Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/vZwgQK7qFaLo1PQKZqYWVqNlv4c.roa
File: vZwgQK7qFaLo1PQKZqYWVqNlv4c.roa (raw, json)
Hash identifier: 947N5a98ahuvDb6NtDz0hMBuYOwQwML6JyUXX2fmUcs=
Subject key identifier: BD:9C:20:40:AE:EA:15:A2:E8:D4:F4:0A:66:A6:16:56:A3:65:BF:87
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36C7B9B2
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/vZwgQK7qFaLo1PQKZqYWVqNlv4c.roa
Signing time: Mon 23 May 2022 08:15:29 +0000
ROA not before: Mon 23 May 2022 08:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3329
IP address blocks: 82.198.32.0/20 maxlen: 24
82.198.32.0/19 maxlen: 24
212.22.32.0/20 maxlen: 24
82.198.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919058866 (0x36c7b9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 08:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd9c2040aeea15a2e8d4f40a66a61656a365bf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:ee:da:ae:2c:e0:05:92:da:15:38:a4:7d:
c0:be:0c:6c:df:4d:9a:9c:36:a5:a3:5f:c9:14:4f:
f0:2d:cf:06:30:63:97:ba:2e:48:df:ac:b0:d0:34:
2b:60:24:88:19:91:e9:03:b3:d3:71:fa:fe:bb:7e:
0b:0e:d1:03:bd:2c:2c:91:95:9d:60:7b:68:f6:71:
0c:2b:27:a5:57:59:db:2a:e7:10:6a:ec:ef:ad:18:
f5:59:d3:4d:fb:dc:de:bd:18:08:3c:c4:b3:bd:06:
72:4c:3c:e2:8a:8a:2f:df:b5:eb:01:6b:3e:61:a7:
d6:f5:02:fa:16:5a:3e:de:3f:61:13:c8:c3:4d:f8:
72:0d:e0:c8:03:bc:15:86:a0:e6:48:27:49:b1:48:
83:5d:79:cb:bf:75:ec:4d:c9:7c:4e:36:d3:dd:c8:
01:dc:68:21:0e:69:53:91:8e:f1:22:a9:fe:81:ba:
93:fd:78:3b:1d:5a:a2:c0:5a:eb:79:7b:67:5a:80:
98:c6:ef:a6:53:c8:ca:bb:b4:02:ac:79:17:a4:c1:
ff:60:e8:62:f7:a4:42:61:cd:25:98:48:97:82:aa:
a6:51:9a:d8:64:ac:21:e4:fc:3d:14:7f:d6:26:22:
58:ea:6f:2c:8a:5a:d0:c5:fb:77:91:fd:d1:ad:b5:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:20:40:AE:EA:15:A2:E8:D4:F4:0A:66:A6:16:56:A3:65:BF:87
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/vZwgQK7qFaLo1PQKZqYWVqNlv4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.32.0/19
212.22.32.0/20
Signature Algorithm: sha256WithRSAEncryption
09:b8:d7:44:70:8f:57:cf:4c:82:74:dd:76:3c:b8:5c:e7:a5:
27:87:54:d9:13:8c:0c:36:07:52:b5:8e:54:07:b4:dd:fb:07:
f3:42:39:66:b4:da:0f:47:ff:af:b8:3a:b6:23:8b:d2:d9:7e:
9e:19:a9:3a:a1:f0:69:7f:75:ec:e3:1c:aa:44:2d:6d:83:04:
f5:09:0a:03:1a:1f:0f:61:0a:7a:11:96:19:2d:59:ad:80:6a:
60:93:01:4d:9c:f6:92:f8:89:cd:b7:52:a2:5a:fc:dd:8d:94:
d1:67:8a:ea:86:bf:a6:79:db:4e:4f:f7:f5:7b:85:16:7f:f0:
62:22:ae:d2:38:e5:e7:22:ae:c0:d9:78:0f:ac:e0:3d:1f:17:
5c:59:30:d5:73:f5:6a:bc:9d:ab:39:0a:3b:c2:9f:93:50:c6:
6e:7f:87:9c:ff:9f:a4:07:2c:88:75:2b:53:e0:0d:71:fc:0c:
51:a3:2e:69:39:a1:27:b6:07:bb:21:65:a4:72:b1:fd:76:f7:
7f:a7:82:2f:4b:d3:7d:c5:38:65:8d:91:c2:8e:51:59:49:d7:
10:b3:0e:0e:61:29:0a:86:ec:14:96:16:b9:d0:95:b7:e1:76:
88:bd:c8:83:e6:e9:51:5d:5a:6f:f5:14:b7:ae:be:d3:20:37:
53:19:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:02:23 2025 by rpki-client