Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VhINePBVCdtKZ2mc2kJmnuzpnY4.roa
File: VhINePBVCdtKZ2mc2kJmnuzpnY4.roa (raw, json)
Hash identifier: 3pp3Q+2oTtiO8XbfF/H7zl+nw2LsBMTtN0J33JRpsjY=
Subject key identifier: 56:12:0D:78:F0:55:09:DB:4A:67:69:9C:DA:42:66:9E:EC:E9:9D:8E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03D0E51C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VhINePBVCdtKZ2mc2kJmnuzpnY4.roa
Signing time: Sat 01 Jan 2022 13:04:00 +0000
ROA not before: Sat 01 Jan 2022 13:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39838
IP address blocks: 141.136.56.0/21 maxlen: 21
217.26.188.0/22 maxlen: 22
89.42.112.0/23 maxlen: 23
77.247.120.0/22 maxlen: 22
89.45.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64021788 (0x3d0e51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56120d78f05509db4a67699cda42669eece99d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:20:91:bd:96:bf:74:a6:38:75:fa:60:70:
c5:0c:e3:49:a1:38:3f:ae:e6:ee:ca:be:e9:a4:bd:
61:71:62:03:24:9a:67:54:19:a7:20:07:06:ff:1f:
14:18:1a:1c:79:71:00:55:3d:8a:7d:1f:51:1a:7f:
8a:ee:b3:c9:4e:18:9f:6c:51:e3:91:b7:9d:7a:8d:
e8:59:bd:14:4d:96:be:e8:ab:6d:09:bd:73:7e:b4:
6b:e6:b7:85:03:e9:e8:c5:d7:ee:22:3f:2d:f2:f4:
97:c9:89:27:6d:d4:60:b1:67:0f:7d:45:0c:93:4c:
b9:e6:90:1f:0e:10:97:93:87:ca:95:04:69:b6:e2:
50:30:e4:91:6b:b7:7d:75:b5:bc:e9:cc:fa:02:0b:
ee:d4:08:ee:5f:e1:27:43:18:a9:64:4b:86:d7:e0:
09:8c:b0:f0:cd:f6:d7:77:e8:0e:8c:00:ed:1c:f3:
56:c5:5a:64:5a:92:84:0f:5d:9a:1f:96:92:1c:74:
f1:55:e4:b4:d3:6f:ad:19:0e:6a:d3:29:c2:2d:58:
21:f5:35:16:64:bc:cc:92:67:31:6a:be:60:45:0b:
93:30:32:66:78:b7:89:5a:f3:4b:ee:24:b6:5e:d6:
e5:b5:f2:03:de:e5:77:03:a6:11:81:ca:8b:83:3b:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:0D:78:F0:55:09:DB:4A:67:69:9C:DA:42:66:9E:EC:E9:9D:8E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VhINePBVCdtKZ2mc2kJmnuzpnY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.120.0/22
89.42.112.0/23
89.45.208.0/23
141.136.56.0/21
217.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b9:38:4b:03:2e:d2:73:cd:c0:54:6c:50:e2:f4:bc:13:9b:
ba:6d:cd:82:3c:b2:ef:9f:39:39:8d:a2:55:2d:30:54:20:d4:
93:dd:19:ec:5f:8a:93:66:9f:a9:d2:62:b3:b4:e8:f3:7d:a0:
df:5a:2a:9b:b7:40:f3:4f:74:b7:22:01:f7:7c:1d:ab:52:56:
a5:22:a6:6f:9f:78:b9:e5:d3:17:18:0c:c9:5c:d1:5d:73:0c:
55:c9:1d:d2:1a:f1:dc:c6:db:84:aa:34:85:fa:59:57:8e:b5:
41:d9:1c:a1:7c:4d:73:5f:cd:45:85:02:93:0e:6d:37:0e:07:
93:7a:40:16:9e:2f:62:fe:a9:0f:0b:aa:31:62:ae:3f:0e:48:
3d:18:92:6a:fd:fa:5b:f6:d7:a4:01:8b:da:9d:fa:23:9c:d8:
e0:e5:79:f6:47:7c:ee:b6:3d:3a:30:60:27:ee:52:71:a5:9d:
70:fa:8c:18:f3:fa:be:7e:62:12:68:cd:2d:5e:57:96:61:21:
50:b1:93:10:54:96:84:83:02:42:ff:4c:6e:6d:29:da:09:0e:
09:b2:43:c3:d3:6a:14:0a:b6:d3:ff:3c:c4:e0:bf:83:5c:77:
98:fe:da:53:64:85:29:6b:44:35:c6:77:40:3a:4e:a5:54:5d:
d0:0d:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org