Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/Vpc-_0KZBTkAkFNM9oYCOx9-c-M.roa
File: Vpc-_0KZBTkAkFNM9oYCOx9-c-M.roa (raw, json)
Hash identifier: I+1Nfqj4uDRWElou3Kf85sdV4QjmkJrxu1/Q20uhcF8=
Subject key identifier: 56:97:3E:FF:42:99:05:39:00:90:53:4C:F6:86:02:3B:1F:7E:73:E3
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 173DDFF8
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/Vpc-_0KZBTkAkFNM9oYCOx9-c-M.roa
Signing time: Sat 01 Jan 2022 07:53:06 +0000
ROA not before: Sat 01 Jan 2022 07:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 193.241.241.0/24 maxlen: 24
193.241.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389931000 (0x173ddff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 07:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56973eff429905390090534cf686023b1f7e73e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:a5:68:e7:ef:f8:64:8a:25:7b:54:b3:0a:
40:fc:32:70:16:60:d9:ca:61:c0:c2:17:8f:77:3f:
b6:62:03:1d:3a:72:c4:57:3a:db:3d:6c:74:c2:34:
d0:e8:80:bb:d6:7e:83:b8:6f:af:49:07:2c:ac:ab:
3e:40:a3:3d:6c:75:2c:88:a0:e7:03:b4:b3:04:06:
a5:d8:15:f3:0c:3d:07:bb:cd:d3:66:c7:82:66:b3:
e3:ae:20:58:52:98:ec:68:14:77:67:62:d3:ee:11:
a4:0d:de:a3:48:f6:4e:e0:6a:38:49:20:14:e7:2f:
44:7d:be:03:30:1d:be:43:af:a6:01:1c:af:07:36:
6b:e8:13:be:51:50:cb:16:bc:68:ca:ef:53:1e:c0:
46:7a:02:5e:d6:73:a9:b0:3c:2b:b9:a5:b9:f4:7a:
f7:94:a1:77:8a:a1:50:8d:96:56:80:c1:d6:3a:7d:
94:74:af:fc:e0:95:99:dc:e8:96:cb:61:18:bd:03:
e3:d7:56:70:ce:32:93:87:eb:c3:5d:e0:1e:5d:11:
fc:0f:01:2f:6c:2b:41:88:69:09:17:74:67:f4:d8:
93:ad:18:89:1e:b9:2b:77:3e:a4:2b:66:29:c7:bf:
ed:16:e8:28:00:2a:88:ef:65:4b:14:8b:72:49:8a:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:3E:FF:42:99:05:39:00:90:53:4C:F6:86:02:3B:1F:7E:73:E3
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/Vpc-_0KZBTkAkFNM9oYCOx9-c-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.241.0/24
193.241.249.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5e:6b:fe:58:63:81:5c:09:49:02:03:6e:f7:5a:9f:de:1f:
d1:db:61:d3:b8:c6:04:33:4c:95:46:5c:82:69:e3:f3:77:59:
2f:14:c5:7d:de:5a:a6:da:af:2d:fa:a8:30:89:3f:ae:7b:84:
e5:00:b9:34:9a:65:fc:af:4a:e1:1f:84:a0:fe:36:26:45:90:
39:60:c2:01:91:cc:54:70:75:fe:22:9f:23:91:4f:84:02:36:
bd:58:1c:0b:80:0f:76:3e:65:73:9a:11:b0:49:f6:bc:8c:30:
e1:3b:66:04:c5:6d:88:19:40:05:e0:ca:31:a0:08:09:26:96:
e8:f4:2b:5d:33:63:af:b8:05:2c:dc:17:cf:ee:d4:5d:e7:20:
0a:43:cb:46:4c:22:b5:b0:3b:f6:e5:27:41:20:a6:e2:d2:77:
a0:ef:38:b8:06:87:ff:e9:8e:da:9a:81:9d:87:3a:a1:05:75:
f1:d7:68:6f:f6:36:3d:6a:91:5f:a2:5a:ae:42:d5:9c:53:5c:
e0:e3:1f:7b:19:23:d6:3c:87:52:a1:8e:3a:8f:73:f3:ac:ba:
3b:89:44:c8:c5:86:eb:40:12:a2:ad:3c:19:82:ed:ea:bf:da:
60:da:64:97:8e:f5:19:63:c7:56:45:20:e4:d5:5b:75:c9:fe:
81:8f:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:29 2023 by rpki-client on console-fra.rpki-client.org