Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/VnHDlh_x6Z7nBx879BOp9hxl70Q.roa
File: VnHDlh_x6Z7nBx879BOp9hxl70Q.roa (raw, json)
Hash identifier: tRh7Z1VGrQlrBHiDZy8FxyTNhjkJPZwGvflVBuqkqIA=
Subject key identifier: 56:71:C3:96:1F:F1:E9:9E:E7:07:1F:3B:F4:13:A9:F6:1C:65:EF:44
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 08F3C1D2
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/VnHDlh_x6Z7nBx879BOp9hxl70Q.roa
Signing time: Thu 16 Jun 2022 10:55:44 +0000
ROA not before: Thu 16 Jun 2022 10:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 213.205.0.0/19 maxlen: 24
82.85.16.0/24 maxlen: 24
82.85.24.0/24 maxlen: 24
82.85.18.0/24 maxlen: 24
82.85.28.0/24 maxlen: 24
82.85.27.0/24 maxlen: 24
82.85.61.0/24 maxlen: 24
195.130.248.0/22 maxlen: 24
213.205.32.0/24 maxlen: 24
213.205.32.0/19 maxlen: 24
213.205.33.0/24 maxlen: 24
213.205.34.0/24 maxlen: 24
213.205.36.0/24 maxlen: 24
213.205.37.0/24 maxlen: 24
82.85.154.0/24 maxlen: 24
94.32.64.0/20 maxlen: 24
94.32.80.0/21 maxlen: 24
94.32.96.0/23 maxlen: 24
212.123.79.0/24 maxlen: 24
212.123.84.0/23 maxlen: 24
212.123.82.0/23 maxlen: 24
94.32.100.0/22 maxlen: 24
94.32.102.0/24 maxlen: 24
94.32.104.0/21 maxlen: 24
212.123.93.0/24 maxlen: 24
94.32.115.0/24 maxlen: 24
217.133.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150192594 (0x8f3c1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jun 16 10:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5671c3961ff1e99ee7071f3bf413a9f61c65ef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:d2:45:e5:91:f6:ef:6a:a7:9c:6a:22:6e:
57:60:4e:22:55:d8:32:5a:ef:3c:c4:ce:4b:d2:8e:
ed:d3:bd:ee:20:b2:3d:2c:e9:90:c7:fe:37:ff:b8:
75:62:cf:68:6f:0f:50:46:a1:7d:84:ac:c7:ec:b9:
c2:80:72:8a:64:ff:75:02:46:bb:4d:7a:b6:dc:fe:
23:4c:17:88:3e:00:c9:2d:6f:ec:cb:58:a1:a0:00:
06:fa:4b:4f:06:af:12:5a:97:e0:6a:f2:a2:c7:96:
6f:35:36:75:aa:3c:e8:fd:05:95:bc:4f:81:74:d0:
d7:d6:3b:08:e3:5b:03:d8:07:a5:4f:23:a0:4f:9a:
00:25:9e:0c:9b:42:56:b7:40:63:78:9a:34:6e:f7:
86:5c:10:24:8f:da:ef:77:9f:3b:62:0d:89:13:99:
bf:e1:62:f4:0c:51:30:22:6e:5b:0e:36:ba:4b:c0:
86:61:04:7f:42:87:d7:94:2a:1b:3b:f7:65:e9:c7:
85:8c:97:d2:0c:65:ee:c0:bd:92:f3:fa:79:16:8b:
56:e1:4c:97:79:ed:a6:fd:90:5a:88:39:40:90:85:
82:e7:cf:81:0f:24:d5:41:4b:ce:da:34:33:05:78:
8b:e2:b5:04:34:21:1d:fa:63:17:1f:07:f2:11:05:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:C3:96:1F:F1:E9:9E:E7:07:1F:3B:F4:13:A9:F6:1C:65:EF:44
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/VnHDlh_x6Z7nBx879BOp9hxl70Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.85.16.0/24
82.85.18.0/24
82.85.24.0/24
82.85.27.0-82.85.28.255
82.85.61.0/24
82.85.154.0/24
94.32.64.0-94.32.87.255
94.32.96.0/23
94.32.100.0-94.32.111.255
94.32.115.0/24
195.130.248.0/22
212.123.79.0/24
212.123.82.0-212.123.85.255
212.123.93.0/24
213.205.0.0/18
217.133.170.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ba:21:a8:41:c1:a6:35:3a:5e:69:1f:c4:94:62:15:c8:a8:
ed:3d:f6:87:2d:9d:a1:c1:42:35:1e:c4:a7:9e:40:e2:c0:5e:
83:fe:8b:bb:12:8e:53:9a:cb:00:f2:99:0d:be:b9:ca:76:4e:
35:66:c4:c8:49:9b:9d:d0:df:91:fd:ce:40:5b:4a:c0:07:0d:
83:df:ec:b8:42:2e:53:79:48:4a:c0:c5:c4:5b:6c:1c:68:79:
9d:d6:1b:eb:9f:3b:f1:cb:6f:81:d3:73:05:3f:fd:fd:43:c7:
23:80:0f:8c:8a:a6:51:4c:b0:4a:5f:81:a8:06:59:4c:19:eb:
44:08:c8:87:e8:bb:fc:b3:2a:43:26:33:ed:d9:99:4b:66:80:
2e:ed:45:2e:2f:51:c9:53:c8:fb:2c:26:8d:b2:38:ad:52:d2:
9d:4a:0f:3f:db:a8:c1:d6:f2:57:5e:a8:06:26:bb:cc:77:d0:
c2:9d:05:b5:c4:1f:cb:69:39:86:e0:53:26:72:92:99:11:8e:
e9:c2:1c:06:44:66:9a:8b:cf:cd:69:a9:e7:77:85:ca:e1:79:
7e:2b:2c:62:65:c2:17:c0:29:0e:bb:b4:89:61:fd:78:de:db:
3a:0c:74:cf:7d:11:6b:1d:48:93:db:f3:f6:b4:9a:07:a0:cc:
cc:0c:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org