Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/VPTetohOxHbp3wcwqLF7-1yc9wU.roa
File: VPTetohOxHbp3wcwqLF7-1yc9wU.roa (raw, json)
Hash identifier: T2TyV1pF9FeUyjZv1JqTKfKLfVAPFsXNZQnxUe15TQ0=
Subject key identifier: 54:F4:DE:B6:88:4E:C4:76:E9:DF:07:30:A8:B1:7B:FB:5C:9C:F7:05
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 063E9110
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/VPTetohOxHbp3wcwqLF7-1yc9wU.roa
Signing time: Sat 01 Jan 2022 11:00:01 +0000
ROA not before: Sat 01 Jan 2022 11:00:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206685
IP address blocks: 159.255.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104763664 (0x63e9110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jan 1 11:00:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54f4deb6884ec476e9df0730a8b17bfb5c9cf705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:d8:c2:54:b9:1d:38:b1:4a:35:ba:1e:3f:
b2:08:93:b3:0f:c6:65:c0:59:18:ef:7b:38:f0:fd:
4d:ef:0b:44:52:45:43:25:8b:4a:fb:16:c2:cc:ac:
bc:f3:ec:af:2a:3c:51:15:cb:24:b4:fc:33:13:9e:
cd:33:65:4e:73:34:89:d1:db:40:da:56:42:93:c1:
af:c7:09:0d:14:8c:a6:1d:b7:47:47:68:95:1f:da:
db:10:6b:23:3e:dc:6c:8a:0e:5e:25:f7:d3:62:da:
2e:bb:05:9d:e5:ea:0a:0f:da:0e:73:24:a7:3d:f8:
2a:5f:bd:f8:9f:f3:f1:02:e3:17:77:72:9f:d7:03:
8b:e3:bc:3f:56:e9:2d:b7:b2:61:45:89:f4:3c:99:
e9:b3:40:b7:cd:88:9c:6c:b5:1c:fc:3c:02:a3:15:
ad:0e:47:ef:6a:d5:1c:72:64:08:1a:86:6a:4b:6a:
74:07:bf:7b:d7:b8:0b:a9:65:1a:d7:1e:98:08:86:
85:4e:e3:8e:4d:e3:c1:ed:73:6b:76:f1:0b:0f:71:
0f:05:88:6d:39:94:f6:e5:22:d8:03:8c:92:72:9c:
9c:bc:5e:c3:57:0d:b4:80:f5:f3:0d:e0:07:90:dc:
8a:1b:a4:24:a5:72:90:98:c0:42:9e:0d:d1:f9:8e:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:DE:B6:88:4E:C4:76:E9:DF:07:30:A8:B1:7B:FB:5C:9C:F7:05
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/VPTetohOxHbp3wcwqLF7-1yc9wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fd:ee:63:da:dd:15:b6:2c:35:b8:dd:35:2b:e5:7d:e0:2e:
5a:f9:4a:80:97:ca:ba:cf:82:a5:2c:4f:41:7d:31:e1:48:7b:
fd:19:0d:0a:3f:73:ba:ee:be:e9:29:03:b7:0d:39:cf:de:97:
0b:ab:fb:76:1d:a9:b1:7b:37:2d:70:df:42:63:57:9e:a3:fd:
21:52:f6:74:fa:1f:6b:98:5c:bb:3f:c8:09:28:e9:40:a0:b8:
21:75:37:5e:e5:78:60:5e:db:ac:9d:9f:3d:e7:15:22:38:f1:
4d:e7:f8:6f:31:d5:d1:8f:54:07:76:49:41:e2:11:9a:d7:79:
78:ef:26:0e:36:37:84:20:44:ab:a5:e2:9a:89:ca:13:10:ee:
7e:ec:f7:b7:a8:d3:96:d3:af:4f:17:cf:3c:52:e2:bb:23:93:
d0:aa:75:4c:65:28:dc:72:51:be:78:98:bd:1a:d0:c9:de:30:
c0:0e:6c:c9:99:34:ac:15:b9:25:25:30:d1:59:87:7b:ee:31:
6e:1a:a8:0a:e6:8c:a6:ae:3c:c4:80:94:0d:c4:bb:72:9b:05:
b0:31:bd:ef:b2:cf:fb:25:08:2e:f0:1f:e7:f7:74:a2:ff:77:
c0:4e:f6:d7:16:19:17:1d:b2:76:36:2a:8c:be:e6:8d:71:ff:
b8:f8:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:23 2024 by rpki-client on console-ams.rpki-client.org