Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Vbt0PLFeC_G-DzsYFmV4q0N_-qc.roa
File: Vbt0PLFeC_G-DzsYFmV4q0N_-qc.roa (raw, json)
Hash identifier: ky1cIhT4cd4dVUXKUHfg7gsVreQgRJ/xW48tA7dLEjw=
Subject key identifier: 55:BB:74:3C:B1:5E:0B:F1:BE:0F:3B:18:16:65:78:AB:43:7F:FA:A7
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 078B70CD
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Vbt0PLFeC_G-DzsYFmV4q0N_-qc.roa
Signing time: Sat 01 Jan 2022 01:56:08 +0000
ROA not before: Sat 01 Jan 2022 01:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62211
IP address blocks: 46.106.204.0/22 maxlen: 22
149.140.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126578893 (0x78b70cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 01:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55bb743cb15e0bf1be0f3b18166578ab437ffaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:88:19:88:f4:a0:6b:48:8b:03:46:cd:ce:
48:3c:f3:e1:ad:e1:7f:f9:2c:50:fc:cd:2c:68:20:
6c:0b:2e:82:51:16:35:1e:f3:29:55:8b:84:03:7e:
42:31:cb:c1:4c:85:eb:dc:88:07:a8:74:e7:36:cd:
0a:01:38:46:61:83:ba:7d:49:d0:1a:eb:f6:e5:0c:
56:72:b4:38:5b:c3:89:20:d4:a7:3e:1e:c8:d9:b5:
d7:0d:9c:41:e7:0c:8e:9c:a2:c5:4b:16:00:ce:db:
bf:07:b7:28:82:28:d7:c8:d8:ed:b1:e8:93:ef:85:
96:b3:07:f2:b5:a7:3b:a1:68:3f:e3:28:af:f3:f9:
f7:fb:c2:08:fc:09:ac:83:56:3b:05:26:e7:da:45:
c8:09:e6:f2:0a:ff:44:b9:1f:89:08:97:1e:0a:e0:
f9:6f:de:b1:d5:9e:d1:0a:ca:a5:1c:4d:21:c7:b2:
15:6a:68:1f:77:eb:9c:86:f5:d9:e2:eb:43:6d:59:
0e:d3:50:2f:3e:c5:e3:60:cd:13:ca:ad:84:ac:dd:
46:4c:33:d3:af:c1:75:ff:da:29:34:f6:5c:50:a3:
39:05:0d:c8:de:bf:9a:b2:45:9c:3c:a7:56:1f:76:
78:e4:fe:12:c4:8f:07:e3:26:c4:86:96:55:50:f8:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:74:3C:B1:5E:0B:F1:BE:0F:3B:18:16:65:78:AB:43:7F:FA:A7
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Vbt0PLFeC_G-DzsYFmV4q0N_-qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.106.204.0/22
149.140.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:53:fd:e8:ed:5f:5f:ba:00:b9:2b:14:9f:a3:ae:ca:09:03:
05:58:21:e4:03:23:ed:5b:3b:0f:f7:97:2c:c4:80:1b:87:ec:
2d:1c:a4:a0:1b:b2:04:0c:ad:3a:ff:bc:ec:b4:e5:72:76:47:
e1:4b:3f:8c:7d:57:29:d1:aa:3b:4b:f6:e1:ad:89:64:fd:72:
f0:55:0d:56:5d:0b:f4:3e:5a:0e:d1:4f:3f:3d:b8:6a:e8:b9:
94:3b:47:6c:f2:d2:a9:4e:72:d7:d0:fe:17:af:11:72:56:94:
e8:b1:45:f0:d2:40:66:e0:ff:e9:d3:39:a4:e1:05:e6:b4:60:
7f:fa:8c:2e:4c:ee:67:4b:04:01:c2:ef:54:47:c4:34:1e:75:
5b:e2:d9:7b:f6:78:f9:68:c2:39:0b:4e:f5:bd:0e:f0:4d:9f:
76:58:3b:77:13:b3:4e:ef:53:b6:39:d7:8d:fd:aa:9a:26:e3:
b2:ec:71:cc:0c:cf:1a:4f:d0:0e:e7:73:bf:94:5d:9f:fe:d6:
eb:b7:43:91:6b:cd:8f:0b:24:59:88:0e:00:22:71:3d:8e:a8:
3c:fc:60:71:71:f7:c5:c1:e7:85:b8:c0:1e:54:25:ce:5c:bc:
16:50:3c:55:08:58:0b:8a:0b:ca:a0:ad:c8:6c:64:f3:8e:10:
40:18:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:39 2025 by rpki-client