Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/VRh-0mFOhK_rGc-Yd9-xnkmMj9Q.roa
File: VRh-0mFOhK_rGc-Yd9-xnkmMj9Q.roa (raw, json)
Hash identifier: uUC0FrnaV3UPDfwdmOmy69MIuSH/5ZQP9rKrSY6FLik=
Subject key identifier: 55:18:7E:D2:61:4E:84:AF:EB:19:CF:98:77:DF:B1:9E:49:8C:8F:D4
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0181F0E9513F843ECCA10BD1BB0811378F4E
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/VRh-0mFOhK_rGc-Yd9-xnkmMj9Q.roa
Signing time: Tue 12 Jul 2022 05:37:11 +0000
ROA not before: Tue 12 Jul 2022 05:37:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 62.182.172.0/22 maxlen: 24
62.182.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f0:e9:51:3f:84:3e:cc:a1:0b:d1:bb:08:11:37:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jul 12 05:37:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55187ed2614e84afeb19cf9877dfb19e498c8fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:2e:7a:da:ae:9f:e2:39:af:15:91:f5:32:
01:e8:98:f6:6d:9f:92:cc:02:2a:29:58:2b:8b:03:
90:df:92:31:27:91:18:86:e5:a8:7a:d5:39:f6:5a:
5a:04:80:3a:47:48:e8:a4:05:76:eb:ed:fd:26:75:
fa:bb:2c:4d:de:aa:84:56:02:35:94:a0:07:16:25:
7d:ac:f4:77:76:f8:04:37:71:e7:6c:ba:5d:6d:af:
f4:1d:2a:15:55:ac:f9:f0:03:de:48:11:2a:de:32:
b3:0a:88:7b:42:9b:9a:bc:b0:c1:bb:72:44:7f:23:
48:d5:08:34:c1:84:05:b4:d3:a9:01:6b:c5:2a:9b:
4e:3d:5c:12:96:a0:01:21:ba:8f:59:95:b7:5b:c1:
63:59:53:b4:b3:9d:92:04:b9:3e:89:22:74:be:17:
72:39:b5:b0:e2:49:b7:3b:31:b9:ac:94:69:e9:fc:
23:4e:b2:87:4f:3f:ab:9e:af:08:01:5d:e1:d3:68:
48:7c:d2:3e:8c:4a:ce:50:d6:a2:5d:1c:17:42:56:
37:7a:6e:eb:4b:a7:42:c6:f0:a3:ba:7f:f9:70:9b:
e2:58:81:3b:53:ef:09:33:a8:44:ce:5d:bc:16:84:
51:e6:b1:11:37:c4:2e:31:fe:25:0a:58:37:27:99:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:7E:D2:61:4E:84:AF:EB:19:CF:98:77:DF:B1:9E:49:8C:8F:D4
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/VRh-0mFOhK_rGc-Yd9-xnkmMj9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:90:4a:f1:14:fb:c0:63:ce:1f:60:de:d8:79:1d:49:48:9b:
87:e9:21:c3:ac:5c:8f:59:df:03:5e:1f:1a:0c:cb:eb:4a:48:
37:1a:14:ce:2d:f1:01:1a:6a:28:40:3f:7e:98:a6:47:9d:6a:
13:49:01:81:1a:bb:62:e7:7c:9b:39:2e:60:66:53:de:5d:61:
1c:b4:13:76:53:19:4e:01:4b:b4:52:05:18:61:a3:b7:23:75:
bb:ff:b8:90:3b:04:66:9f:05:f8:f6:b1:3c:ca:06:5e:55:b7:
a5:70:34:92:54:b5:a5:bb:f3:66:d6:13:0d:77:a6:24:8a:53:
73:9d:fd:7f:69:08:74:5c:d3:34:93:fc:ef:d9:f3:fe:07:1d:
5f:3b:4f:58:40:1a:ae:07:b9:a2:ed:b4:e9:68:6f:a8:57:7d:
03:6a:43:50:2b:c6:2b:2c:b2:58:2b:1e:c0:72:df:4b:9d:22:
56:73:70:e1:cf:32:26:92:90:6a:17:09:c1:d4:c6:bd:11:f8:
97:a8:2d:45:75:d0:4a:e5:de:94:39:b4:b0:71:14:5b:0b:79:
d8:94:8c:05:44:cd:83:41:7b:83:60:54:24:9b:90:2e:15:08:
56:b5:75:fc:3d:5d:6b:68:e2:d1:67:9a:0e:56:14:7e:b8:12:
0d:10:f2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org