Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/VE3BpkFSSczJXI3Vha333wREwzU.roa
File: VE3BpkFSSczJXI3Vha333wREwzU.roa (raw, json)
Hash identifier: G9RWe0pZlCRK+LHUWzU2GmFLbSAJRuJqOw01I4eOylY=
Subject key identifier: 54:4D:C1:A6:41:52:49:CC:C9:5C:8D:D5:85:AD:F7:DF:04:44:C3:35
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 152223D4
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/VE3BpkFSSczJXI3Vha333wREwzU.roa
Signing time: Sat 01 Jan 2022 15:57:44 +0000
ROA not before: Sat 01 Jan 2022 15:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200271
IP address blocks: 185.255.84.0/22 maxlen: 22
2a02:4ba::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354558932 (0x152223d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Jan 1 15:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=544dc1a6415249ccc95c8dd585adf7df0444c335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:84:27:c4:ba:85:19:a9:2f:6b:a9:b2:1b:
27:62:a5:9b:2d:bd:a5:88:48:70:2c:af:bd:5d:76:
47:20:9c:91:b9:be:97:d3:f1:8b:f3:9c:84:fb:08:
71:eb:ef:45:85:f4:a1:1d:f7:f3:fe:11:d0:43:77:
6b:00:f8:ac:44:c4:63:85:d4:f8:0e:19:15:48:08:
17:8c:62:86:e7:ea:73:af:d3:51:bd:3f:21:37:d1:
cc:1c:d8:14:7d:dd:ce:c1:9c:69:f1:69:93:1e:57:
8c:92:02:85:41:f1:e6:ec:e7:3c:e3:7e:a3:9a:42:
81:9f:a5:a1:1b:42:9c:00:ce:52:b9:b8:44:03:ed:
ca:75:cc:f8:96:ef:90:67:a1:4d:dc:2b:e5:9a:08:
74:44:00:7e:ec:e2:58:5a:b2:29:96:00:e6:1b:b3:
70:67:b7:58:89:30:1e:3e:d1:5f:14:f7:6e:0d:de:
45:b8:75:64:44:53:d3:a9:68:5a:7d:cc:e3:e2:ef:
af:a8:54:29:17:83:cc:d6:81:22:18:2d:70:f0:07:
4c:f7:73:ce:ea:a9:0b:74:d6:68:00:59:a9:26:b2:
4f:41:a5:6d:ae:ae:88:6c:c3:bb:be:da:5e:44:86:
02:4f:a8:20:2c:23:2a:1f:b6:7a:c5:10:ef:8e:91:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:C1:A6:41:52:49:CC:C9:5C:8D:D5:85:AD:F7:DF:04:44:C3:35
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/VE3BpkFSSczJXI3Vha333wREwzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.84.0/22
IPv6:
2a02:4ba::/32
Signature Algorithm: sha256WithRSAEncryption
3f:6e:d6:0c:fb:a1:27:d1:00:11:47:ec:33:8b:09:1d:b1:80:
47:ca:f9:48:57:ec:c3:6c:7a:31:15:13:cb:a1:69:5f:66:b9:
42:b6:54:df:2d:6d:65:6e:0d:a9:59:9c:a2:57:af:6d:43:24:
75:53:d6:e3:b8:5e:aa:5e:62:a1:bb:93:fb:fe:9d:fc:34:43:
9a:46:d5:fe:fa:03:da:b9:dd:1e:b1:9a:f2:af:97:d3:e1:03:
80:fc:de:fe:fa:28:fa:06:fc:4e:0f:34:1c:6f:a7:ee:be:db:
98:c4:6d:96:f0:c4:ad:ce:18:aa:60:65:8c:27:d8:48:72:a1:
40:7c:a2:3d:e9:7d:0e:ae:93:d3:ce:f4:82:d3:f9:54:79:fb:
fb:bc:b3:c1:3c:56:74:de:c5:d7:0a:33:05:19:1a:c3:50:d3:
64:76:1c:1a:28:09:8e:ec:6d:78:ae:f8:fc:d3:2f:cb:f8:08:
03:c4:ee:1e:48:ac:6c:f6:1e:25:3c:94:9f:c8:b5:47:bf:72:
b4:41:be:04:bd:12:b4:41:73:ae:df:79:e9:f4:4c:d7:60:60:
4f:d7:e0:3c:6d:64:51:b7:23:a9:68:dc:12:e2:33:ba:c1:39:
fb:a6:f6:35:81:e0:e9:45:ee:22:90:53:b2:0d:f4:9e:16:b1:
7a:98:ac:42
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEFSIj1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZDc2ODNkNmVhNTM5ZmVmMWI2YjZkYmRkNzRhMzFkMDVlNWYwYTIzMB4XDTIyMDEw
MTE1NTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQ0ZGMxYTY0MTUy
NDljY2M5NWM4ZGQ1ODVhZGY3ZGYwNDQ0YzMzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKv5hCfEuoUZqS9rqbIbJ2Klmy29pYhIcCyvvV12RyCckbm+
l9Pxi/OchPsIcevvRYX0oR338/4R0EN3awD4rETEY4XU+A4ZFUgIF4xihufqc6/T
Ub0/ITfRzBzYFH3dzsGcafFpkx5XjJIChUHx5uznPON+o5pCgZ+loRtCnADOUrm4
RAPtynXM+JbvkGehTdwr5ZoIdEQAfuziWFqyKZYA5huzcGe3WIkwHj7RXxT3bg3e
Rbh1ZERT06loWn3M4+Lvr6hUKReDzNaBIhgtcPAHTPdzzuqpC3TWaABZqSayT0Gl
ba6uiGzDu77aXkSGAk+oICwjKh+2esUQ746Rt5sCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRUTcGmQVJJzMlcjdWFrfffBETDNTAfBgNVHSMEGDAWgBRNdoPW6lOf7xtr
bb3XSjHQXl8KIzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RYYUQxdXBUbi04YmEyMjkxMG94MEY1ZkNpTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvZTUxOTVkLTY2OTgtNDYwNC05MTE0LTY4YjM3NjhmNTBkYy8x
L1ZFM0Jwa0ZTU2N6SlhJM1ZoYTMzM3dSRXd6VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
ZTUxOTVkLTY2OTgtNDYwNC05MTE0LTY4YjM3NjhmNTBkYy8xL1RYYUQxdXBUbi04
YmEyMjkxMG94MEY1ZkNpTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArn/VDANBAIAAjAHAwUAKgIEujAN
BgkqhkiG9w0BAQsFAAOCAQEAP27WDPuhJ9EAEUfsM4sJHbGAR8r5SFfsw2x6MRUT
y6FpX2a5QrZU3y1tZW4NqVmcolevbUMkdVPW47heql5iobuT+/6d/DRDmkbV/voD
2rndHrGa8q+X0+EDgPze/voo+gb8Tg80HG+n7r7bmMRtlvDErc4YqmBljCfYSHKh
QHyiPel9Dq6T0870gtP5VHn7+7yzwTxWdN7F1wozBRkaw1DTZHYcGigJjuxteK74
/NMvy/gIA8TuHkisbPYeJTyUn8i1R79ytEG+BL0StEFzrt956fRM12BgT9fgPG1k
UbcjqWjcEuIzusE5+6b2NYHg6UXuIpBTsg30nhaxepisQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:11 2024 by rpki-client on console-fra.rpki-client.org