Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vntcmGjBWrxOlKop0JBYo9BWJWg.roa
File: vntcmGjBWrxOlKop0JBYo9BWJWg.roa (raw, json)
Hash identifier: ZkFv36YIErZTJBO+pCqYdWDJ4EQCTxeFef5VdQkCAEE=
Subject key identifier: BE:7B:5C:98:68:C1:5A:BC:4E:94:AA:29:D0:90:58:A3:D0:56:25:68
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 429858E6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vntcmGjBWrxOlKop0JBYo9BWJWg.roa
Signing time: Sat 01 Jan 2022 06:04:56 +0000
ROA not before: Sat 01 Jan 2022 06:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16287
IP address blocks: 87.103.216.0/21 maxlen: 21
217.116.128.0/24 maxlen: 24
217.116.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117280486 (0x429858e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be7b5c9868c15abc4e94aa29d09058a3d0562568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:e2:f7:2e:ac:be:0d:4f:41:4d:99:f2:4f:
b8:0a:42:af:46:26:8e:29:94:da:b7:23:6b:79:10:
b4:c7:48:b6:9a:89:a3:7c:3a:75:9f:42:47:2f:a0:
86:8c:1e:7c:0a:73:7d:b2:50:4f:43:fa:7d:a0:de:
3a:47:db:24:25:a9:8c:29:cc:bf:dc:93:0f:8f:06:
a4:49:75:66:23:17:78:87:aa:8d:81:e1:7c:55:c0:
98:d9:84:bc:4d:ce:7d:7c:b7:c9:d5:cb:0e:10:f3:
ea:7c:c0:8f:39:5b:77:e0:29:bc:b3:2d:0b:15:94:
d5:dd:e4:54:f2:c6:2d:85:fd:f6:b8:ed:53:4b:ba:
48:d4:2a:3d:6b:f2:b5:9e:78:7f:a1:82:ab:34:90:
c2:30:cb:4f:f3:6e:72:da:b0:cb:03:09:3b:24:fb:
92:11:85:09:b8:34:ba:91:94:d8:42:d5:5d:80:af:
c1:e9:14:1d:0e:fe:78:a9:04:f5:a8:fb:c6:d4:98:
43:71:a7:44:19:3b:c0:7a:5b:86:e9:38:4b:f4:d1:
5a:17:f0:59:78:6e:21:cb:66:25:c6:4f:2c:ce:c9:
b7:65:c6:c5:65:65:00:d0:1d:c8:89:71:49:7a:1f:
b6:15:7b:d0:19:9d:d4:1d:c6:0c:ca:a6:f5:22:bc:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:5C:98:68:C1:5A:BC:4E:94:AA:29:D0:90:58:A3:D0:56:25:68
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vntcmGjBWrxOlKop0JBYo9BWJWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.103.216.0/21
217.116.128.0/24
217.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6b:3f:b0:25:e3:15:b8:24:67:98:04:8a:57:a0:74:bb:28:
b5:13:a6:bc:e7:88:0d:f6:dd:8d:ca:8e:df:b0:cf:fc:ef:4c:
88:a1:cc:a2:c5:fc:65:ab:d8:7b:f9:63:f1:5e:95:45:b7:14:
f9:ba:d0:32:ee:fe:b0:fe:57:5a:13:c5:6c:53:74:55:90:b1:
19:a4:b9:ff:8b:cd:ea:60:8b:40:15:1f:6f:8d:55:4c:30:2f:
c1:a7:b1:fb:bd:ca:bb:36:18:ee:a9:f0:8d:48:f4:2e:76:d8:
4f:ba:c7:99:d2:49:cf:30:f9:ee:0e:c5:0d:a1:63:58:60:5d:
ef:cd:f0:57:74:71:53:ee:3f:41:c7:da:d4:01:b2:a3:28:81:
61:3f:d7:e5:ad:9b:45:0d:b5:48:38:d6:ea:b9:d8:c1:45:8f:
ed:cf:d6:4e:87:6e:e1:12:60:33:4b:14:d4:8c:fb:3f:79:06:
4d:37:d5:0f:28:65:24:2c:b9:cd:ba:32:a2:24:3e:63:79:d5:
1c:29:6b:a8:15:8b:77:62:d3:af:fc:32:be:24:f5:80:2d:75:
09:5d:e7:17:2b:f4:ed:5b:5d:f9:1b:4f:9a:f0:e4:b5:3f:be:
71:7a:75:8a:d2:fd:96:80:ba:0e:94:47:a1:21:c1:20:72:f5:
ec:15:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:40:55 2025 by rpki-client