Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/vzIGs1seVEx55zgfIyeyRE7T7MU.roa
File: vzIGs1seVEx55zgfIyeyRE7T7MU.roa (raw, json)
Hash identifier: G2jFCDGSUApbYjK01c0bzmYUzgsaPDKQuvQEvYHEOI0=
Subject key identifier: BF:32:06:B3:5B:1E:54:4C:79:E7:38:1F:23:27:B2:44:4E:D3:EC:C5
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 01823578277C3D3603CBFA5B6D8C6FAB7976
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/vzIGs1seVEx55zgfIyeyRE7T7MU.roa
Signing time: Mon 25 Jul 2022 13:07:23 +0000
ROA not before: Mon 25 Jul 2022 13:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59874
IP address blocks: 185.68.36.0/24 maxlen: 24
185.68.37.0/24 maxlen: 24
2a05:1580:13::/48 maxlen: 48
2a05:1580:11::/48 maxlen: 48
2a05:1580:12::/48 maxlen: 48
2a05:1580:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:78:27:7c:3d:36:03:cb:fa:5b:6d:8c:6f:ab:79:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Jul 25 13:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf3206b35b1e544c79e7381f2327b2444ed3ecc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:45:ac:19:4f:22:b5:c7:5c:d0:39:48:12:
ec:f8:06:3e:b5:d8:78:8c:d4:9e:cc:e1:4b:e3:8e:
21:3a:73:45:3b:0f:90:a0:e6:e4:99:82:2a:bf:27:
b0:c4:b7:b1:6c:aa:67:b3:68:20:af:1d:10:9c:d1:
e3:27:bb:5e:0c:24:0b:bb:b4:0a:47:f7:aa:8b:05:
24:cc:82:fb:1f:00:01:9f:db:8b:9f:40:8f:b7:17:
58:c8:ed:27:76:d8:bb:e2:0b:4a:19:d2:a1:47:cb:
fc:58:da:f9:a5:01:7c:eb:a1:d5:16:4a:d6:4f:7c:
ac:de:c9:98:56:e0:1a:1b:3f:9f:32:0c:3e:eb:1c:
b7:9d:01:82:c9:82:99:2d:d3:fa:d3:31:49:2e:b7:
91:ca:25:74:ae:cd:71:a0:95:df:53:c1:fc:ca:94:
2c:9b:4c:b5:46:3b:7d:f7:45:ad:07:6a:63:c5:1d:
1d:60:17:06:34:47:3a:f4:03:98:68:fd:0f:fe:10:
da:52:1c:1b:50:6a:82:17:35:90:31:40:ff:b9:ef:
64:2d:60:f0:4a:39:c4:bb:23:ad:1e:15:8f:ef:93:
03:27:21:f3:8c:86:a4:41:29:d1:aa:9d:de:aa:a0:
ae:d5:6b:17:3d:7b:0a:55:01:91:71:18:45:d4:28:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:32:06:B3:5B:1E:54:4C:79:E7:38:1F:23:27:B2:44:4E:D3:EC:C5
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/vzIGs1seVEx55zgfIyeyRE7T7MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.36.0/23
IPv6:
2a05:1580:10::/46
Signature Algorithm: sha256WithRSAEncryption
09:35:2e:f3:a7:64:1e:04:6c:68:9c:c3:12:7d:56:18:66:44:
b0:0f:9d:dd:33:11:c5:01:f9:e6:0e:fb:56:ec:75:90:29:af:
d0:3c:f2:33:9f:dc:d4:08:ec:e5:ab:1f:1f:95:fa:9b:21:87:
37:69:16:67:75:0e:ad:1c:ea:d9:cc:f6:fc:db:ee:0d:25:68:
9e:69:67:a2:71:29:70:b3:1d:b0:1a:b2:3e:8f:4f:f1:7d:fc:
2d:92:17:a2:f5:90:c6:37:85:2d:88:0e:a7:72:a5:4a:3f:91:
c8:b2:6f:75:c7:5e:3b:91:72:91:ef:c9:96:63:13:8b:b1:9d:
c6:0c:20:7f:58:07:16:ab:1b:ad:bf:15:52:ca:81:40:a5:69:
bc:46:15:5e:e4:90:dc:2c:a0:35:45:9b:9a:1c:2d:8e:9e:2f:
b5:c1:ca:53:b4:d0:b1:ea:ff:d6:69:44:a2:a3:6f:11:03:ce:
48:32:ac:02:c4:b8:ba:26:52:9c:82:b2:cc:bd:3c:9d:b2:52:
7e:29:a9:fa:43:2e:f2:21:5d:7e:9c:85:8d:f4:91:60:75:4c:
ca:e5:23:65:fc:c6:dd:ad:ef:36:6e:7d:81:b9:1b:03:73:01:
ad:7c:62:48:7d:7b:2e:60:13:57:d9:29:29:31:cb:09:ce:09:
d8:78:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:15 2023 by rpki-client on console-fra.rpki-client.org