Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VfBFDqoKPvwtwiNUpR1pym6j15E.roa
File: VfBFDqoKPvwtwiNUpR1pym6j15E.roa (raw, json)
Hash identifier: 2ooovS/2IBWDU7A8fdMhFCOb5pdSUXoeVTcJWYpTITI=
Subject key identifier: 55:F0:45:0E:AA:0A:3E:FC:2D:C2:23:54:A5:1D:69:CA:6E:A3:D7:91
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01876E21802C8A2D2A28B93E691E17768FF5
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VfBFDqoKPvwtwiNUpR1pym6j15E.roa
Signing time: Tue 11 Apr 2023 02:25:01 +0000
ROA not before: Tue 11 Apr 2023 02:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31733
IP address blocks: 45.135.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:21:80:2c:8a:2d:2a:28:b9:3e:69:1e:17:76:8f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 11 02:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f0450eaa0a3efc2dc22354a51d69ca6ea3d791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:9b:ee:c8:e0:be:26:9a:58:1e:5e:52:2f:
f8:5c:46:41:48:c3:b9:aa:d6:7b:4e:0a:ba:bb:41:
cd:c0:2c:d5:51:1f:8b:ee:12:5d:fd:95:71:82:38:
d7:80:da:c0:d7:d6:ac:a5:86:62:a7:b7:98:f2:ff:
6d:f9:66:d8:19:01:61:57:0d:72:f1:56:ed:95:3b:
f3:e6:fc:f8:25:9d:fd:47:99:72:a8:1c:f9:02:e0:
4c:a7:36:ed:52:fc:e8:98:66:40:30:72:7f:ec:02:
db:d4:0e:bb:2a:34:cc:75:84:1b:31:76:0d:cd:57:
e3:99:d4:30:64:71:9a:a4:c0:80:27:d8:3a:3d:e4:
2e:73:4f:33:20:54:ae:c5:84:4a:c7:aa:59:4b:c5:
41:8d:5e:e4:ab:bb:b5:14:01:be:c7:59:d4:3e:88:
d8:66:b1:c9:95:a4:0a:55:d3:11:2d:07:31:c8:d1:
07:0e:c8:95:ba:28:e6:1d:ae:78:32:e4:e3:38:72:
9f:ca:56:58:ec:e1:03:cd:88:10:bb:0a:b3:a5:05:
34:fe:94:65:4a:52:db:e5:9c:62:d4:34:19:69:a5:
9c:50:a8:03:dd:6d:3d:3c:72:3a:d1:4b:a6:36:97:
50:9d:70:41:80:21:79:6f:2b:e6:4f:cf:a4:de:22:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:45:0E:AA:0A:3E:FC:2D:C2:23:54:A5:1D:69:CA:6E:A3:D7:91
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VfBFDqoKPvwtwiNUpR1pym6j15E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/23
Signature Algorithm: sha256WithRSAEncryption
72:fb:74:ea:cf:7d:eb:5c:5b:09:fa:8b:61:32:36:29:07:f5:
5b:87:f8:86:13:75:42:74:b1:cb:ea:40:81:f9:14:db:d8:f6:
09:75:53:58:4a:c4:02:63:0e:7b:66:f8:e7:91:f3:1d:9b:e2:
bf:d9:9c:8b:8b:20:70:96:01:ea:49:38:07:45:55:b6:ff:3d:
71:83:d5:45:79:cc:36:dc:fd:7e:d1:48:bf:06:c0:d6:1d:d2:
d0:ea:4b:e4:41:82:06:1e:5d:0f:08:6c:36:11:70:be:44:9d:
72:a3:66:8c:07:69:1d:6e:2b:e8:d5:e8:21:5d:50:26:ae:97:
90:5a:1d:cb:73:3f:5b:8e:47:39:f9:34:6b:61:82:dc:2d:c3:
03:f2:37:f7:e3:85:96:d7:24:10:e0:b1:a2:c8:87:95:bd:03:
97:b8:a8:0e:73:03:5f:a0:96:fe:ca:3f:33:be:45:60:b0:0d:
4b:68:da:3e:7a:d2:4b:fb:f5:af:ea:a0:9b:9d:d6:27:1d:67:
64:ea:4e:f0:9d:e4:aa:24:f9:f6:85:bf:13:7a:ce:0f:8d:e1:
e5:ec:72:05:4e:70:79:46:f8:fd:0c:dd:b6:30:c0:7e:de:e2:
b0:c0:56:8a:71:2e:78:f3:d6:47:f0:27:ad:c0:5d:27:dc:21:
a7:51:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:35:02 2025 by rpki-client