Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/VDclJ2KhQKuen35rOHTJLmmBDcM.roa
File: VDclJ2KhQKuen35rOHTJLmmBDcM.roa (raw, json)
Hash identifier: 3J37HgstMaCkTRqPE4s+g+q0803pJyHj8Zi2GNimWmQ=
Subject key identifier: 54:37:25:27:62:A1:40:AB:9E:9F:7E:6B:38:74:C9:2E:69:81:0D:C3
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 0B95F160
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/VDclJ2KhQKuen35rOHTJLmmBDcM.roa
Signing time: Sat 01 Jan 2022 05:06:06 +0000
ROA not before: Sat 01 Jan 2022 05:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50266
IP address blocks: 143.178.0.0/17 maxlen: 24
87.210.0.0/16 maxlen: 24
94.157.0.0/16 maxlen: 24
62.250.128.0/17 maxlen: 24
87.208.0.0/16 maxlen: 24
87.209.0.0/16 maxlen: 24
143.177.0.0/16 maxlen: 24
87.212.0.0/16 maxlen: 24
31.20.0.0/16 maxlen: 24
143.178.128.0/17 maxlen: 24
31.21.0.0/16 maxlen: 24
31.187.128.0/17 maxlen: 24
82.174.0.0/16 maxlen: 24
62.166.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194376032 (0xb95f160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Jan 1 05:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5437252762a140ab9e9f7e6b3874c92e69810dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:a2:2d:22:9e:a5:8d:f5:4e:8b:18:c9:04:
ab:fe:3e:70:e8:14:f3:ce:5b:c8:c3:5f:4d:cb:6d:
53:3f:22:c7:70:1b:17:49:6e:8b:44:51:c1:02:05:
48:dd:40:d5:4e:9e:13:ac:64:65:1b:ac:8b:7b:51:
97:2f:00:9a:8d:f7:5d:10:96:b9:49:f9:b2:ed:6a:
fb:cc:02:82:af:a6:c9:c9:6a:4c:43:db:a0:d4:e6:
62:00:ad:db:2f:7b:0e:c3:30:c6:de:42:95:65:bc:
3b:5b:02:5f:7c:df:39:c9:0a:8b:82:c7:64:0a:69:
b9:61:00:b6:d3:c0:90:be:24:b0:b0:30:b5:2c:46:
cb:b8:df:7f:9e:85:28:14:44:b2:4e:c9:3f:cf:0f:
ce:bd:75:be:b4:1c:f7:dc:f9:d8:85:b3:89:e6:3b:
57:40:af:a7:bf:55:13:d9:07:8b:ee:49:f6:58:5f:
10:ca:24:8a:3b:b7:c9:5c:d2:cd:0a:df:94:bb:71:
25:25:b3:6c:3c:5f:2c:d2:da:c7:ee:fe:b1:0e:50:
87:84:76:ef:de:8f:31:ac:48:2b:78:fe:9c:01:fc:
32:e6:48:f0:fe:14:6b:5a:98:c8:8d:09:e0:c5:28:
a8:43:29:8b:c3:b9:e2:e0:bd:ad:af:95:ed:92:a5:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:37:25:27:62:A1:40:AB:9E:9F:7E:6B:38:74:C9:2E:69:81:0D:C3
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/VDclJ2KhQKuen35rOHTJLmmBDcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.20.0.0/15
31.187.128.0/17
62.166.128.0/17
62.250.128.0/17
82.174.0.0/16
87.208.0.0-87.210.255.255
87.212.0.0/16
94.157.0.0/16
143.177.0.0-143.178.255.255
Signature Algorithm: sha256WithRSAEncryption
50:d5:78:1a:96:54:ad:f7:f0:8a:df:4a:c7:2c:b3:b1:d5:16:
4c:6a:11:64:b6:a3:a0:01:54:3f:7e:41:33:07:9b:31:13:c1:
1e:5b:72:87:ce:ee:12:fd:f6:f0:f3:26:98:6b:bb:af:72:9b:
8b:c6:03:70:90:ae:96:10:56:f3:d5:d2:6b:d8:09:c8:6b:9b:
3e:68:50:0d:45:e7:56:12:9b:ce:42:29:bc:3e:3c:d1:a8:42:
e4:83:f0:c3:60:26:23:4f:ac:18:2f:33:e5:3c:72:85:0f:ee:
b0:8f:5c:20:ac:63:5a:48:26:72:31:17:97:ae:72:f5:97:1d:
5d:f1:91:b5:97:00:47:98:76:61:43:eb:fe:ab:f2:a6:e4:74:
38:bd:42:1e:84:eb:a5:52:69:b7:66:84:49:51:04:db:c2:91:
ce:7b:ea:c5:b5:6c:0e:2c:e1:c2:77:5c:33:e8:d5:32:94:9e:
20:09:3a:15:b0:ae:23:e0:33:05:09:9f:f9:34:81:8e:e5:1e:
bb:6c:a3:7c:ef:44:99:ad:e0:e6:9c:c6:55:8b:d9:95:c1:f0:
84:ff:7c:40:56:ca:5c:bb:ab:07:bb:33:d0:15:9a:eb:4b:d6:
5d:6a:92:a8:97:3e:b0:ad:e0:f2:6e:fa:1f:8f:70:b2:9b:a1:
4d:3f:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:28 2025 by rpki-client