Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/Vzck22t6JD70RYZYKzPUP6Cb3WE.roa
File: Vzck22t6JD70RYZYKzPUP6Cb3WE.roa (raw, json)
Hash identifier: 97tiuQmBVObUNMsMrcpaJi1soCIfAxw2Lf36yk3hzh4=
Subject key identifier: 57:37:24:DB:6B:7A:24:3E:F4:45:86:58:2B:33:D4:3F:A0:9B:DD:61
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 03A960ED
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/Vzck22t6JD70RYZYKzPUP6Cb3WE.roa
Signing time: Sat 01 Jan 2022 06:01:21 +0000
ROA not before: Sat 01 Jan 2022 06:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.243.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61432045 (0x3a960ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jan 1 06:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=573724db6b7a243ef44586582b33d43fa09bdd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:38:9e:cb:26:43:49:4d:37:a5:23:e6:e5:
af:6c:61:af:f5:5b:2b:b9:cb:e2:9d:74:a9:7e:83:
c6:9a:8f:8c:b9:38:10:32:93:9f:67:2e:4d:99:71:
47:9b:1c:37:bd:b4:e6:85:b2:d2:4f:af:e8:0f:a9:
0f:b4:92:fb:ef:81:b0:41:0c:7e:37:a3:b4:3c:87:
95:5f:8f:dd:b4:26:e6:27:87:3e:c4:a1:94:d7:08:
5a:f7:42:dc:6c:17:7d:cf:21:22:a6:ad:a9:c9:be:
6c:c5:66:48:1d:88:d1:e0:bf:f6:f1:c7:e5:82:e6:
80:72:23:8b:d6:95:a4:b0:7e:f8:0d:16:c3:7e:24:
8e:6e:cb:98:63:c5:ec:7c:bd:e5:53:e3:17:95:14:
ff:d4:65:59:10:8e:0c:20:fb:9a:2e:cf:1d:57:33:
66:a4:9a:d8:99:00:20:dd:40:5f:91:76:02:99:58:
ef:f1:64:b0:7e:d8:31:1f:d6:9e:32:c3:9e:f0:22:
b2:40:8f:71:96:a2:22:c0:97:11:32:7e:30:42:63:
9f:96:62:89:ac:3d:b7:e1:b3:c7:ab:db:27:a1:62:
1f:c4:dd:82:3e:38:fd:77:46:20:d1:2e:22:ae:b1:
41:72:9b:4e:37:c7:a7:c8:87:63:65:dc:80:2b:88:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:37:24:DB:6B:7A:24:3E:F4:45:86:58:2B:33:D4:3F:A0:9B:DD:61
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/Vzck22t6JD70RYZYKzPUP6Cb3WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:55:03:2a:a6:e5:11:25:8a:e4:6f:e4:e3:0a:2b:ae:f7:16:
ea:19:4d:a9:90:c3:c2:9b:17:d4:58:91:29:19:fb:12:12:4d:
b9:52:24:3e:48:57:06:6c:fb:7e:cf:84:65:a0:48:34:78:e5:
3b:01:7a:4f:2e:d8:0b:61:c2:e6:61:71:54:df:35:dc:4c:b2:
63:3d:46:30:dd:11:bc:ae:38:74:d7:fa:23:8f:8c:57:e4:5f:
fd:bf:01:77:43:e3:97:ae:7c:a6:97:18:74:1a:59:59:5e:c8:
b2:4b:42:8f:24:99:cc:e6:07:a3:25:c3:a8:4e:7c:64:51:6d:
e5:0d:2b:a3:13:10:60:c3:87:18:01:cb:ba:11:18:b3:ee:e2:
09:c7:ca:d4:93:15:16:b3:cc:99:9c:73:4a:f5:4e:15:df:90:
f5:a4:9c:a3:7d:69:f7:31:e8:97:be:a9:28:89:f2:0f:c5:fa:
51:04:42:78:3b:80:6d:8e:19:2c:d1:e9:6d:e3:d5:8b:58:5d:
b5:46:40:27:9f:b1:2d:c6:a1:48:26:1f:a3:37:a4:44:ac:e4:
a4:52:45:88:13:2d:60:c2:84:6a:d4:ef:b2:45:3c:84:ba:9b:
9e:88:43:24:e3:9c:08:66:36:e3:41:75:65:03:de:ec:72:b6:
33:b5:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org