYoX5kML6
H2DpC1Nh+AuOOWcpoja9EZSSwe6sKW6glaaZj+v0bIKZgEGC1aVmY8XX+y0DKjkD
5CoUANoH6v52ez17d6E2nf8hg2Qgce9y5KFcNTow5OmBehLp1nllmaRxTozz5+LF
c8Jp5x7RONjOuRnAnNviCBBm06vYMTs/13BMvB/lO5IRR/l06ct0dyVvte9PGM0G
Qhm2AGrbhA3rMw8B909j9Occdg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:46 2025 by rpki-client