Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/vbaCWMnDFuaYkrURQLT6IY-LKQw.roa
File: vbaCWMnDFuaYkrURQLT6IY-LKQw.roa (raw, json)
Hash identifier: 6mFujXTn/9ZnVT6RLJW50Um0utRW1g3qwj6NXC0Y4oU=
Subject key identifier: BD:B6:82:58:C9:C3:16:E6:98:92:B5:11:40:B4:FA:21:8F:8B:29:0C
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 3556C7EF
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/vbaCWMnDFuaYkrURQLT6IY-LKQw.roa
Signing time: Thu 06 Jan 2022 13:45:07 +0000
ROA not before: Thu 06 Jan 2022 13:45:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210016
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894879727 (0x3556c7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 6 13:45:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdb68258c9c316e69892b51140b4fa218f8b290c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:56:4b:10:e7:c3:0a:e2:ee:ea:94:5b:78:
8e:d7:e0:c0:42:50:10:79:0f:55:21:45:de:33:86:
b3:be:da:2c:ed:93:8c:34:49:a8:eb:11:e5:df:c1:
d0:8f:35:67:df:a8:8c:10:96:24:89:46:c8:d3:c5:
e6:61:69:46:3f:fa:36:e6:09:f3:f9:a9:2f:ca:ab:
9a:65:21:a4:64:ff:6a:42:f9:b9:6d:bb:ab:04:1b:
38:e7:2f:9c:e6:ad:62:53:da:50:ba:ea:d1:39:e4:
3c:4d:6b:9a:e6:17:06:e2:af:b3:2d:06:3e:fc:21:
4d:e9:a2:dc:c0:a4:13:21:90:d3:35:8f:95:fd:d2:
e2:4c:ea:e2:88:3a:9e:4b:73:b4:22:17:25:5b:b2:
cd:53:54:67:74:22:87:ae:63:ed:40:35:bc:3f:fa:
31:e2:b3:4d:03:22:93:d2:f4:7f:f0:5b:0f:39:39:
5f:71:20:37:4c:a8:4c:47:51:97:f5:93:09:6e:6f:
0d:25:46:0d:3b:93:d5:15:b2:d2:aa:ab:3a:4b:d6:
7f:28:2b:e0:87:7f:e0:40:6c:91:78:e8:e4:39:99:
e5:46:d6:40:7f:78:2f:21:09:16:05:b1:ad:8a:b3:
41:39:06:ce:77:fb:f3:9f:90:d2:fc:bd:64:d2:fb:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:82:58:C9:C3:16:E6:98:92:B5:11:40:B4:FA:21:8F:8B:29:0C
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/vbaCWMnDFuaYkrURQLT6IY-LKQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.116.0/24
Signature Algorithm: sha256WithRSAEncryption
62:84:ba:21:05:0b:6a:bf:2e:8c:2e:e8:90:75:1a:49:88:6c:
5a:83:a7:b8:9e:f1:7c:39:93:03:d8:b2:c0:9f:c7:1c:af:5a:
48:9b:f9:35:fb:d4:fc:36:23:c0:6f:ea:13:1e:6b:70:e2:be:
7c:bc:92:27:5e:e5:3a:25:95:63:82:bd:5d:d9:39:67:99:95:
54:4c:24:36:53:d7:3e:45:18:56:fb:af:2a:04:5f:d8:49:8f:
f3:8c:ab:b2:19:8f:65:bb:d5:af:ae:f0:90:31:5b:09:7a:92:
59:ec:20:54:a5:fa:d8:d2:12:70:7e:d4:32:5c:ed:5e:e1:0c:
ca:03:33:aa:f6:d6:7f:e0:9f:0f:ac:08:c0:cc:dd:62:c9:e2:
6d:f0:ae:ab:98:7b:54:12:91:94:eb:ae:f1:24:94:d9:36:08:
13:16:18:39:e4:00:e0:46:9a:0b:19:3c:98:77:72:5a:d9:ad:
d3:73:79:2a:8f:08:eb:e3:23:c1:ab:aa:47:f1:a5:10:fe:2b:
84:1e:07:e4:e9:ad:55:13:fe:ef:0e:42:41:d4:fa:de:0b:86:
76:02:47:4e:5c:75:eb:d5:bf:32:4a:b1:44:ff:c0:bf:f3:a0:
7b:49:75:0c:5c:3c:94:ee:d2:79:8d:17:43:31:f8:10:e8:cc:
bd:01:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org