Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vdUTAzat503FLJ2evu0s60EmL0E.roa
File: vdUTAzat503FLJ2evu0s60EmL0E.roa (raw, json)
Hash identifier: AqzlniVg0g3LWht97dwd2HFhiDXqkci/noY47T6bTQA=
Subject key identifier: BD:D5:13:03:36:AD:E7:4D:C5:2C:9D:9E:BE:ED:2C:EB:41:26:2F:41
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 4294BD7C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vdUTAzat503FLJ2evu0s60EmL0E.roa
Signing time: Sat 01 Jan 2022 06:04:53 +0000
ROA not before: Sat 01 Jan 2022 06:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8443
IP address blocks: 95.159.128.0/18 maxlen: 18
95.159.174.0/23 maxlen: 23
95.159.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117044092 (0x4294bd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdd5130336ade74dc52c9d9ebeed2ceb41262f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:57:36:e0:bd:3f:6f:15:21:ae:7d:fa:13:
d5:64:7a:d1:17:1e:9d:43:ad:f9:c9:4b:94:cc:c9:
4d:0d:47:f0:16:ac:50:6e:d7:e1:dd:8a:47:24:01:
d6:ed:20:bd:51:8a:9b:4a:7e:2e:e7:6c:23:08:b1:
ca:ab:c1:76:a2:63:09:fe:fd:2d:8c:30:93:73:4a:
54:8e:55:4c:69:99:d4:2e:bf:2d:c1:f9:6b:1d:4b:
2c:02:a0:7e:19:4e:99:97:b3:a8:e4:c3:30:2c:54:
ad:48:44:2e:f3:a9:7f:1a:94:8e:e6:c6:bd:09:0b:
ae:48:63:c5:94:39:3a:ef:06:7c:4f:fd:60:47:a5:
b7:cf:f1:be:6f:3d:b2:8d:42:e8:aa:6b:61:13:6a:
47:a9:0c:e9:17:a4:ac:84:31:bf:b1:d7:6d:6e:a6:
08:23:31:34:5d:79:5c:a0:d9:ff:8b:3a:01:28:a4:
fd:93:ab:6e:ba:c8:7a:ba:82:10:d5:cc:95:c2:ad:
13:ae:50:eb:71:6b:31:5f:56:cb:c8:4d:df:36:a1:
a2:78:e3:9e:a7:ac:a8:06:66:36:9d:3c:a6:34:88:
47:ee:fb:a8:01:4b:75:8c:a0:1a:19:47:bd:f1:65:
a8:e1:01:37:40:f6:47:fc:d0:e3:67:37:ef:a0:1b:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:13:03:36:AD:E7:4D:C5:2C:9D:9E:BE:ED:2C:EB:41:26:2F:41
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vdUTAzat503FLJ2evu0s60EmL0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:1e:b0:f9:01:02:f8:7b:84:5e:31:e3:8c:7d:7b:bd:0d:d3:
da:b5:72:05:ef:5e:f1:49:c5:bc:14:72:a7:7c:26:2f:54:b0:
dd:c6:c9:d1:4c:db:52:d9:89:75:b2:7f:5f:3e:aa:b9:d1:8d:
c7:12:66:d0:67:e4:fa:cf:dd:39:58:53:66:4d:f5:44:e0:dd:
70:71:48:bc:af:17:56:90:4b:03:a1:c8:a6:16:f2:5a:86:ae:
51:b9:b7:07:78:c1:57:25:7b:89:fd:3f:12:30:ac:f5:9e:08:
ed:11:10:37:70:37:70:e8:2c:92:38:21:e9:f4:ab:5e:ef:95:
9f:23:00:d3:a4:41:16:66:6e:cf:bb:a4:aa:9c:ab:04:1a:9b:
e0:10:87:8c:46:7b:77:5a:78:94:d1:00:e5:01:2f:a4:e7:bf:
06:28:b1:07:2c:80:dc:60:d9:42:57:f0:bf:f0:47:01:01:c6:
cb:31:e2:24:5e:c1:83:c2:68:23:b0:d7:f9:c2:0c:b3:b1:99:
f8:ef:1a:3e:e4:ba:7f:a7:2b:df:e0:98:c9:4b:21:56:ba:a3:
84:60:9f:b9:f8:ee:27:36:20:b3:63:02:21:e2:b5:73:96:ea:
f0:a7:91:f1:76:60:90:6f:30:56:a1:7b:29:28:48:05:40:62:
77:4d:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:26 2024 by rpki-client on console-ams.rpki-client.org