Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Vc0bAt8S-4x8Xc_527UbOzYLHBo.roa
File: Vc0bAt8S-4x8Xc_527UbOzYLHBo.roa (raw, json)
Hash identifier: 27T9LW4/Ni6Ppk7BGfXQilFtvwJi3WPaQj6yni+Zwjs=
Subject key identifier: 55:CD:1B:02:DF:12:FB:8C:7C:5D:CF:F9:DB:B5:1B:3B:36:0B:1C:1A
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E3E1ED2
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Vc0bAt8S-4x8Xc_527UbOzYLHBo.roa
Signing time: Wed 20 Apr 2022 06:37:55 +0000
ROA not before: Wed 20 Apr 2022 06:37:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60162
IP address blocks: 213.128.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238952146 (0xe3e1ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55cd1b02df12fb8c7c5dcff9dbb51b3b360b1c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:4d:e0:79:43:df:6c:6b:73:a1:0c:99:21:
51:6f:79:cc:8c:e2:f5:79:95:7e:2e:cc:ad:a8:31:
29:18:04:84:b5:37:9b:11:c8:72:17:fa:25:36:6f:
11:bd:09:59:b4:0c:db:8f:4d:7d:af:3f:61:6f:e1:
54:0d:1d:74:05:cd:0e:19:09:65:ad:6e:42:b0:f7:
b0:06:b7:a7:ca:fa:c7:94:db:ad:0e:1b:06:ed:52:
cf:8e:fe:be:a8:c7:f2:cd:0f:99:55:ef:0f:75:cc:
10:d7:af:98:fd:a6:5d:0a:6c:e9:b3:05:c2:54:33:
72:2e:57:8f:0f:38:ae:08:9b:9a:6d:b4:02:a6:32:
2b:aa:b4:c4:f5:b4:83:60:55:02:89:39:5e:5f:a6:
3b:98:c4:17:32:10:4b:5a:5a:fc:ca:03:dd:16:89:
92:03:c5:fe:08:00:bb:6d:17:10:8a:f1:1b:8f:97:
db:28:f3:12:00:81:d6:1b:15:72:c3:02:92:02:52:
25:ea:52:5f:33:2a:e4:f6:48:a7:e8:b4:94:6f:d6:
e0:fc:b0:ce:40:c1:92:44:a6:45:57:bf:fc:49:ff:
48:b0:4f:82:af:45:05:0a:99:5b:f6:4b:d8:2f:dc:
1a:68:a8:0e:04:16:10:cf:ea:b6:30:39:00:45:f2:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:1B:02:DF:12:FB:8C:7C:5D:CF:F9:DB:B5:1B:3B:36:0B:1C:1A
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Vc0bAt8S-4x8Xc_527UbOzYLHBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.128.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:0b:28:94:22:1a:9a:7f:cc:af:d0:4e:9d:12:11:14:e4:59:
29:ad:7d:f0:7e:c7:b7:56:9b:75:ad:a1:07:05:62:eb:ed:6f:
b4:65:e8:47:48:5d:45:cc:04:e5:5c:c1:c5:53:c9:21:5c:f6:
7a:34:b3:1f:f6:43:aa:4b:15:ec:b2:0c:22:9a:9a:62:b1:68:
2e:e2:63:a6:c6:1b:f5:7d:69:27:71:b0:d3:c8:d1:76:7b:0d:
9d:ac:14:d1:b7:d0:fd:00:54:87:ea:24:77:6b:80:5d:81:a6:
44:5b:04:02:af:74:3f:53:b1:f6:fa:ae:1b:3b:e4:fa:68:8d:
c0:a1:2e:46:e8:34:c9:96:e6:6c:81:62:6a:47:a7:7b:84:08:
37:d3:4f:42:e3:3d:0f:3e:98:69:22:2f:2f:3e:75:61:ec:da:
59:c5:a5:57:5c:26:2f:81:0c:98:bb:bf:45:2d:7c:16:60:88:
16:5e:93:da:63:85:41:d9:f9:70:a2:98:0e:05:e3:b2:4a:4b:
5b:ff:f8:a6:82:88:44:e5:33:91:da:37:a3:f5:fd:3a:90:86:
6f:ad:be:e5:e4:94:b2:16:53:67:97:76:b4:05:9b:4e:27:e0:
ad:aa:de:c6:05:c0:17:94:25:4c:ef:b5:4b:50:2d:c0:e2:dd:
94:22:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org