Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/VU_LXVQ50NvsFkQKKjpoRqQ3v7M.roa
File: VU_LXVQ50NvsFkQKKjpoRqQ3v7M.roa (raw, json)
Hash identifier: 28lEe6Lc+FbWZLN2AhAOZQgnNGySKygqMuHkMoIDeAw=
Subject key identifier: 55:4F:CB:5D:54:39:D0:DB:EC:16:44:0A:2A:3A:68:46:A4:37:BF:B3
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 152C47B9
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/VU_LXVQ50NvsFkQKKjpoRqQ3v7M.roa
Signing time: Sat 01 Jan 2022 12:59:35 +0000
ROA not before: Sat 01 Jan 2022 12:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201211
IP address blocks: 185.73.16.0/22 maxlen: 22
185.82.24.0/22 maxlen: 22
2a05:3e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355223481 (0x152c47b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Jan 1 12:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=554fcb5d5439d0dbec16440a2a3a6846a437bfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:82:13:e7:5d:3a:6f:e9:83:66:70:d0:fa:
53:03:cf:c9:10:2f:05:82:09:9c:57:dd:d5:89:bb:
1f:63:1b:87:f6:47:a5:f5:ad:4f:f5:6e:9f:0d:9c:
7b:54:1a:2f:d1:cb:bd:87:e9:a3:33:5b:22:44:00:
96:5b:8f:a4:3a:6c:f6:a3:12:bc:6d:8e:f1:2e:ba:
66:b9:9a:78:2c:19:da:76:2d:ad:86:95:66:37:5c:
3a:3f:20:1b:3d:07:1e:da:17:0e:5b:23:ea:55:e5:
cf:9a:fb:66:02:d5:2a:4e:6e:07:1a:d1:2e:9a:e1:
9f:1e:f8:7d:72:a7:af:04:05:36:77:78:92:8b:55:
a8:c3:79:ed:b3:1f:7f:20:eb:e7:9f:88:d5:52:c5:
97:59:8f:c3:37:f7:da:69:a4:81:41:9b:d5:d6:58:
2e:1c:ac:81:a3:31:91:1c:f7:da:25:27:32:a7:b4:
3b:d3:8e:f0:17:4e:af:6f:de:fa:2d:27:c9:0b:58:
69:f7:78:85:fd:d6:fe:a8:1a:a6:a5:84:5d:55:bd:
06:c8:c3:52:d6:fa:7b:f6:96:a4:6c:a9:12:23:c7:
ce:93:57:d9:29:db:eb:b6:4e:c0:37:27:19:60:f7:
83:76:f6:a2:3b:16:1b:8a:2b:68:9d:bd:e1:28:a4:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:CB:5D:54:39:D0:DB:EC:16:44:0A:2A:3A:68:46:A4:37:BF:B3
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/VU_LXVQ50NvsFkQKKjpoRqQ3v7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.16.0/22
185.82.24.0/22
IPv6:
2a05:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
43:24:47:07:38:92:9d:5b:59:c4:62:07:71:e6:68:a2:9d:8e:
4e:4d:d5:8d:44:0a:32:af:5a:9a:0e:44:f8:63:9d:81:01:63:
50:f8:b2:42:b4:3d:31:ca:7a:fe:1f:e5:da:a7:40:da:2d:66:
2a:c4:9f:7a:06:ab:1b:69:ad:ed:5c:39:10:2f:30:eb:ea:cd:
35:07:88:57:43:3d:a0:cb:b7:34:01:25:dd:e8:5d:76:a4:5d:
4b:bc:8c:cf:aa:39:06:b7:f4:f3:ad:c9:3e:97:e5:c1:22:fa:
52:c2:8a:9d:a6:2c:2d:dd:ff:c5:bf:80:69:4a:0b:42:28:8a:
6a:92:60:4c:64:22:b7:10:d7:09:5e:e1:7b:52:96:b4:fb:7a:
cb:24:48:b3:50:4e:e6:23:03:11:f4:15:a8:c9:f1:45:39:1b:
60:9d:50:10:0a:ab:c6:d8:15:d8:fa:b1:f1:c6:9d:8f:78:4c:
3d:4b:34:54:95:fc:5f:8a:cc:a2:8b:73:9d:6d:0a:9f:db:0a:
f8:e0:a8:29:60:88:0a:07:3d:e7:1a:f7:db:a4:3a:e5:29:f8:
13:9a:57:9a:57:35:37:f7:f7:35:69:14:93:84:4e:5d:e2:f6:
af:64:b6:f7:92:5c:32:cb:28:4d:5d:86:7e:6c:a4:77:94:31:
aa:2b:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:49 2023 by rpki-client on console-ams.rpki-client.org