Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/vXim14B8gGUE1vvDr_gtsIz7owc.roa
File: vXim14B8gGUE1vvDr_gtsIz7owc.roa (raw, json)
Hash identifier: 28ZBVVPTaMlgzyEdgrDjYys80jKUghJav5kttKVRddw=
Subject key identifier: BD:78:A6:D7:80:7C:80:65:04:D6:FB:C3:AF:F8:2D:B0:8C:FB:A3:07
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 01634D
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/vXim14B8gGUE1vvDr_gtsIz7owc.roa
Signing time: Tue 15 Mar 2022 11:05:13 +0000
ROA not before: Tue 15 Mar 2022 11:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8698
IP address blocks: 155.192.55.0/24 maxlen: 24
155.131.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90957 (0x1634d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Mar 15 11:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd78a6d7807c806504d6fbc3aff82db08cfba307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:01:5c:aa:f2:66:8d:15:25:63:2e:a6:34:
70:4f:03:7b:56:58:e6:93:64:8d:18:06:a5:aa:d8:
31:ed:8e:1f:ae:dd:2f:19:6e:a3:a0:4c:ce:30:cb:
b5:5f:ad:e3:7b:9a:0f:7d:25:6f:df:ef:09:80:5a:
be:13:67:5e:af:93:b6:56:4d:3d:27:e2:79:0f:76:
cd:f7:dd:a8:29:57:ff:37:31:75:bd:6b:7e:c3:ce:
5e:80:fe:ed:ac:a4:c8:86:9c:40:b8:fc:39:62:fa:
a0:6e:c8:00:19:ca:49:1d:64:b3:82:2d:e8:3e:60:
36:1a:55:e9:88:03:ac:e0:1d:3e:b8:85:eb:c8:a9:
57:87:f7:12:76:21:e6:a0:af:04:2b:cc:7e:8a:5c:
6a:09:24:7d:18:23:ab:ee:b6:ef:2d:35:d4:ec:e8:
d6:53:84:3b:a7:7b:0d:4c:e1:aa:92:5c:3d:ae:c2:
40:1a:cd:7d:a2:fb:22:5f:64:e8:76:9a:2d:17:45:
a6:22:ca:c1:f8:87:50:55:9f:88:a5:6d:21:74:1d:
1e:e8:97:0a:cb:f2:2f:57:cd:ae:5e:be:66:df:57:
67:f3:44:4a:8e:43:d3:13:42:84:43:7f:a9:25:8b:
c4:99:22:f3:b0:68:82:a8:e6:c3:14:fa:2c:00:82:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:A6:D7:80:7C:80:65:04:D6:FB:C3:AF:F8:2D:B0:8C:FB:A3:07
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/vXim14B8gGUE1vvDr_gtsIz7owc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.131.55.0/24
155.192.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:92:19:81:ba:fd:3e:66:cb:5a:0e:f2:11:b3:90:3b:10:0e:
c3:6e:0d:f8:20:a5:28:0d:4b:04:3e:a5:cd:63:c2:5c:9c:1d:
f5:49:0e:3e:f9:6a:c8:31:b0:23:6c:ef:7c:68:26:78:81:2a:
64:e6:09:7e:b4:24:a4:7b:e9:38:6a:43:32:00:7f:71:e6:d9:
4c:cb:d1:0a:0e:5a:c6:d8:0e:d4:44:c5:21:36:65:13:5b:a8:
02:c7:e8:f1:54:59:a9:ff:09:79:9f:79:56:13:57:81:2c:09:
68:b7:58:a4:1e:6d:de:3a:b8:ee:cb:4c:93:7d:a0:df:a5:3c:
4f:7b:81:69:ad:b5:74:c3:b6:b5:b3:03:d3:4e:8d:56:af:43:
ee:30:8d:2a:39:24:a3:93:95:8d:cb:57:75:eb:a9:e0:51:04:
b5:0e:f6:95:a6:64:14:7d:b1:94:80:9d:de:e5:86:88:11:9b:
3f:2f:22:ba:71:27:7a:86:2b:76:ba:40:c1:25:f9:30:97:3f:
0d:74:12:59:de:76:04:4f:7e:0b:51:36:66:cd:6f:25:05:25:
98:85:6a:22:d1:0f:13:8c:47:b0:3a:94:e6:13:ce:c5:83:ee:
66:a4:c7:6b:33:cb:f1:89:30:c9:99:bd:82:e6:8b:ef:ca:ba:
7b:13:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:21 2023 by rpki-client on console-ams.rpki-client.org