Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/VVCheuxHzqWTr0iYPiD5uJOdWDk.roa
File: VVCheuxHzqWTr0iYPiD5uJOdWDk.roa (raw, json)
Hash identifier: QubWgSWlSIg213A9AB1q9Jaj4a0rhl3U5vvXcXA5suU=
Subject key identifier: 55:50:A1:7A:EC:47:CE:A5:93:AF:48:98:3E:20:F9:B8:93:9D:58:39
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0191D2BF
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/VVCheuxHzqWTr0iYPiD5uJOdWDk.roa
Signing time: Thu 03 Feb 2022 11:04:24 +0000
ROA not before: Thu 03 Feb 2022 11:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208661
IP address blocks: 2a0c:b6c3::/32 maxlen: 32
2a0c:b6c7::/32 maxlen: 32
2a0c:b6c5::/32 maxlen: 32
2a0c:b6c1::/32 maxlen: 32
2a0c:b6c4::/32 maxlen: 32
2a0c:b6c2::/32 maxlen: 32
2a0c:b6c0::/32 maxlen: 32
2a0c:b6c6::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26333887 (0x191d2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Feb 3 11:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5550a17aec47cea593af48983e20f9b8939d5839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:2f:0a:db:53:37:4d:64:ba:93:87:1d:24:
a6:e2:22:2c:c7:a8:b2:62:11:80:40:c7:2d:47:72:
0c:a7:cd:74:60:4a:99:2b:e8:81:21:1e:9b:17:a1:
90:a1:af:90:1e:51:68:22:82:b2:20:7a:56:91:e9:
94:cb:f4:41:60:2d:f7:08:c1:88:60:a3:5e:2c:3c:
73:92:97:06:6f:9f:09:59:c9:6c:ca:36:f5:83:ce:
2b:ba:75:e9:53:a3:90:80:04:39:40:89:f4:b2:91:
2d:94:4d:b6:4d:86:66:74:d5:46:c1:f3:7c:89:af:
e8:76:7b:c4:b4:2d:f3:ed:9f:31:83:ec:c1:75:05:
50:5e:e7:f8:e7:3a:7b:42:c5:ba:91:b1:79:a1:e5:
dd:0d:df:69:3a:8f:04:5a:34:34:79:84:55:9e:0b:
83:02:f9:d2:b9:c8:da:4b:57:47:b9:10:4c:d8:bd:
94:04:6b:5c:72:93:ca:b1:87:5c:d7:fb:e1:40:6e:
6c:ea:75:db:c2:71:c5:05:ab:57:ca:00:54:5c:1b:
2c:2d:46:c2:fe:7d:73:e2:9d:bc:c6:14:38:58:98:
ac:a2:d4:86:db:fb:0f:55:66:0a:62:8b:21:20:25:
33:97:77:15:0a:23:22:50:1c:78:e8:d2:50:4b:a8:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:50:A1:7A:EC:47:CE:A5:93:AF:48:98:3E:20:F9:B8:93:9D:58:39
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/VVCheuxHzqWTr0iYPiD5uJOdWDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:f8:41:71:37:4a:ae:19:87:9a:7e:da:a3:cb:21:f6:86:ca:
76:50:27:67:e5:3d:df:3d:d1:b8:fd:73:9f:67:e9:a8:2f:86:
1e:cd:c6:73:71:ca:65:b3:5b:5f:66:a6:3b:a0:c0:d0:46:b3:
1e:e8:33:2f:d1:50:c7:ea:8d:87:93:85:66:a2:2a:3d:61:6a:
a7:9b:aa:d3:50:60:fa:59:be:a6:94:dd:41:a5:b3:1d:89:ca:
8e:dc:cf:56:e2:8b:d9:b2:31:b1:de:e5:56:65:73:02:a7:1b:
c9:6b:0d:1a:42:94:36:b3:b3:e2:e4:e9:34:29:10:00:6c:73:
90:fe:31:fb:37:c4:33:c2:81:8c:b4:a9:73:da:6c:9e:8a:a3:
a7:7b:fb:74:68:3c:37:59:89:41:bc:aa:c4:b1:12:c8:f4:08:
96:fa:6e:ac:e4:bc:72:b8:26:88:21:37:48:5d:e1:1c:bf:ac:
71:e7:9d:a7:35:9e:52:52:28:f5:96:2e:7f:7d:94:df:ed:32:
6b:f9:51:37:93:ef:50:40:aa:ff:02:a2:60:15:c5:b4:e6:7a:
cd:e0:a8:3d:07:2b:bb:c7:af:e5:4c:f8:64:e0:70:e8:9a:b5:
55:5b:c5:83:72:69:b3:7c:74:4b:70:25:63:05:74:28:0f:b7:
46:60:59:03
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAZHSvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzUyNmNjYWM0ZjkwNjRlMDU4NTQ5YjMwMTcyYzg0NDM5Nzg3ZmJjMB4XDTIyMDIw
MzExMDQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTU1MGExN2FlYzQ3
Y2VhNTkzYWY0ODk4M2UyMGY5Yjg5MzlkNTgzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHHLwrbUzdNZLqThx0kpuIiLMeosmIRgEDHLUdyDKfNdGBK
mSvogSEemxehkKGvkB5RaCKCsiB6VpHplMv0QWAt9wjBiGCjXiw8c5KXBm+fCVnJ
bMo29YPOK7p16VOjkIAEOUCJ9LKRLZRNtk2GZnTVRsHzfImv6HZ7xLQt8+2fMYPs
wXUFUF7n+Oc6e0LFupGxeaHl3Q3faTqPBFo0NHmEVZ4LgwL50rnI2ktXR7kQTNi9
lARrXHKTyrGHXNf74UBubOp128JxxQWrV8oAVFwbLC1Gwv59c+KdvMYUOFiYrKLU
htv7D1VmCmKLISAlM5d3FQojIlAceOjSUEuo/CsCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBRVUKF67EfOpZOvSJg+IPm4k51YOTAfBgNVHSMEGDAWgBQXUmzKxPkGTgWF
SbMBcshEOXh/vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YxSnN5c1Q1Qms0RmhVbXpBWExJUkRsNGY3dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYzlhYTgxLTViZmQtNDUzNS05NjA2LTk0MWNjNmE3YmFkOS8x
L1ZWQ2hldXhIenFXVHIwaVlQaUQ1dUpPZFdEay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YzlhYTgxLTViZmQtNDUzNS05NjA2LTk0MWNjNmE3YmFkOS8xL0YxSnN5c1Q1Qms0
RmhVbXpBWExJUkRsNGY3dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoMtsAwDQYJKoZIhvcNAQELBQAD
ggEBAGb4QXE3Sq4Zh5p+2qPLIfaGynZQJ2flPd890bj9c59n6agvhh7NxnNxymWz
W19mpjugwNBGsx7oMy/RUMfqjYeThWaiKj1haqebqtNQYPpZvqaU3UGlsx2Jyo7c
z1bii9myMbHe5VZlcwKnG8lrDRpClDazs+Lk6TQpEABsc5D+Mfs3xDPCgYy0qXPa
bJ6Ko6d7+3RoPDdZiUG8qsSxEsj0CJb6bqzkvHK4JoghN0hd4Ry/rHHnnac1nlJS
KPWWLn99lN/tMmv5UTeT71BAqv8ComAVxbTmes3gqD0HK7vHr+VM+GTgcOiatVVb
xYNyabN8dEtwJWMFdCgPt0ZgWQM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:15 2024 by rpki-client on console-fra.rpki-client.org