Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vxdLCY-dtT-8qmhyufPwtBTMhXQ.roa
File: vxdLCY-dtT-8qmhyufPwtBTMhXQ.roa (raw, json)
Hash identifier: R2uFAQ4KJ8ACPCfwUJc73pSU7bjxw8ZtfnAa8lgjtaI=
Subject key identifier: BF:17:4B:09:8F:9D:B5:3F:BC:AA:68:72:B9:F3:F0:B4:14:CC:85:74
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 080BA05E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vxdLCY-dtT-8qmhyufPwtBTMhXQ.roa
Signing time: Tue 29 Mar 2022 10:55:56 +0000
ROA not before: Tue 29 Mar 2022 10:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134979678 (0x80ba05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 29 10:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf174b098f9db53fbcaa6872b9f3f0b414cc8574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:4e:99:87:2f:e0:e6:ce:1d:04:bb:a0:02:
a6:7b:27:0f:bb:67:ca:75:57:4d:fd:c2:09:09:cd:
88:96:f8:79:5f:4e:7a:b3:a7:53:a1:f9:49:eb:cd:
12:7b:ba:51:2b:57:8d:ef:61:03:03:f6:78:3b:7a:
7d:af:1b:d1:84:d7:85:d9:b1:1f:b8:bd:ec:4c:a3:
5d:eb:0a:ea:8b:a9:af:d0:56:6f:16:2e:be:89:29:
70:5c:d6:63:e7:8d:dd:fe:25:60:83:14:fe:68:bd:
7e:4f:eb:25:1a:87:9c:8c:5c:81:5c:cc:2b:12:9f:
b8:21:2f:65:ae:78:0b:09:c6:18:e3:d3:81:c4:d4:
bd:b1:5b:7c:9f:69:66:e4:67:75:f3:4d:9d:bd:4c:
a2:c9:41:eb:8d:f7:1e:6d:f3:5c:81:d7:48:61:f4:
42:ac:03:a0:11:01:b8:cb:67:ab:49:83:db:7a:28:
29:c6:2c:7f:a2:6d:ac:43:59:c0:23:b3:49:d3:18:
f0:a6:12:d3:7b:b8:db:22:ba:25:eb:69:7b:28:0a:
a4:d0:6a:7c:6d:52:08:6a:f5:10:44:f8:c9:8a:49:
00:20:97:61:de:ae:c1:9d:13:8f:90:4d:c8:c9:b2:
a0:54:45:b5:05:da:64:f7:3e:fe:23:ef:6c:e4:39:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:4B:09:8F:9D:B5:3F:BC:AA:68:72:B9:F3:F0:B4:14:CC:85:74
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vxdLCY-dtT-8qmhyufPwtBTMhXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.13.190.0/24
45.144.212.0/24
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2b:cc:e5:65:e8:cb:09:70:a0:d9:9c:bc:4f:07:62:b3:81:
22:3f:bd:83:39:f2:10:ad:5a:7a:73:e9:56:23:8d:14:dc:8e:
ba:48:a9:f4:93:55:d7:24:ca:c9:e2:9d:cf:e0:8f:31:bc:26:
3f:65:8d:c6:36:19:1a:2d:ce:1e:ca:11:34:9f:eb:75:9d:aa:
37:9c:90:b4:82:2f:27:e5:07:b4:8c:58:30:b0:1a:33:cb:e2:
31:fb:56:90:64:66:54:6d:45:b8:df:02:a6:8f:9e:98:18:2c:
22:cd:db:81:d2:5a:b7:1a:0a:1e:21:8c:ea:57:f7:16:21:c2:
1a:a8:e2:62:9f:2e:7f:6f:8c:aa:4d:34:bc:bf:c2:47:7a:f7:
4d:a4:78:ff:c7:41:62:97:d3:67:03:aa:b7:0c:c4:82:43:d4:
ed:3d:cf:c6:b2:e3:4a:8c:53:3a:48:05:1e:ec:85:68:13:34:
ee:b6:d1:b9:53:a0:c0:88:74:1e:b7:5e:4f:64:ab:7d:10:3a:
6d:18:86:b5:dd:d4:9d:f8:79:fa:79:fc:4a:0d:39:ac:c6:25:
79:65:45:68:39:94:f3:a9:0f:fd:23:ce:20:05:8c:0e:7d:d2:
c4:75:ed:5d:51:f5:9f:f6:b6:37:67:6e:9f:30:f5:ff:e1:d7:
31:fd:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org