Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa
File: Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa (raw, json)
Hash identifier: RkjPjGPcSd1recqrFI3AIFymZCq3HYUyjPJhGTh3G+s=
Subject key identifier: 55:C8:3F:85:DC:4A:08:BE:4F:CF:26:F5:C6:38:7A:4A:02:D9:FF:9D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01822D39E0FCD41AF37EDDB1C1E35153E9D6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa
Signing time: Sat 23 Jul 2022 22:42:23 +0000
ROA not before: Sat 23 Jul 2022 22:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a0e:b107:f0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2d:39:e0:fc:d4:1a:f3:7e:dd:b1:c1:e3:51:53:e9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 23 22:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55c83f85dc4a08be4fcf26f5c6387a4a02d9ff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:39:61:a7:ff:17:9d:2a:ff:1e:07:f0:b7:
1d:6f:f4:2e:a9:d9:3f:cc:57:8d:ac:4a:7e:a3:ac:
fd:8f:42:06:8b:2c:c9:c5:1c:a1:84:6e:a0:48:9e:
2c:3f:c9:ce:83:1f:a4:23:cb:70:36:5f:eb:c3:a4:
c1:77:5d:f0:c0:74:41:bd:52:53:b1:d1:d2:19:ad:
42:1a:88:29:a1:55:9b:4a:40:28:c4:88:ce:31:3d:
a5:24:4a:ec:9b:d7:f9:6f:f4:1c:ac:76:2e:46:1e:
2c:f5:b6:bb:5b:b2:0b:50:34:86:4d:c6:c4:86:67:
8e:88:88:94:a1:e6:28:1c:a7:f7:54:27:b6:37:29:
6e:06:5f:f4:d4:f4:70:40:4f:1f:87:8d:8e:65:26:
67:32:68:ae:53:79:89:44:98:93:ac:18:1d:f9:fd:
fc:e0:b0:82:81:88:bc:e4:98:67:f8:c0:38:67:3c:
28:8f:a0:dd:24:d2:66:7e:15:fd:78:43:1c:8e:d9:
0e:c3:4d:90:89:a4:53:9e:47:1a:4a:61:4e:e2:13:
ae:4f:96:4d:0f:05:bd:9e:bc:65:2a:13:b4:8a:43:
1a:2a:f9:a2:73:be:66:dd:e3:e8:0d:2c:99:15:80:
01:5c:7f:d2:6f:76:b1:47:cd:e3:40:ac:28:7d:5a:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:3F:85:DC:4A:08:BE:4F:CF:26:F5:C6:38:7A:4A:02:D9:FF:9D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f0::/44
Signature Algorithm: sha256WithRSAEncryption
69:60:02:74:64:f8:3b:67:d3:7d:cd:94:e3:66:b7:ac:4b:74:
b0:f8:2d:53:ce:c6:bd:91:a3:80:d6:36:23:61:86:df:7a:c2:
0e:21:92:9f:e2:b7:58:f8:60:e1:08:fb:bd:34:ec:4c:2a:f7:
f9:db:e6:87:ba:32:b9:c2:20:82:d9:72:80:49:8e:f4:f6:7d:
45:e1:75:64:17:a1:1e:9a:17:c0:01:4b:e4:e6:f5:5f:e6:34:
ac:6e:80:76:79:6e:22:f8:e9:a8:41:5d:e4:24:bd:44:30:34:
8a:3f:4f:2b:95:ab:22:2f:0e:44:a4:75:19:bd:3b:b1:04:bc:
56:93:94:31:7f:09:e5:bb:9d:46:fa:ca:65:d7:72:ed:13:a2:
de:2d:89:5c:87:79:46:e2:de:42:e1:39:c2:4d:4a:7c:87:5c:
c2:fb:ee:6a:77:0c:ef:9f:36:44:5a:b3:1b:a2:19:b4:86:cb:
cf:74:95:5f:cc:aa:62:d2:f6:58:b8:ef:79:20:0e:79:29:e1:
c1:8d:8f:eb:fd:58:c3:07:35:f1:2a:f8:69:6b:1e:0a:e0:32:
e0:03:98:08:9a:0d:40:9a:3a:ce:42:a8:bb:1c:d2:77:6f:76:
19:7e:b7:4e:54:dd:4b:60:1b:7c:f9:d1:0d:ed:8e:56:73:4a:
53:c3:db:37
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYItOeD81Brzft2xweNRU+nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIwNzIzMjI0MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWM4M2Y4NWRjNGEwOGJlNGZjZjI2ZjVjNjM4N2E0YTAyZDlmZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCo5Yaf/F50q/x4H8Lcdb/Quqdk/
zFeNrEp+o6z9j0IGiyzJxRyhhG6gSJ4sP8nOgx+kI8twNl/rw6TBd13wwHRBvVJT
sdHSGa1CGogpoVWbSkAoxIjOMT2lJErsm9f5b/QcrHYuRh4s9ba7W7ILUDSGTcbE
hmeOiIiUoeYoHKf3VCe2NyluBl/01PRwQE8fh42OZSZnMmiuU3mJRJiTrBgd+f38
4LCCgYi85Jhn+MA4Zzwoj6DdJNJmfhX9eEMcjtkOw02QiaRTnkcaSmFO4hOuT5ZN
DwW9nrxlKhO0ikMaKvmic75m3ePoDSyZFYABXH/Sb3axR83jQKwofVroaQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFXIP4XcSgi+T88m9cY4ekoC2f+dMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVmNnX2hkeEtDTDVQenliMXhqaDZTZ0xaXzUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwDw
MA0GCSqGSIb3DQEBCwUAA4IBAQBpYAJ0ZPg7Z9N9zZTjZresS3Sw+C1Tzsa9kaOA
1jYjYYbfesIOIZKf4rdY+GDhCPu9NOxMKvf52+aHujK5wiCC2XKASY709n1F4XVk
F6EemhfAAUvk5vVf5jSsboB2eW4i+OmoQV3kJL1EMDSKP08rlasiLw5EpHUZvTux
BLxWk5Qxfwnlu51G+spl13LtE6LeLYlch3lG4t5C4TnCTUp8h1zC++5qdwzvnzZE
WrMbohm0hsvPdJVfzKpi0vZYuO95IA55KeHBjY/r/VjDBzXxKvhpax4K4DLgA5gI
mg1AmjrOQqi7HNJ3b3YZfrdOVN1LYBt8+dEN7Y5Wc0pTw9s3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org