Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vmnTXCuN6RlExXg9ZG_odx98RPE.roa
File: vmnTXCuN6RlExXg9ZG_odx98RPE.roa (raw, json)
Hash identifier: 8ooKQGLmkV+DABzazuPPzYep0+tBtpyL/kWDpM++vbQ=
Subject key identifier: BE:69:D3:5C:2B:8D:E9:19:44:C5:78:3D:64:6F:E8:77:1F:7C:44:F1
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 08B762FF
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vmnTXCuN6RlExXg9ZG_odx98RPE.roa
Signing time: Sat 01 Jan 2022 14:01:51 +0000
ROA not before: Sat 01 Jan 2022 14:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211635
IP address blocks: 2a0e:8f02:2120::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146236159 (0x8b762ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 14:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be69d35c2b8de91944c5783d646fe8771f7c44f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:ed:1c:ac:b2:9b:05:d0:0c:2f:24:fb:00:
7d:19:0e:8d:7a:1c:26:8c:0b:33:5a:c4:b1:d0:20:
ba:4b:af:e5:7f:a1:e5:ba:63:fd:6c:4a:75:81:e1:
86:b7:30:3a:2a:7e:bf:50:96:f9:28:9b:14:c3:ad:
ab:e6:9f:83:d3:99:1b:a3:99:67:07:3d:a8:25:84:
44:00:79:b2:9c:53:65:c3:cc:e6:65:85:7e:0b:b5:
b8:43:5e:aa:48:d9:97:d8:7a:b4:ec:c8:c7:e0:4e:
7b:ff:8a:01:23:8a:53:af:ec:fd:85:7f:1d:98:83:
21:da:31:75:9d:d0:b9:6b:d3:d5:de:3b:ef:7f:56:
be:f8:93:84:ed:c5:1a:1d:95:e6:3d:8a:4e:dc:91:
b2:e0:03:08:df:5e:60:b0:54:12:29:4d:32:e6:4b:
ea:b6:fb:06:90:12:a2:16:35:ad:d9:3e:40:fb:7d:
94:5e:88:9e:df:31:53:70:65:0c:aa:a7:de:de:73:
97:4d:a1:52:48:03:75:84:0d:18:43:64:94:59:7c:
32:f6:c7:ea:b1:02:14:f4:10:06:74:ab:44:b8:a8:
a8:84:7d:e8:bb:6c:cf:bf:6f:3a:75:71:41:72:c7:
23:9e:11:f6:7b:68:c1:93:67:a4:72:d3:d9:36:07:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:D3:5C:2B:8D:E9:19:44:C5:78:3D:64:6F:E8:77:1F:7C:44:F1
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vmnTXCuN6RlExXg9ZG_odx98RPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2120::/44
Signature Algorithm: sha256WithRSAEncryption
8f:ab:c8:4d:f1:50:48:80:86:3d:9a:fb:51:c7:24:ac:37:07:
3f:ae:27:ab:42:f5:3f:0d:e3:7f:cc:2c:8e:79:10:04:6a:90:
36:6c:09:27:e4:f0:8b:38:0d:f3:03:18:0f:89:71:64:d8:c3:
04:17:70:5f:fd:db:dc:08:34:39:cf:0a:14:e6:06:b1:79:2c:
13:c7:7e:21:27:da:77:61:33:2c:f8:2a:5f:64:d0:4e:14:50:
d5:28:16:6f:07:0a:01:03:66:de:24:a1:a5:1b:2d:f2:9b:98:
4e:4e:2b:99:88:31:c2:53:55:4e:6e:25:c3:33:a4:6b:81:01:
01:61:70:58:f6:04:de:a9:5e:79:5d:d5:e4:34:ba:1b:b8:8b:
25:1f:4e:b3:63:8e:5b:5e:98:f3:a4:2b:25:63:c4:4f:2a:55:
6f:2e:23:51:79:70:b3:5b:42:96:fc:30:79:3e:03:6e:01:48:
ed:68:cf:c9:4f:f3:eb:ed:e2:36:8f:5f:0b:dd:c6:f3:de:d7:
18:8b:43:f7:b3:ff:53:6f:4a:8e:ef:ae:6c:a7:e4:80:75:33:
ce:d0:87:29:7f:35:9b:80:51:c9:4a:4d:2a:f8:a5:16:65:10:
bd:0a:06:2a:58:a3:fa:e0:b9:73:ac:ad:51:c7:5c:ec:1f:02:
e0:d3:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:36 2024 by rpki-client on console-ams.rpki-client.org