Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VejraJ5NUmhQZ_UhunBnlH5OQJM.roa
File: VejraJ5NUmhQZ_UhunBnlH5OQJM.roa (raw, json)
Hash identifier: 3bWvw7noN5TyA9eBcYkphbehFHYV5M4hHzADGyPpd1M=
Subject key identifier: 55:E8:EB:68:9E:4D:52:68:50:67:F5:21:BA:70:67:94:7E:4E:40:93
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184755EE15F87F15D924D6BEE4E1070170D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VejraJ5NUmhQZ_UhunBnlH5OQJM.roa
Signing time: Mon 14 Nov 2022 09:01:03 +0000
ROA not before: Mon 14 Nov 2022 09:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.88.136.0/23 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:5e:e1:5f:87:f1:5d:92:4d:6b:ee:4e:10:70:17:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 14 09:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55e8eb689e4d52685067f521ba7067947e4e4093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:f1:3d:42:03:89:fc:0a:02:c3:57:35:7c:
58:e4:35:62:ce:f4:df:0f:ae:37:a1:d8:fe:84:a3:
f8:fa:79:71:ae:0c:db:c7:be:93:50:72:06:7a:78:
7d:5b:e9:5a:1a:13:ab:9f:56:be:7b:e7:5b:b9:5a:
7b:5b:25:e8:88:99:f2:80:ba:02:52:bc:6e:c0:b3:
18:40:75:07:aa:ac:2a:f9:63:d1:ae:ce:8b:0e:23:
a9:ec:60:b4:53:94:e0:e9:7a:e7:32:7c:3b:f5:e8:
53:97:69:80:36:83:fd:c3:11:d4:97:18:6b:76:a4:
15:86:a4:44:a6:35:5e:1c:38:db:66:c1:e9:cd:97:
cc:40:b2:eb:52:d0:10:e0:cc:ba:65:b9:8b:e7:02:
f1:5e:1b:93:2e:53:b7:d0:15:4e:43:d6:6d:7c:b9:
b2:6e:75:6f:8d:56:24:26:7c:24:e1:7e:e2:e7:18:
03:dd:0f:ec:17:54:f2:9c:13:aa:8d:f1:72:38:95:
e9:9a:35:09:e1:53:4d:dd:8f:1c:ea:ff:39:5e:ea:
fe:76:24:71:7f:d9:7f:ef:9f:be:03:1f:ab:c4:6d:
b1:ab:90:b4:af:d3:ef:e8:55:60:7a:63:6c:f2:09:
f3:68:0a:9e:a4:41:20:5b:03:ec:64:0a:f5:70:4f:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:EB:68:9E:4D:52:68:50:67:F5:21:BA:70:67:94:7E:4E:40:93
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VejraJ5NUmhQZ_UhunBnlH5OQJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.190.0/24
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
85.209.122.0/23
193.30.241.0/24
194.242.97.0/24
195.177.92.0/24
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0e:50:04:3c:5f:14:90:c8:98:3e:16:12:6b:2f:83:0d:39:
c1:99:bd:4a:0f:07:8a:32:b8:4c:eb:73:a4:a7:0c:18:30:c0:
8c:a4:3e:60:d1:89:41:eb:37:dd:ca:32:e7:dc:86:8c:75:97:
5a:5d:6b:f1:50:f9:4e:d8:e1:52:42:62:74:b8:ec:27:2f:ce:
32:26:95:47:42:72:9d:4a:5f:cf:bc:ad:3b:3c:cb:27:ae:d1:
2b:c4:83:55:df:a6:87:1b:1d:9c:b2:cd:cc:5b:df:88:33:3d:
57:67:6a:6d:fb:af:9a:cb:dd:4a:eb:21:8a:f0:d0:4c:c2:4f:
e2:a2:49:d2:8a:67:fa:bd:04:30:3b:a0:f0:6c:92:69:dd:25:
d7:fd:e3:41:8d:44:ed:a2:9f:af:02:3e:54:51:a7:7f:70:0e:
5e:99:f3:d3:4e:92:d3:a8:d8:e0:ff:ad:13:e1:b3:6f:05:0a:
af:56:88:6c:c9:c5:5d:a7:96:0c:1c:07:bc:43:85:0b:56:52:
0e:ad:21:ba:18:b2:88:ed:0d:a4:d7:09:65:ee:60:66:d4:11:
6d:d1:39:3a:78:02:e6:09:a6:f9:90:8b:5f:fd:45:9f:fb:7c:
96:24:7c:6e:e9:da:3c:1f:fc:72:af:42:12:7c:21:47:53:30:
73:02:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org