Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/Vecbs6384tx6we-bSvu6rEYAvpU.roa
File: Vecbs6384tx6we-bSvu6rEYAvpU.roa (raw, json)
Hash identifier: 9LsnqczUr452pbYNbaSUSlLnJnBtmuyuEcKuJz2Bg/I=
Subject key identifier: 55:E7:1B:B3:AD:FC:E2:DC:7A:C1:EF:9B:4A:FB:BA:AC:46:00:BE:95
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 047AD7CC
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/Vecbs6384tx6we-bSvu6rEYAvpU.roa
Signing time: Wed 02 Mar 2022 08:38:11 +0000
ROA not before: Wed 02 Mar 2022 08:38:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59458
IP address blocks: 5.149.97.0/24 maxlen: 24
5.149.98.0/24 maxlen: 24
5.149.96.0/24 maxlen: 24
5.149.104.0/24 maxlen: 24
5.149.105.0/24 maxlen: 24
5.149.99.0/24 maxlen: 24
5.149.100.0/24 maxlen: 24
5.149.101.0/24 maxlen: 24
5.149.102.0/24 maxlen: 24
5.149.103.0/24 maxlen: 24
5.149.111.0/24 maxlen: 24
5.149.107.0/24 maxlen: 24
5.149.109.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
2a12:2340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75159500 (0x47ad7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Mar 2 08:38:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55e71bb3adfce2dc7ac1ef9b4afbbaac4600be95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:76:74:4d:a0:f0:9b:68:f2:60:35:b4:fe:
91:2e:15:5d:9a:76:6c:6a:70:cc:34:d7:28:7b:a1:
20:72:16:81:fd:b7:9c:00:d0:94:ba:f1:53:33:82:
07:b0:4a:c1:23:b3:cf:10:fc:68:ef:f1:c5:be:56:
1e:1d:81:1f:c7:82:44:03:60:4e:3e:7d:98:bd:db:
74:54:91:b2:21:a7:f6:fc:99:ed:2c:26:8d:1f:28:
ae:3c:16:28:a6:95:94:e8:93:28:1d:32:3a:2f:a6:
74:6d:88:89:36:1c:d3:e3:b6:84:c3:1a:96:80:30:
d9:d1:89:ad:de:46:e0:8e:73:17:6d:31:03:02:31:
06:ee:bd:84:1e:32:30:25:39:ad:c4:c9:a6:5f:22:
ff:fe:be:50:aa:20:42:b1:6b:1d:8b:3e:e8:b1:c0:
6b:5c:2f:de:d0:b5:0f:3c:68:e1:d3:39:0a:54:fe:
e7:5e:ac:4c:32:29:bd:e6:8a:60:65:56:62:1e:07:
07:ac:cc:c8:f1:36:08:7c:37:75:ee:bc:0b:37:79:
65:78:76:61:9f:e7:77:b7:89:f6:35:88:64:aa:4e:
ed:be:3f:42:1f:0d:7a:bb:20:d1:67:dc:2e:d1:4a:
96:5d:4a:63:28:d5:0e:60:8a:71:9f:ac:24:ea:20:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E7:1B:B3:AD:FC:E2:DC:7A:C1:EF:9B:4A:FB:BA:AC:46:00:BE:95
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/Vecbs6384tx6we-bSvu6rEYAvpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0-5.149.105.255
5.149.107.0/24
5.149.109.0-5.149.111.255
IPv6:
2a12:2340::/48
Signature Algorithm: sha256WithRSAEncryption
11:13:05:c9:66:82:95:e7:cf:84:17:91:f4:8d:e7:a2:83:a4:
86:fa:25:94:78:95:f5:d3:0b:e3:8e:7f:fc:bf:3a:71:21:2b:
e3:4a:5d:94:19:a7:c8:c0:dd:35:27:28:e9:fc:5e:ec:1b:02:
09:bd:3b:03:0e:fe:12:c1:10:b5:b6:1e:98:65:d4:64:e8:e9:
1d:69:dc:0a:38:4d:23:9c:53:cc:89:9c:2b:1f:bc:f9:43:78:
e7:51:f2:69:13:39:0c:dd:2f:c0:9a:f9:30:42:11:c7:8b:20:
15:b7:4a:21:57:e5:5f:3d:8f:b9:d7:6f:90:c9:bf:21:0e:73:
9b:5b:95:85:ae:c2:89:44:4a:3d:5f:1a:28:47:f3:42:df:69:
93:9b:43:dd:2a:9e:f7:c0:51:40:72:ce:b4:96:a4:b0:e0:79:
60:c7:9c:28:c1:9d:20:0a:10:c9:4b:a5:47:13:d5:29:28:c4:
8d:41:47:83:64:ac:31:fa:bb:77:8f:7e:a8:08:83:6e:37:16:
8c:99:f1:82:6f:92:ee:c7:c2:45:79:47:4e:6a:38:32:2d:d2:
f6:7a:8e:44:dc:c5:5f:1c:29:6f:65:50:dc:21:ac:95:95:2b:
8a:c7:f1:fd:d0:ef:34:ad:3d:59:02:49:13:e2:57:ff:78:13:
62:f5:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org