Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/VxbfZUslWTJWxUs01-sSXXJSqz4.roa
File: VxbfZUslWTJWxUs01-sSXXJSqz4.roa (raw, json)
Hash identifier: s7zZ3YQiP4I44BD2AwhpLYvJ1UGuJanBczgZWAjOQOA=
Subject key identifier: 57:16:DF:65:4B:25:59:32:56:C5:4B:34:D7:EB:12:5D:72:52:AB:3E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0A3D3167
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/VxbfZUslWTJWxUs01-sSXXJSqz4.roa
Signing time: Sat 01 Jan 2022 04:01:37 +0000
ROA not before: Sat 01 Jan 2022 04:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51487
IP address blocks: 185.160.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171782503 (0xa3d3167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jan 1 04:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5716df654b25593256c54b34d7eb125d7252ab3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:25:3f:da:c5:7c:bb:5f:d8:5d:65:fb:e4:
fb:f9:e5:6c:f8:72:01:10:6f:cd:93:b5:6b:79:6e:
cf:ca:3e:6d:8e:b3:ca:4e:e7:a4:4d:f0:5a:0b:8a:
0c:9b:f0:8e:52:d2:5c:4a:3b:11:bc:54:14:96:27:
99:49:c4:70:79:1c:b7:b9:c2:e7:78:c2:49:c9:45:
eb:fa:c2:09:df:7a:c5:87:56:e9:21:c1:55:a9:11:
05:32:7e:e9:62:2f:3d:c4:bc:5e:25:45:19:0b:84:
84:0e:d2:55:c3:3b:66:1e:62:4f:c8:69:09:ab:5a:
4a:d4:d4:42:7a:89:83:2b:56:76:ed:80:2a:05:9f:
d4:c4:4c:f1:17:34:94:5e:76:e2:aa:ab:01:8e:da:
3c:f7:d8:ea:38:9f:4a:dc:1a:3a:9a:e6:37:d3:16:
30:56:91:e3:68:bb:99:eb:e9:35:7e:7a:60:2a:78:
3e:01:48:6e:58:e7:54:0c:a7:57:7f:9f:04:c5:90:
9e:73:be:59:46:3e:cc:bb:0e:15:d1:23:e6:59:c8:
a4:2d:27:9d:6f:a0:47:b4:8e:de:23:02:e7:83:ae:
54:52:a5:b6:e1:dd:ae:2a:b2:a9:33:c0:91:37:c4:
a8:e7:88:31:e9:07:1f:a3:44:3f:71:e8:3c:0e:98:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:DF:65:4B:25:59:32:56:C5:4B:34:D7:EB:12:5D:72:52:AB:3E
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/VxbfZUslWTJWxUs01-sSXXJSqz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4f:38:e8:7e:0a:1e:0f:58:ae:47:6d:a5:bd:d4:b3:3e:36:
74:fd:7e:e4:02:50:e2:a8:ac:72:ef:3a:b3:11:9d:f1:78:1c:
b6:42:61:5c:cb:f7:b9:c0:1c:52:27:c6:b3:2d:01:a1:dd:8c:
55:40:63:09:b7:6e:01:3e:47:42:99:29:e6:1f:39:54:68:2a:
23:2f:f2:69:a6:51:9b:fe:ad:68:7a:65:6a:d0:90:d9:0a:bd:
ca:c6:66:e5:fd:cc:94:e8:54:68:ad:50:19:f4:8b:7e:8a:31:
88:ff:2a:9e:79:b9:74:41:0c:d4:fa:25:89:50:81:d5:2c:dd:
7c:e0:6d:71:19:5a:2f:2f:d3:59:f9:03:c7:d5:23:e2:da:e1:
0d:81:9f:59:d8:a9:04:16:d4:d1:90:31:26:05:fc:01:b8:f4:
0a:17:c6:b3:ec:0e:67:25:50:d4:9a:42:4c:c1:b8:9e:b6:ee:
1a:66:01:04:42:97:7f:dd:45:75:e6:ca:b2:6e:7c:0d:12:54:
dd:e7:7a:49:74:55:ac:74:93:16:a9:e2:e9:f8:ba:4e:33:df:
21:d3:b4:2d:03:08:d1:45:c7:f7:1c:d3:65:87:85:57:d8:ef:
26:81:19:31:c6:bb:39:81:20:17:19:9b:6c:18:25:45:ab:86:
7b:2b:e0:95
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECj0xZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MTgxZDBjNDA5NTFhNGY5MDBlNGQ5ZGQ5YzIwZTQ4NTYzNTA5MjBlMB4XDTIyMDEw
MTA0MDEzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTcxNmRmNjU0YjI1
NTkzMjU2YzU0YjM0ZDdlYjEyNWQ3MjUyYWIzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANr4JT/axXy7X9hdZfvk+/nlbPhyARBvzZO1a3luz8o+bY6z
yk7npE3wWguKDJvwjlLSXEo7EbxUFJYnmUnEcHkct7nC53jCSclF6/rCCd96xYdW
6SHBVakRBTJ+6WIvPcS8XiVFGQuEhA7SVcM7Zh5iT8hpCataStTUQnqJgytWdu2A
KgWf1MRM8Rc0lF524qqrAY7aPPfY6jifStwaOprmN9MWMFaR42i7mevpNX56YCp4
PgFIbljnVAynV3+fBMWQnnO+WUY+zLsOFdEj5lnIpC0nnW+gR7SO3iMC54OuVFKl
tuHdriqyqTPAkTfEqOeIMekHH6NEP3HoPA6YOHsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXFt9lSyVZMlbFSzTX6xJdclKrPjAfBgNVHSMEGDAWgBTRgdDECVGk+QDk
2d2cIOSFY1CSDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBZSFF4QWxScFBrQTVObmRuQ0RraFdOUWtnNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvYTlkNzllLWIyODItNDNjMS04YjhhLTM4OGI4MWMwYzkwYy8x
L1Z4YmZaVXNsV1RKV3hVczAxLXNTWFhKU3F6NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
YTlkNzllLWIyODItNDNjMS04YjhhLTM4OGI4MWMwYzkwYy8xLzBZSFF4QWxScFBr
QTVObmRuQ0RraFdOUWtnNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmgmjANBgkqhkiG9w0BAQsFAAOC
AQEAnE846H4KHg9Yrkdtpb3Usz42dP1+5AJQ4qiscu86sxGd8XgctkJhXMv3ucAc
UifGsy0Bod2MVUBjCbduAT5HQpkp5h85VGgqIy/yaaZRm/6taHplatCQ2Qq9ysZm
5f3MlOhUaK1QGfSLfooxiP8qnnm5dEEM1PoliVCB1SzdfOBtcRlaLy/TWfkDx9Uj
4trhDYGfWdipBBbU0ZAxJgX8Abj0ChfGs+wOZyVQ1JpCTMG4nrbuGmYBBEKXf91F
debKsm58DRJU3ed6SXRVrHSTFqni6fi6TjPfIdO0LQMI0UXH9xzTZYeFV9jvJoEZ
Mca7OYEgFxmbbBglRauGeyvglQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:24:47 2025 by rpki-client