Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VPSuGiOWiYC5xaJl3CFoQ0MXAXY.roa
File: VPSuGiOWiYC5xaJl3CFoQ0MXAXY.roa (raw, json)
Hash identifier: MM4HKjDrEmzB/sTYdbc28P6hviQMAJgBpdODE5KMLtE=
Subject key identifier: 54:F4:AE:1A:23:96:89:80:B9:C5:A2:65:DC:21:68:43:43:17:01:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018501CBF38602A9494C23C8288F1396CCD1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VPSuGiOWiYC5xaJl3CFoQ0MXAXY.roa
Signing time: Sun 11 Dec 2022 15:27:01 +0000
ROA not before: Sun 11 Dec 2022 15:27:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204160
IP address blocks: 2a0e:97c0:b75::/48 maxlen: 48
2a0e:97c0:b70::/44 maxlen: 48
2a0e:97c0:b70::/48 maxlen: 48
2a0e:97c0:b73::/48 maxlen: 48
2a0e:97c1:100::/44 maxlen: 48
2a0e:97c0:b71::/48 maxlen: 48
2a0e:97c0:b74::/48 maxlen: 48
2a0e:97c0:b72::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:01:cb:f3:86:02:a9:49:4c:23:c8:28:8f:13:96:cc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 11 15:27:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54f4ae1a23968980b9c5a265dc21684343170176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:ef:9a:b1:7a:75:c5:0c:44:a9:69:14:5d:
dd:89:bf:6f:01:7b:cd:ac:18:e7:c3:a7:3e:84:c3:
9e:e5:6a:bd:d5:e4:cf:ce:bb:11:b2:6d:86:44:4f:
2b:8d:b3:e6:e2:42:33:ec:06:da:26:6d:ac:a4:fb:
95:96:1f:0d:ff:30:94:9e:45:ee:c0:86:aa:c2:1e:
63:58:7d:0a:d7:a3:fd:ce:3c:d5:2e:94:db:05:aa:
13:fb:3a:24:98:f9:09:b6:45:4c:f1:71:09:79:aa:
c8:a5:d0:f9:d6:a1:83:fe:8d:12:3a:3c:e7:ba:53:
26:fe:cf:44:6f:bb:46:20:64:15:a9:15:76:0e:38:
69:78:d9:82:83:ca:00:44:89:f1:ba:80:b3:0f:a1:
a7:25:0a:9d:ce:3d:d9:f6:1a:63:66:a4:45:4e:8a:
5f:ea:74:f9:18:94:65:05:6f:71:0e:48:14:bd:2d:
b8:24:f4:12:7d:74:0e:ae:be:87:61:41:a8:44:83:
45:6a:f1:c1:18:19:57:d8:5b:65:a2:a2:7d:d9:6a:
5d:8a:fb:3c:7f:c2:d4:bd:42:79:d7:c4:88:db:3d:
65:b9:cb:65:01:a2:cd:38:a7:35:7b:4c:c2:4b:03:
55:51:51:6b:c4:68:d4:4c:97:cb:44:a9:2b:f4:2e:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:AE:1A:23:96:89:80:B9:C5:A2:65:DC:21:68:43:43:17:01:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VPSuGiOWiYC5xaJl3CFoQ0MXAXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b70::/44
2a0e:97c1:100::/44
Signature Algorithm: sha256WithRSAEncryption
63:d2:33:53:90:f4:d2:c5:fd:06:9d:67:6c:69:57:41:00:09:
2b:5d:56:b2:35:34:bd:8f:f8:81:ad:52:3b:eb:90:73:59:39:
c4:34:85:05:4e:e1:c5:20:59:12:d8:78:1a:76:74:4c:40:07:
2e:a5:e8:cf:88:a9:c8:26:bb:02:f7:1c:ed:0e:0a:7b:8f:55:
f9:ac:26:2e:9e:e0:4b:53:81:db:0a:e3:18:0f:3e:4c:9d:98:
83:29:5e:30:91:d2:f9:ef:72:ca:99:9a:b0:45:b3:6f:c3:bc:
41:8d:20:82:7c:d8:74:9c:84:d7:20:78:7b:fc:6a:77:12:76:
fe:47:f7:9d:43:bc:b2:ed:7b:3e:44:05:7f:3c:26:ed:18:52:
13:fc:ec:16:47:f6:ff:93:d4:42:e9:24:01:37:3c:fb:75:98:
95:ea:80:63:c9:2f:fa:8f:02:56:78:95:66:a6:86:33:e6:92:
5d:c3:6c:a3:d7:04:8b:64:80:86:b0:66:bc:07:51:f9:41:c5:
12:78:04:f5:92:67:cb:7e:2d:83:6e:b3:75:df:78:77:a8:d7:
2b:76:b1:47:7d:49:ae:89:fb:9e:47:2c:0a:5b:66:6c:52:7b:
f2:f9:3e:52:53:93:3c:83:5c:ec:e1:2b:0b:42:f3:d7:0a:fe:
8d:36:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org