Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/Vlm_c0_9VmcLoo-3fCcmEqtJFV0.roa
File: Vlm_c0_9VmcLoo-3fCcmEqtJFV0.roa (raw, json)
Hash identifier: h6aT4Y9sIhdcqV7c7auMsiM0Kpg0U1FyKwXABzoizD4=
Subject key identifier: 56:59:BF:73:4F:FD:56:67:0B:A2:8F:B7:7C:27:26:12:AB:49:15:5D
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 089B64CD
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/Vlm_c0_9VmcLoo-3fCcmEqtJFV0.roa
Signing time: Sat 01 Jan 2022 08:04:40 +0000
ROA not before: Sat 01 Jan 2022 08:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59770
IP address blocks: 185.53.72.0/22 maxlen: 22
2a04:cc40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144401613 (0x89b64cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Jan 1 08:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5659bf734ffd56670ba28fb77c272612ab49155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:49:a1:40:38:17:e5:82:ec:91:ae:7b:58:
ae:a9:e2:a6:ff:63:30:67:d9:d0:a2:b3:a5:a1:b1:
95:d2:9d:f9:3b:97:d6:55:8c:7e:8e:ae:74:46:59:
30:53:70:40:47:a1:43:03:1e:f7:27:df:41:c7:47:
fc:d6:0b:63:f7:cc:84:f3:83:d6:c1:69:10:e0:87:
63:d9:1e:46:35:cb:bb:c0:d4:e8:59:3c:18:ec:6e:
4c:7c:0d:8b:06:82:67:12:62:fc:24:44:f6:13:b5:
76:71:a7:3e:af:01:8c:90:1d:0c:8c:74:70:cd:7a:
52:d3:97:68:5c:fc:cd:fb:e4:cd:e1:f1:46:a7:17:
95:9f:ea:b7:84:5d:01:9f:f9:c6:cf:ea:20:37:ee:
f9:27:d8:ea:8d:dd:6d:3d:e3:4a:02:fe:34:8d:e2:
99:52:c6:d4:cf:f3:00:3e:53:c3:0d:83:79:6b:6e:
a2:f0:1d:9a:df:4b:45:64:1c:9c:40:a1:ea:38:53:
05:a2:72:e8:46:c4:fe:20:e9:20:44:b7:f5:6b:b2:
52:ce:0f:cc:b6:11:d5:70:47:45:9d:d3:84:03:e6:
43:cf:d1:e5:2b:73:11:d2:bf:b4:e8:1c:d5:f2:77:
12:f5:5e:04:12:52:08:7b:37:bb:4c:3b:54:92:ef:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:BF:73:4F:FD:56:67:0B:A2:8F:B7:7C:27:26:12:AB:49:15:5D
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/Vlm_c0_9VmcLoo-3fCcmEqtJFV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.72.0/22
IPv6:
2a04:cc40::/29
Signature Algorithm: sha256WithRSAEncryption
91:0f:c2:aa:ab:ad:4b:40:fa:81:c7:42:d5:c2:73:61:92:44:
5a:bf:b1:20:c2:bd:7e:ee:08:26:15:d1:4f:5e:38:6f:e3:2e:
52:30:9e:96:8e:30:a3:87:34:91:67:7c:9d:88:fe:cb:e1:da:
5c:9d:5e:2c:f0:b5:3a:15:d8:ee:e1:17:1b:57:35:94:28:e1:
f8:4f:de:9f:49:72:ad:69:a5:1a:6e:43:8f:d6:b0:48:e5:6f:
2d:9d:64:5b:3a:73:16:18:47:e3:b0:66:63:17:cc:d4:56:31:
c8:fd:0e:cb:21:d2:a5:35:f1:9e:27:65:f7:70:20:15:41:b1:
23:42:70:05:e8:21:38:6d:8c:1d:e6:6a:51:7e:9f:cb:d0:5a:
da:8f:a5:e9:cf:1f:da:62:4b:a6:4d:53:54:7e:87:8b:1e:61:
17:ff:b1:87:d2:d7:ef:2c:8b:e2:bc:4b:fc:ce:7d:db:2c:a1:
91:7a:f9:4c:1f:cb:14:bc:6c:40:01:9c:15:33:77:75:0a:ea:
05:55:36:89:f8:77:15:ab:b6:c7:61:a2:7d:7a:d4:8e:78:f4:
3b:ac:da:24:99:b5:ad:ab:49:ad:87:88:23:f9:94:6c:7c:77:
91:ee:8c:e2:47:bc:d3:fd:ea:f8:d5:bd:7c:28:9b:2b:ab:f3:
cc:de:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:25 2024 by rpki-client on console-fra.rpki-client.org