Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/vvkCmhZDkU4aEicA6ywSK9Fdgrs.roa
File: vvkCmhZDkU4aEicA6ywSK9Fdgrs.roa (raw, json)
Hash identifier: eFvXM7a/e88/8mCuyb5W4tinyqK+iywMRxnZMmqhA6k=
Subject key identifier: BE:F9:02:9A:16:43:91:4E:1A:12:27:00:EB:2C:12:2B:D1:5D:82:BB
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 0A5ABAB8
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/vvkCmhZDkU4aEicA6ywSK9Fdgrs.roa
Signing time: Sat 22 Jan 2022 10:06:54 +0000
ROA not before: Sat 22 Jan 2022 10:06:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56786
IP address blocks: 84.21.176.0/22 maxlen: 24
2a0d:f540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173718200 (0xa5abab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Jan 22 10:06:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bef9029a1643914e1a122700eb2c122bd15d82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:55:1b:ba:b0:4b:05:5e:f4:81:fb:b7:8d:
b6:c4:6b:c3:6a:36:4c:36:b5:1f:d5:a1:37:49:5a:
83:7f:e9:f9:e8:42:0c:59:1f:ab:46:fe:57:f3:5d:
92:c2:13:25:2d:45:d4:01:a0:f7:52:a0:7f:12:98:
d8:3e:d4:11:5c:81:b3:0c:9f:48:0f:a9:14:07:3d:
26:81:eb:6c:05:11:77:88:36:a7:99:fe:90:c9:e4:
b4:35:0b:cb:6a:77:7b:ce:60:dc:e9:83:11:1d:a1:
a2:7a:2a:85:f1:56:bb:e5:1a:f4:ea:dd:34:8c:07:
17:62:ed:9a:85:24:cc:76:3c:43:04:c1:2a:7e:e4:
1b:71:ff:55:70:b9:9a:df:e8:88:2c:15:b8:11:8d:
e5:1d:9b:80:c5:76:ed:77:2a:ab:64:fa:35:95:25:
33:5d:72:68:e9:82:be:1b:7a:7c:b3:31:2b:61:c7:
5a:42:f2:6c:3f:c9:50:d2:22:cb:a0:bb:c6:c8:91:
4f:87:6e:e0:46:a1:00:0f:e1:35:69:a6:c3:3b:3c:
9f:6b:d8:a6:aa:8b:f4:76:a4:38:cf:9c:65:52:84:
9d:30:56:bd:f4:24:5b:72:2a:29:f1:74:8b:10:d9:
a7:d3:a2:44:88:d0:84:f1:c5:d5:08:80:80:7b:b7:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:02:9A:16:43:91:4E:1A:12:27:00:EB:2C:12:2B:D1:5D:82:BB
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/vvkCmhZDkU4aEicA6ywSK9Fdgrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.176.0/22
IPv6:
2a0d:f540::/29
Signature Algorithm: sha256WithRSAEncryption
16:93:c9:7f:cd:41:59:ed:a1:e1:eb:5f:91:df:2b:39:8d:a6:
19:6f:bb:9e:3e:3a:12:cf:fc:7b:32:ba:52:e1:71:6f:79:40:
20:24:6d:4f:60:75:69:a0:3b:bc:23:c1:74:35:c1:51:1e:f6:
c7:ac:57:c7:93:6b:35:b6:ea:c9:46:cb:55:6a:31:c7:ca:1d:
98:d9:f5:12:a4:e2:a3:ef:17:e9:22:22:83:22:b2:9a:ba:06:
3f:09:4c:2a:3a:d6:96:35:33:a5:e3:b9:df:97:22:56:87:88:
96:39:47:9a:91:69:a6:1f:59:7a:c6:c8:df:0f:6e:14:60:0a:
ff:27:07:0f:38:c0:d0:a6:ac:00:07:fe:25:40:aa:7e:57:fd:
31:be:c7:9e:bf:f6:a0:66:7f:2e:fa:a6:d4:42:cb:7f:4e:10:
db:26:70:04:83:27:b6:da:d4:c1:05:2f:f5:48:a5:f5:14:9a:
a4:de:6d:89:0b:d3:fc:18:2b:10:89:95:38:2f:81:6f:19:95:
9f:5a:3a:5d:9a:d2:d0:f9:9a:82:a0:ad:88:4c:95:ac:2b:b3:
cf:b1:e5:5c:5e:8b:b9:50:0d:2a:f1:b0:43:ad:33:a8:50:43:
e3:ad:f8:e0:ed:58:b1:e0:74:54:78:bb:5a:5f:4f:26:1a:3e:
9e:59:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org