Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8vspZO-u5X0HnN4B5wJCWe6vAAM.roa
File: 8vspZO-u5X0HnN4B5wJCWe6vAAM.roa (raw, json)
Hash identifier: Nc/pAdhYhWxdSkUdiHGgVu1y3S8YbMK1xVQspxdDFXY=
Subject key identifier: F2:FB:29:64:EF:AE:E5:7D:07:9C:DE:01:E7:02:42:59:EE:AF:00:03
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189B164BDBBA887D59564486DC9715185E2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8vspZO-u5X0HnN4B5wJCWe6vAAM.roa
Signing time: Tue 01 Aug 2023 13:58:36 +0000
ROA not before: Tue 01 Aug 2023 13:58:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.232.0/24 maxlen: 24
45.66.153.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:64:bd:bb:a8:87:d5:95:64:48:6d:c9:71:51:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 1 13:58:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2fb2964efaee57d079cde01e7024259eeaf0003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:a3:a0:00:7d:f1:0a:a2:3d:5b:ee:ef:44:
29:63:3a:06:3d:e9:09:04:62:f0:2f:d8:59:1e:34:
12:be:8f:74:3c:ad:e1:08:bb:5d:a1:c7:f2:49:56:
a9:3b:2d:5e:3e:b0:1b:41:ce:b3:55:54:10:c6:e2:
d3:5d:2b:3c:ed:f0:6d:5b:a0:8d:bf:9d:94:8d:29:
d9:8f:e7:8e:65:61:7e:9e:28:12:2b:88:eb:4b:14:
27:9b:0c:cd:7b:0d:7b:cd:df:0a:2b:23:39:a7:19:
45:ed:a4:18:18:07:00:cb:05:e5:24:18:76:09:a5:
89:7f:3a:0c:f7:21:92:e8:91:71:38:a8:db:8a:45:
42:cd:24:f1:55:fc:2e:39:a7:6e:be:be:a5:c2:03:
aa:96:84:93:6a:0a:d1:21:e2:9c:91:c6:76:e8:33:
b0:3b:51:a1:75:99:97:16:1e:ac:87:0e:6c:3e:7a:
5d:1b:d8:6d:0b:76:00:55:ea:9c:47:55:c2:47:fe:
d5:7c:c0:45:c5:63:d7:27:ae:14:a1:f1:3f:74:63:
86:fd:ae:d6:94:64:bf:21:db:2e:26:db:98:5b:b8:
3b:30:9f:9e:b5:09:fb:4f:ec:ad:15:18:04:e3:49:
00:1e:c7:30:3d:81:77:57:5c:3d:9a:82:cd:ad:ab:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:29:64:EF:AE:E5:7D:07:9C:DE:01:E7:02:42:59:EE:AF:00:03
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8vspZO-u5X0HnN4B5wJCWe6vAAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
5.180.232.0/24
45.66.153.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7f:bf:76:a1:70:9e:d1:3e:c8:53:72:2b:cb:ff:d1:43:c9:
88:a1:c0:a1:01:9f:9a:0d:e0:74:12:52:f7:57:f6:78:5c:8b:
c8:a3:db:4e:8d:d9:86:85:5f:5d:95:ec:85:9a:2c:4f:d0:75:
fa:ba:f8:44:0b:8f:fa:31:9c:7a:9c:39:2f:34:3a:5e:df:d1:
56:83:b7:97:b9:ea:d0:0e:72:52:a9:ba:66:19:6e:6e:21:bf:
fd:39:5c:a0:90:af:9b:08:a6:24:ea:18:26:e1:26:2c:3c:85:
76:47:45:30:1b:c0:fd:7d:e6:b9:85:d2:f4:5c:25:e7:df:5d:
3d:73:bb:c8:6a:b8:f9:d2:e6:80:b2:4e:87:57:b4:97:82:94:
0b:7c:00:56:8c:0b:c8:03:9a:d5:d8:40:35:41:a6:a9:8d:f2:
46:df:42:35:44:6e:a7:20:9f:da:eb:17:bf:17:33:60:98:65:
ac:6c:64:36:84:55:ea:41:41:23:d5:65:42:04:07:1c:99:58:
32:98:db:8c:42:95:4f:4c:93:c4:cd:b2:24:9c:ed:74:a1:be:
f6:84:6f:da:c4:6b:98:8d:28:e0:68:53:de:51:e3:e0:63:84:
09:bc:4b:fb:8d:98:ba:a1:1d:ac:e6:d0:24:0d:c0:1a:0b:02:
98:11:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:27:30 2025 by rpki-client