Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/VCNLXjpWGjjYOcxTPHml36j-XRU.roa
File: VCNLXjpWGjjYOcxTPHml36j-XRU.roa (raw, json)
Hash identifier: LbR6nWPayyJf3+CmNyyqZUCDVFQG4OAkHYsjxnBSKoQ=
Subject key identifier: 54:23:4B:5E:3A:56:1A:38:D8:39:CC:53:3C:79:A5:DF:A8:FE:5D:15
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 0331C26E
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/VCNLXjpWGjjYOcxTPHml36j-XRU.roa
Signing time: Sat 01 Jan 2022 12:05:51 +0000
ROA not before: Sat 01 Jan 2022 12:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207851
IP address blocks: 193.105.250.0/24 maxlen: 24
193.106.239.0/24 maxlen: 24
193.105.208.0/24 maxlen: 24
193.105.217.0/24 maxlen: 24
2a0f:8b40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53592686 (0x331c26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Jan 1 12:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54234b5e3a561a38d839cc533c79a5dfa8fe5d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:b8:64:47:58:e5:9f:51:87:0e:98:1a:1d:
5d:53:cc:8c:63:01:44:ef:41:d5:67:ed:f9:c7:63:
ff:75:8f:6a:14:b8:4a:27:0c:7e:e2:16:05:5f:5a:
d5:76:01:44:77:3e:7b:42:84:b1:9c:7a:03:58:f7:
a4:15:00:88:ab:f5:55:c6:a4:64:64:d0:11:3b:dd:
6d:90:71:a7:1a:89:c6:07:33:8f:03:91:76:05:3e:
83:76:fd:38:e1:81:8b:40:29:db:8a:ee:86:5b:70:
c3:1a:1c:e5:96:bd:43:ec:30:43:80:8d:52:d3:3a:
cf:ee:ca:ed:78:8a:16:73:87:f2:a6:0f:12:42:b2:
cc:d6:6f:90:77:c4:63:a5:46:a4:dd:64:62:7c:85:
f6:3b:35:fb:6c:97:c0:25:fe:9c:16:b2:b7:29:0d:
cb:f7:0f:80:1e:c7:fb:2e:64:de:7b:75:e4:af:81:
c4:f0:52:ca:e1:a4:92:63:55:25:40:57:2c:8d:ae:
b6:eb:8e:06:dd:97:19:99:bf:e8:d4:77:de:e2:fb:
b9:7f:bb:22:22:89:f8:ee:79:b7:2b:7f:36:87:4a:
44:47:d1:9d:08:30:f8:a2:c5:32:77:ca:56:1d:1a:
d3:42:90:f8:ff:e2:40:06:79:55:46:3a:11:a9:de:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:4B:5E:3A:56:1A:38:D8:39:CC:53:3C:79:A5:DF:A8:FE:5D:15
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/VCNLXjpWGjjYOcxTPHml36j-XRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.208.0/24
193.105.217.0/24
193.105.250.0/24
193.106.239.0/24
IPv6:
2a0f:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
29:b5:02:70:a8:09:08:18:8c:ae:37:95:5e:89:b1:55:0e:a4:
8b:db:30:d5:f0:73:c6:07:71:68:54:25:c3:53:f7:90:37:5f:
5b:0f:41:7c:6f:20:cf:bf:d6:4e:e3:ac:a6:d4:14:06:30:d2:
33:cb:fd:54:c3:ec:26:10:0d:ff:91:a7:d9:dc:d4:ff:10:44:
06:52:b7:94:68:9b:14:b9:49:95:22:97:87:af:58:c8:16:6e:
35:78:c0:5a:71:20:37:8c:dd:16:cb:d5:7c:4b:03:18:7e:6d:
0f:c1:e7:0b:d8:38:5d:a1:e2:07:5d:ee:93:7d:66:d0:7f:f4:
69:47:46:a7:c7:ed:40:fe:5d:0f:e9:33:b1:0b:7f:88:ee:01:
63:02:ec:d8:4e:84:6b:53:25:e2:73:6a:34:b2:ec:a4:4c:fd:
58:87:a1:96:a7:8e:25:a7:79:74:49:fa:f2:ea:57:7a:5e:f6:
86:b6:26:58:6e:a3:2c:9c:98:d5:60:61:25:d4:a1:0c:c2:20:
6f:6b:a9:55:a7:01:88:ab:02:14:85:35:4c:2b:dd:00:56:e6:
5c:41:a0:62:7e:35:c2:ac:bc:43:13:8b:db:da:34:b9:4f:c7:
36:68:55:ff:46:dd:5a:9e:c6:77:47:eb:06:7d:66:05:19:4c:
1c:f0:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:30 2024 by rpki-client on console-ams.rpki-client.org