Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VscKcM7McvSXypRcCd2pXe04bZY.roa
File: VscKcM7McvSXypRcCd2pXe04bZY.roa (raw, json)
Hash identifier: 0d6r9W5KVVNSdkek1ifktlmCEnp8pXPDF8APJSoPKFQ=
Subject key identifier: 56:C7:0A:70:CE:CC:72:F4:97:CA:94:5C:09:DD:A9:5D:ED:38:6D:96
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01825D5CDCD65343EC581A2EAE2B86A68065
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VscKcM7McvSXypRcCd2pXe04bZY.roa
Signing time: Tue 02 Aug 2022 07:02:23 +0000
ROA not before: Tue 02 Aug 2022 07:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:5c:dc:d6:53:43:ec:58:1a:2e:ae:2b:86:a6:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 2 07:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56c70a70cecc72f497ca945c09dda95ded386d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:c9:36:0d:52:96:a2:26:08:22:22:36:1c:
51:64:45:fd:21:8d:6d:18:06:34:08:80:4d:28:65:
00:3f:3b:5b:3a:33:85:ec:16:7b:3f:34:d1:e5:17:
d8:31:45:7e:4e:93:2c:6f:34:f1:fe:a4:aa:66:b2:
a1:ef:37:72:fb:7c:38:27:22:fd:74:16:0b:8c:47:
ae:09:7a:1e:0d:7d:d5:93:0b:7d:d7:39:de:06:d1:
48:04:a5:95:45:2f:63:1f:dc:26:81:4d:63:d8:26:
e5:43:64:eb:94:90:a6:25:91:74:41:75:9b:68:8f:
14:2f:78:3a:d3:23:2a:cd:b9:18:47:c0:4b:c1:1c:
b9:c7:db:47:0a:08:bd:95:bc:6b:30:7e:49:c3:a2:
1f:93:fb:69:9b:12:d1:79:44:45:f5:59:88:58:d5:
16:b0:b6:c5:78:ea:3c:1f:7f:d4:3e:a7:51:b8:c9:
f5:ea:22:59:ac:21:ef:1c:02:29:95:b7:14:e2:5c:
ee:fe:77:ab:5f:f2:0f:05:41:7e:7f:5d:52:ee:b2:
8e:66:50:8a:2d:92:9f:0d:06:96:dc:e2:99:c9:96:
9c:ee:11:bf:8b:16:58:53:ec:9d:fb:dd:4a:b1:f7:
f9:a4:3a:cd:21:6d:33:8c:b7:91:93:ef:ce:46:19:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:0A:70:CE:CC:72:F4:97:CA:94:5C:09:DD:A9:5D:ED:38:6D:96
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VscKcM7McvSXypRcCd2pXe04bZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:be:3b:2e:96:49:37:b1:ef:7f:33:ea:c7:e2:96:94:f6:5c:
94:67:18:ba:c4:75:b3:ca:dd:01:0b:42:48:ef:aa:19:e3:fd:
6c:71:73:51:76:93:65:17:de:ce:c1:2f:03:54:73:70:83:5a:
90:23:f8:b2:64:db:f1:63:b7:b3:a8:db:db:fc:61:29:cd:af:
8f:47:50:d8:fb:75:90:46:0a:ea:f2:e1:9c:91:8f:73:ef:b2:
9c:c5:71:01:15:b3:63:4c:3d:0d:8b:5f:a2:96:f1:94:56:f0:
c6:78:5b:eb:cf:3b:7c:db:02:79:d7:fd:5f:4c:9c:e5:b3:66:
74:40:18:b8:9f:bb:7a:c1:64:84:85:7d:5c:a8:5f:67:5d:dc:
c8:2f:db:05:02:ed:b4:1e:fe:88:0e:40:f2:ed:56:bf:90:a5:
4a:79:2a:37:30:1c:4d:90:91:1a:1a:a7:36:ea:af:94:77:c1:
a0:e3:ad:ab:de:3e:22:af:84:00:cb:80:39:7d:21:f3:eb:4b:
ea:db:a3:87:fa:77:ec:83:cc:db:88:18:f7:d9:bc:40:45:4d:
e7:cb:1e:cf:e7:c7:6c:d5:48:57:a4:f7:64:14:25:c4:4c:f6:
38:e0:ff:aa:c6:5c:0e:00:45:f0:18:ec:22:30:b9:b4:36:f7:
f4:47:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org