Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/VfFE1M6spnK9Jol8sJ2Tkc08oH8.roa
File: VfFE1M6spnK9Jol8sJ2Tkc08oH8.roa (raw, json)
Hash identifier: BJX5GuDsB4idzp1ioCVYbLvXVwIGFtC8GqWHqbFlWqs=
Subject key identifier: 55:F1:44:D4:CE:AC:A6:72:BD:26:89:7C:B0:9D:93:91:CD:3C:A0:7F
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0186BCC87AD19C50A16245888C578268467D
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/VfFE1M6spnK9Jol8sJ2Tkc08oH8.roa
Signing time: Tue 07 Mar 2023 15:55:00 +0000
ROA not before: Tue 07 Mar 2023 15:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200918
IP address blocks: 45.145.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:c8:7a:d1:9c:50:a1:62:45:88:8c:57:82:68:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Mar 7 15:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f144d4ceaca672bd26897cb09d9391cd3ca07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:cf:be:ba:99:fc:c3:05:73:06:e2:64:45:
a9:e7:c2:a3:c0:90:a6:73:cb:b8:6c:29:2d:33:57:
ee:09:a7:b0:33:a4:59:64:8e:e6:99:c5:b0:23:39:
af:c0:27:e4:1f:59:e0:b8:8d:d9:70:7d:f1:ac:03:
7b:65:fe:4a:2a:33:a6:f7:dd:9a:44:a5:d6:6c:b3:
c8:bd:b6:86:d1:3f:8b:5a:b7:66:e6:e9:e3:97:9c:
a0:8d:3f:3b:7c:59:aa:9c:d9:14:2f:f4:35:d4:19:
b1:3f:99:f9:6e:42:d7:fe:cf:6b:98:e0:e1:ce:43:
a3:11:d7:78:d0:25:fb:e5:18:ab:db:5a:c1:a1:f0:
b6:a4:87:f3:ff:ef:a2:bb:4c:d4:da:2b:8d:3f:ee:
8c:5b:0a:aa:a9:a3:53:27:4b:97:bd:4c:32:8c:87:
ec:48:85:b3:ed:d5:ae:6e:02:b4:51:41:d2:2c:33:
c7:97:e6:e6:7a:8f:20:44:a5:89:5d:9b:45:09:cc:
3f:22:b5:94:a3:c4:0e:03:7a:21:1e:49:44:2d:a1:
09:f5:21:1b:97:81:b0:b6:42:13:a1:68:a8:4b:f9:
14:70:9b:73:99:2b:c4:05:4e:ee:ca:96:1a:d9:2c:
49:b6:c9:84:9b:73:42:03:76:ff:3d:bb:fc:c4:62:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:44:D4:CE:AC:A6:72:BD:26:89:7C:B0:9D:93:91:CD:3C:A0:7F
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/VfFE1M6spnK9Jol8sJ2Tkc08oH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.220.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f9:34:bd:59:a7:9b:03:17:c0:4a:18:2d:49:53:2a:ae:9b:
1e:8b:e5:01:6b:b9:2a:2f:6a:0a:b7:24:fb:25:f3:dc:8a:f7:
4d:bb:25:80:2c:23:a2:de:1c:6a:62:6a:b2:ac:fb:d0:b5:a0:
1a:dc:47:69:cb:5e:51:1a:97:bc:bc:3d:be:74:ba:ca:91:3b:
3d:d1:2c:ab:e5:8a:bf:05:a8:3e:5a:bd:40:c5:b8:35:b6:db:
65:dd:07:bf:32:eb:5e:50:6e:40:0c:98:e0:be:b5:52:75:2d:
d4:d6:a0:fa:df:b9:e9:fc:84:98:bf:2f:88:90:eb:45:59:ac:
54:f9:52:aa:48:0f:f1:c0:b7:34:24:3d:f8:3b:12:8d:fa:56:
7b:4d:28:15:b1:0f:ca:5b:03:90:f4:27:e3:2f:30:2d:8c:8f:
f4:11:dd:6b:e9:62:26:b5:1c:e1:24:c8:d0:d2:51:23:97:64:
ae:e4:ea:51:41:f8:29:20:77:4a:0b:74:88:07:67:77:96:7c:
1a:f9:d0:99:00:83:f3:9b:34:9f:7f:af:1a:b2:d2:0d:08:c6:
b7:ac:73:61:b2:8c:35:61:cf:36:d2:15:03:c3:1f:99:0b:92:
f7:88:4c:5e:67:f6:94:6e:e3:52:73:d4:92:27:59:81:de:73:
8b:3d:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:32 2025 by rpki-client