Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/vryU1K-ltouSEabJZi60agy3VyM.roa
File: vryU1K-ltouSEabJZi60agy3VyM.roa (raw, json)
Hash identifier: dduw5FGoBthgaSLJl9LJksJgCihUkSu0MreBBGe3uHk=
Subject key identifier: BE:BC:94:D4:AF:A5:B6:8B:92:11:A6:C9:66:2E:B4:6A:0C:B7:57:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 0682F38A
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/vryU1K-ltouSEabJZi60agy3VyM.roa
Signing time: Sat 01 Jan 2022 03:53:30 +0000
ROA not before: Sat 01 Jan 2022 03:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 128.178.0.0/15 maxlen: 16
192.26.28.0/22 maxlen: 22
192.26.32.0/21 maxlen: 21
192.33.192.0/20 maxlen: 20
192.26.40.0/22 maxlen: 22
192.26.44.0/24 maxlen: 24
192.26.46.0/23 maxlen: 23
192.33.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109245322 (0x682f38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Jan 1 03:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebc94d4afa5b68b9211a6c9662eb46a0cb75723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:c0:21:dd:28:f2:ed:7f:11:de:82:9c:7c:
64:ce:7e:f3:12:76:e1:5d:da:07:64:13:09:be:19:
e4:1b:c1:81:da:0d:b5:42:bb:84:82:29:21:2c:34:
58:40:d0:ac:a7:51:29:4f:04:72:d0:8c:ab:90:90:
6d:6c:0d:0d:4a:e5:72:f3:e9:1b:0f:84:fd:30:9b:
87:4c:5c:d8:b2:0d:0a:eb:42:ab:31:75:ed:c1:12:
5a:fb:0e:50:08:fa:89:7b:77:ca:82:40:9f:0b:d2:
f6:72:31:8f:73:87:63:2a:5a:f1:22:d8:ec:94:0c:
d7:23:72:5b:73:63:90:f7:68:d6:4b:59:a2:4d:cc:
06:74:5d:d5:7a:e1:f6:df:5a:0f:f2:3c:0f:49:05:
eb:f4:0c:00:b9:58:4b:ee:b0:6d:4d:a7:f4:bf:7d:
cc:ae:01:24:04:68:86:07:83:d3:bf:72:cc:f9:49:
e9:0f:47:99:cd:80:36:5a:66:f0:0f:01:dd:12:36:
fc:74:2c:4d:a3:e7:fe:04:6f:57:ba:d9:fe:0f:de:
cd:9a:93:92:ed:9d:11:26:f2:d5:ac:cd:57:65:66:
1f:b6:3e:40:f7:7b:4c:d3:34:33:f5:e7:5d:2c:67:
8c:7e:aa:31:97:00:0c:50:71:fe:70:19:10:80:dc:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:94:D4:AF:A5:B6:8B:92:11:A6:C9:66:2E:B4:6A:0C:B7:57:23
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/vryU1K-ltouSEabJZi60agy3VyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.178.0.0/15
192.26.28.0-192.26.44.255
192.26.46.0/23
192.33.192.0-192.33.211.255
Signature Algorithm: sha256WithRSAEncryption
6d:98:50:58:07:b0:09:5e:d7:c2:b2:ee:10:94:ea:80:ba:2d:
1e:c6:10:eb:58:c9:f3:3f:db:42:0c:97:22:33:4e:88:38:ad:
78:ed:bd:bc:08:a5:bf:d9:2a:8c:2e:96:65:02:6f:19:67:78:
1c:cd:1e:98:e3:56:34:67:fb:ee:19:f8:6c:54:c5:9b:f5:f4:
56:2c:8a:f1:f4:2a:60:fb:75:78:c0:c7:e3:15:65:fd:83:e8:
ca:a4:06:4e:ff:da:82:d2:e1:a5:f4:f4:36:4a:2b:fe:2b:c8:
01:13:ac:62:61:f7:89:ee:d6:2c:34:7f:ff:52:b3:2b:60:b9:
ab:a4:68:8d:9f:64:94:5c:6b:1f:a6:2a:82:58:a7:7b:a3:e8:
1f:09:b5:02:3c:e4:f3:81:ed:d0:e8:ff:5d:55:e1:3f:c1:9d:
c8:44:3d:2d:4c:d4:c3:bd:b2:6a:3d:53:bb:14:6e:59:a8:12:
89:8b:66:aa:6a:ee:57:c1:1e:e5:b4:78:21:e5:c4:4a:3d:3e:
7a:00:35:8c:80:9b:b0:34:b1:b4:99:bc:a7:5e:5d:7e:9d:05:
bf:2d:a9:01:02:e2:4d:e7:98:38:e8:27:5d:50:3f:13:2a:6f:
b4:82:bb:1c:85:44:a6:c1:33:9e:25:23:70:42:8f:3f:b3:b5:
3e:f5:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:27 2023 by rpki-client on console-fra.rpki-client.org