Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vsgebX5Z4VQjEmu2fj0e45OzcoE.roa
File: vsgebX5Z4VQjEmu2fj0e45OzcoE.roa (raw, json)
Hash identifier: VtuCysEoMXklSIRiuQi3RDjMMUF4guMHj0mQxiwd2ac=
Subject key identifier: BE:C8:1E:6D:7E:59:E1:54:23:12:6B:B6:7E:3D:1E:E3:93:B3:72:81
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 153644E5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vsgebX5Z4VQjEmu2fj0e45OzcoE.roa
Signing time: Thu 02 Jun 2022 11:54:21 +0000
ROA not before: Thu 02 Jun 2022 11:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209642
IP address blocks: 185.129.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355878117 (0x153644e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 2 11:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bec81e6d7e59e15423126bb67e3d1ee393b37281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:85:13:a3:b2:f2:39:88:2f:53:0d:ae:0b:
58:83:6f:d6:63:d1:97:37:b3:35:52:d7:b4:46:a1:
dc:3b:d7:34:c4:d1:e6:05:09:0a:26:d9:41:73:02:
f6:b1:a4:a9:a4:75:50:af:fc:9a:15:f6:d9:83:6b:
95:68:6b:08:f4:11:e3:a8:e6:e7:0e:bf:62:c5:bb:
08:43:fa:5e:b5:9d:e6:51:69:60:77:81:dc:bf:c4:
fe:14:fe:e6:b6:8d:d9:a8:4a:2b:6f:31:50:7f:91:
04:85:4c:f3:20:9c:58:ad:a9:3c:6e:b1:36:1c:91:
4b:73:63:08:a5:f5:13:d8:9e:05:36:82:e7:7e:d3:
2a:45:de:84:9b:18:0e:e1:ee:2e:03:9a:b7:e8:df:
c5:89:24:37:05:e3:5b:78:08:f3:84:25:ea:e0:5f:
10:a1:16:10:96:a3:9d:29:83:93:bf:46:f6:e5:34:
70:c3:ae:43:a0:ff:59:84:96:05:7f:89:a4:91:f3:
23:10:b5:bd:68:13:bb:32:9a:f4:68:a9:06:ee:b1:
e5:20:94:96:b2:a3:f1:7f:e3:a3:4b:eb:2b:3d:56:
00:11:31:63:88:69:11:b2:88:ed:05:10:13:cc:d6:
2c:c7:cb:0e:39:a1:8c:31:09:cd:65:de:34:1e:cb:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:1E:6D:7E:59:E1:54:23:12:6B:B6:7E:3D:1E:E3:93:B3:72:81
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vsgebX5Z4VQjEmu2fj0e45OzcoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:b5:1d:62:88:d4:c7:f1:27:ec:22:dd:a4:57:09:81:60:
a1:e8:d3:c1:31:13:b2:b6:4e:17:55:d1:13:88:d0:d0:61:f0:
da:83:f1:ff:8f:2d:61:cb:42:dd:b7:38:ff:33:2f:fa:89:ad:
eb:11:09:ac:4d:24:7f:3a:90:1c:a2:8a:a6:4d:eb:97:13:28:
a1:86:ff:8c:49:53:8d:28:37:ee:60:80:b0:16:af:23:5e:ba:
8a:2c:aa:f7:3e:0f:08:6e:c8:38:9b:da:c5:85:68:ab:ed:94:
36:4b:c6:03:16:94:59:dd:a9:19:b4:ba:96:2f:1b:87:60:00:
32:da:9b:b1:94:48:90:26:a8:62:90:bf:c1:f8:75:d7:00:af:
d5:24:29:6d:64:af:5c:04:ec:fc:63:c3:79:73:45:a3:44:a8:
77:90:a4:e4:ba:3c:e2:d0:15:22:c5:c3:fc:97:5a:19:3c:cf:
05:fc:cb:43:b6:86:ca:55:5f:6e:60:6a:3e:64:da:22:45:80:
1f:96:aa:9d:65:06:92:bc:7c:e5:50:2b:fd:17:7a:24:c6:77:
ec:a8:ee:a0:85:f5:a2:71:bc:68:55:a6:6f:b7:62:83:07:c1:
83:b9:9f:24:1d:64:73:d4:f5:f3:ef:d6:55:87:4a:e5:2e:17:
45:45:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org