Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/VZ-tBrXrblUYprfQ5O5cV7jxCfI.roa
File: VZ-tBrXrblUYprfQ5O5cV7jxCfI.roa (raw, json)
Hash identifier: F4X4n8ltLOAWBzkc5wulFJ6ykrswlgRuZ7/F3JwDeEI=
Subject key identifier: 55:9F:AD:06:B5:EB:6E:55:18:A6:B7:D0:E4:EE:5C:57:B8:F1:09:F2
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 1108277D
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/VZ-tBrXrblUYprfQ5O5cV7jxCfI.roa
Signing time: Sat 01 Jan 2022 03:56:33 +0000
ROA not before: Sat 01 Jan 2022 03:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48840
IP address blocks: 95.129.15.0/24 maxlen: 24
95.129.14.0/24 maxlen: 24
95.129.13.0/24 maxlen: 24
95.129.12.0/24 maxlen: 24
95.129.8.0/24 maxlen: 24
95.129.8.0/21 maxlen: 21
95.129.11.0/24 maxlen: 24
95.129.10.0/24 maxlen: 24
95.129.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285747069 (0x1108277d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Jan 1 03:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=559fad06b5eb6e5518a6b7d0e4ee5c57b8f109f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:34:de:cf:68:a0:36:41:5b:3d:8b:87:af:
02:19:e3:3c:d4:ab:df:0c:54:22:b1:71:cd:ae:9e:
4a:78:75:51:bc:e3:bb:97:ef:d8:28:74:cd:f3:d2:
a6:62:b5:5e:48:20:9d:7e:c6:b8:02:12:18:2f:14:
43:98:9a:d2:79:b3:d8:07:83:ab:61:13:54:11:0f:
09:af:e0:ef:c7:64:7e:7c:78:1f:a8:ce:37:e8:bb:
de:e7:af:31:1a:31:17:b0:90:d6:c9:36:50:ee:cf:
5e:fa:6c:ff:35:ff:85:97:e7:7e:d7:4a:52:7f:7e:
49:1a:df:ce:b5:d8:23:a5:48:28:ad:50:78:74:67:
8e:4c:c3:2e:cf:e3:f2:33:44:e7:da:ee:51:7c:f9:
88:90:1a:2d:cf:03:f2:fb:5e:52:d5:bd:a2:cf:67:
05:7a:19:e9:32:83:d7:c6:7d:05:75:dc:87:d1:7a:
70:af:94:36:ae:de:88:f8:18:4e:90:8e:a9:16:90:
fd:2e:ec:38:27:5a:36:4b:86:97:d2:71:02:2b:5b:
c2:8f:ba:ee:cf:db:97:18:09:1e:fa:c7:37:56:73:
09:49:83:f2:98:10:cd:b9:49:1b:8e:64:bd:f1:ab:
51:48:f5:7b:46:a5:44:13:dd:77:db:73:a6:3b:2b:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:AD:06:B5:EB:6E:55:18:A6:B7:D0:E4:EE:5C:57:B8:F1:09:F2
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/VZ-tBrXrblUYprfQ5O5cV7jxCfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.8.0/21
Signature Algorithm: sha256WithRSAEncryption
84:26:5d:cd:8c:f7:a5:48:de:bd:ab:b9:72:12:98:04:08:aa:
52:ad:9b:e7:93:3f:1a:ba:95:e5:80:76:ba:ea:96:2a:1f:89:
92:80:45:09:94:4c:c6:9c:82:8f:76:46:73:d4:f1:0d:93:59:
2c:ae:8f:0e:42:70:eb:c6:66:8c:bc:f0:87:28:49:e8:fd:32:
9c:c2:fd:6f:81:b8:d7:8d:7e:fb:e4:3e:c0:42:a0:e2:13:84:
22:fd:9f:8b:72:0d:f2:b6:33:76:30:4d:59:9d:eb:7b:1c:da:
25:c9:01:ec:23:c0:12:58:3f:3a:92:e5:c3:0d:a7:4d:e7:ee:
80:60:fd:fc:5b:dd:51:99:93:83:a6:c1:6a:ca:12:f3:04:1e:
b6:47:b3:01:7e:a3:19:af:a6:ce:c1:8f:e5:a8:98:36:89:31:
84:00:a0:d5:1b:e5:2b:57:07:2e:0c:bb:d8:6e:fd:a1:03:ea:
2c:cc:d3:36:4f:81:95:20:08:fa:a3:54:38:e6:c5:14:51:63:
fa:f3:95:c1:9c:cf:1d:5b:87:2d:47:c3:3c:be:80:1b:cd:c2:
52:c4:1e:4e:c6:72:da:54:3e:db:22:ed:4f:da:d0:bd:0f:14:
32:3e:1b:d4:87:5b:c0:e6:c4:17:b3:6a:ee:37:7a:44:4f:e4:
43:3a:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:52 2023 by rpki-client on console-ams.rpki-client.org