Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/V5PY50O55VTWR_-DRQo5jmwLnis.roa
File: V5PY50O55VTWR_-DRQo5jmwLnis.roa (raw, json)
Hash identifier: JnXfX4S5ze/gb33uFRkRpDUDcxX7cCy92RUNLH4dn6s=
Subject key identifier: 57:93:D8:E7:43:B9:E5:54:D6:47:FF:83:45:0A:39:8E:6C:0B:9E:2B
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0AA832AA
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/V5PY50O55VTWR_-DRQo5jmwLnis.roa
Signing time: Thu 24 Mar 2022 15:06:47 +0000
ROA not before: Thu 24 Mar 2022 15:06:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56598
IP address blocks: 45.11.172.0/22 maxlen: 32
193.168.206.0/23 maxlen: 32
193.168.204.0/23 maxlen: 32
2a09:6980::/29 maxlen: 48
2a0e:9900::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178795178 (0xaa832aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Mar 24 15:06:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5793d8e743b9e554d647ff83450a398e6c0b9e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:c4:3d:55:d1:03:2c:30:00:1c:6d:38:2a:
a1:bc:a2:e1:d6:8a:14:e7:f5:f5:d6:da:b1:61:bb:
93:12:90:48:7c:0c:34:89:f9:e8:21:05:f7:34:5f:
f6:45:10:96:d9:5c:a5:82:40:ce:52:bd:23:4f:ab:
52:0b:ad:4d:4e:64:94:78:5f:eb:90:a8:6b:3e:d1:
53:75:c1:0d:75:e7:9d:0f:b8:0a:69:54:05:33:f9:
6e:86:1c:7e:c1:f2:05:8a:64:bd:4e:46:46:39:fd:
bb:ae:f8:2d:a3:56:59:58:39:fd:08:e2:bc:cf:c0:
13:47:a9:5d:af:73:f3:8c:a7:51:72:8c:60:8a:0e:
a3:f2:ee:f9:a1:de:b4:8d:52:21:c3:51:31:9e:88:
c9:96:3b:b8:ab:5a:ff:7c:c2:cc:cb:11:ed:a3:1b:
35:3d:21:01:5d:ec:f0:a6:45:1d:a3:f4:c1:98:9f:
30:e4:bc:e3:68:cb:f0:1c:7d:51:89:d3:f3:cd:ad:
88:8c:86:e9:8d:d7:79:5c:45:23:a4:9f:2e:00:d1:
07:3e:49:70:ab:0e:51:c8:6a:f7:46:c3:5c:18:5b:
c4:df:fc:9b:37:2f:79:09:3e:6b:23:56:c3:bf:1b:
5e:6c:d4:e3:a5:37:37:22:25:9e:bd:8b:9c:32:6c:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:D8:E7:43:B9:E5:54:D6:47:FF:83:45:0A:39:8E:6C:0B:9E:2B
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/V5PY50O55VTWR_-DRQo5jmwLnis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.172.0/22
193.168.204.0/22
IPv6:
2a09:6980::/29
2a0e:9900::/29
Signature Algorithm: sha256WithRSAEncryption
8a:1f:1a:bd:24:ab:a4:10:0e:27:c2:0f:39:05:32:71:dc:95:
7a:31:38:8b:4f:de:95:fc:e9:1c:d3:82:01:8e:ed:e8:de:fc:
c3:4c:e1:9f:a5:9a:6b:0a:0e:fa:b5:1d:90:bb:64:86:99:84:
36:d9:c1:62:c7:4c:b0:95:9c:8a:92:16:43:b5:b9:a4:76:9d:
d3:5c:aa:61:5f:a1:2c:74:97:c6:d3:81:50:a9:8f:a2:3c:92:
ef:26:10:34:9c:15:db:6e:9d:18:c3:3b:5d:3e:48:90:37:70:
a8:96:59:ac:2a:57:56:54:b3:ae:ec:87:18:0d:e3:e9:0e:52:
63:36:e4:5a:92:03:b8:ab:7a:45:a9:f8:19:68:d8:d7:10:b8:
ac:25:fe:bd:20:6e:c1:c5:b5:7d:39:9b:bd:5d:d0:a5:6e:82:
1f:39:00:c2:50:55:98:41:87:da:07:42:e5:aa:f4:7f:91:f1:
eb:73:43:67:5c:d2:74:7e:da:75:5f:e0:38:48:3c:cb:c1:80:
e7:0d:bc:80:a3:95:9f:da:89:33:87:10:94:e1:4d:f3:e7:b5:
fd:1a:c7:0e:da:9c:4d:eb:f5:13:a3:24:7a:6c:70:26:11:a4:
4d:93:62:ec:09:5c:2a:61:70:db:c6:43:e8:c7:00:52:46:d2:
90:b6:65:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:42 2024 by rpki-client on console-ams.rpki-client.org