Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/vXWTq3gXt_YNe_RTYrHluc6jMSE.roa
File: vXWTq3gXt_YNe_RTYrHluc6jMSE.roa (raw, json)
Hash identifier: Ghqpd4zAelDPmtKkX+kDJQIynkvx3pxjufK+TKssuG0=
Subject key identifier: BD:75:93:AB:78:17:B7:F6:0D:7B:F4:53:62:B1:E5:B9:CE:A3:31:21
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 0188C44F6D28B52E7EE359999872ADED4602
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/vXWTq3gXt_YNe_RTYrHluc6jMSE.roa
Signing time: Fri 16 Jun 2023 13:05:19 +0000
ROA not before: Fri 16 Jun 2023 13:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43989
IP address blocks: 195.206.246.0/23 maxlen: 23
195.216.202.0/23 maxlen: 23
185.181.136.0/22 maxlen: 22
79.98.40.0/21 maxlen: 21
109.234.56.0/21 maxlen: 21
93.188.96.0/21 maxlen: 21
2a01:b600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:4f:6d:28:b5:2e:7e:e3:59:99:98:72:ad:ed:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Jun 16 13:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7593ab7817b7f60d7bf45362b1e5b9cea33121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:7e:7c:ce:e7:b7:fa:fe:69:0e:4a:67:bc:
23:7e:a4:e9:cc:65:98:84:7d:dd:be:15:a7:33:1b:
fc:1a:21:5c:f1:cb:22:37:1f:c4:86:e6:b4:22:b2:
96:7a:99:a5:de:6e:1a:4e:f6:ab:41:3a:ae:6b:0f:
8c:ce:d7:2e:01:de:ad:0c:23:5f:f7:7f:73:6a:39:
97:57:47:58:f4:52:9e:69:08:3f:1d:fc:a2:85:c7:
92:cd:2b:8d:d0:2c:4c:a6:1d:28:eb:ba:98:54:c2:
2a:73:2c:74:eb:78:6a:7c:99:91:a7:27:4b:fa:94:
3d:8e:bb:b2:39:3b:00:11:bd:4c:75:ae:c3:a4:93:
a5:2a:bd:86:a3:7e:04:4d:1a:56:e2:0c:6f:24:28:
bb:c7:43:ab:b5:5e:f2:f2:61:4e:7f:5d:19:4e:72:
2f:6a:70:28:dd:63:d2:44:dd:3d:5e:5b:98:53:b3:
28:1b:ee:73:18:5b:c3:65:5a:66:4e:a2:06:4d:c9:
d0:a0:c6:ec:46:05:cf:6d:db:70:9c:db:b0:4d:3c:
d5:42:22:b1:58:cf:74:8e:be:76:75:d8:94:8c:86:
54:62:c0:e9:3c:bd:62:18:3d:7e:a1:73:4c:25:7a:
1e:bd:c0:48:4f:c3:72:1a:0e:a0:8a:91:e2:10:bd:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:93:AB:78:17:B7:F6:0D:7B:F4:53:62:B1:E5:B9:CE:A3:31:21
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/vXWTq3gXt_YNe_RTYrHluc6jMSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.40.0/21
93.188.96.0/21
109.234.56.0/21
185.181.136.0/22
195.206.246.0/23
195.216.202.0/23
IPv6:
2a01:b600::/32
Signature Algorithm: sha256WithRSAEncryption
3f:68:08:1e:a7:04:ea:bb:49:1a:57:e9:52:71:bc:40:c2:7c:
76:a8:67:79:49:48:12:0b:c8:39:29:b7:08:5d:50:07:f0:6d:
65:61:15:29:86:ea:b3:b8:37:fb:16:5e:fa:3d:2d:c2:18:dc:
26:a3:2e:7e:b4:de:c6:b7:f1:c0:cb:2a:4a:49:01:5b:02:8d:
10:21:aa:36:e9:99:bb:c3:4d:a1:b6:a0:65:c2:40:d3:d4:3e:
b2:be:76:0b:1e:0f:3b:f0:c9:26:98:55:42:0a:9c:e4:2f:38:
9a:0a:d0:f8:d2:cb:06:da:6f:21:dd:e4:b2:2f:b8:7e:a2:16:
4e:cf:5c:41:76:8d:e5:f8:23:e8:d7:1f:7d:8a:30:13:80:f2:
2f:c0:5f:eb:96:9c:50:88:bb:56:37:d1:33:be:de:4d:80:7d:
b1:9c:79:ed:c3:03:a4:b5:f3:cd:6f:b9:94:41:e7:c1:5a:e4:
7c:f3:c5:7b:17:32:eb:20:b5:4a:8f:4a:ed:08:6c:fa:b0:86:
6a:26:21:62:0c:07:71:67:e1:1c:8d:63:db:d1:81:0d:ef:5b:
0d:40:38:e9:8a:e5:7e:73:eb:74:31:b8:5a:b3:0f:59:b6:8c:
49:73:48:db:4f:2b:ec:e8:57:1b:e3:43:97:fd:24:40:e8:e5:
ee:28:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:21:05 2025 by rpki-client