Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/VcLiKsusHhlQBE3D0numzQceoHw.roa
File: VcLiKsusHhlQBE3D0numzQceoHw.roa (raw, json)
Hash identifier: hyqPci9WGy5rIARvvLbQNCcgUWhES3ae74PCJqPYtQc=
Subject key identifier: 55:C2:E2:2A:CB:AC:1E:19:50:04:4D:C3:D2:7B:A6:CD:07:1E:A0:7C
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 06A456B0
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/VcLiKsusHhlQBE3D0numzQceoHw.roa
Signing time: Sat 01 Jan 2022 13:59:33 +0000
ROA not before: Sat 01 Jan 2022 13:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50525
IP address blocks: 2001:4de0:1006::/48 maxlen: 48
2001:4de0:49::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111433392 (0x6a456b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 13:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55c2e22acbac1e1950044dc3d27ba6cd071ea07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:46:f7:ed:99:60:1c:3f:9a:d0:85:67:21:
0e:44:a8:e7:de:29:14:ee:58:59:c3:79:2b:95:30:
4c:8d:fe:7f:cc:cf:7c:6f:3b:cc:44:e0:c3:68:c8:
20:22:8d:43:45:e3:13:2e:2e:fa:49:94:84:c8:3e:
cd:d0:b4:c2:b2:1a:10:83:0c:7e:c6:e1:bf:80:85:
3d:1d:47:44:6c:a0:53:36:fa:f6:97:6e:87:dd:69:
33:44:a5:a6:b0:cd:cc:27:1d:8b:81:bb:68:df:59:
e9:af:e0:db:cf:f5:5a:63:cc:53:38:2e:b1:5a:c0:
39:9b:9f:a4:24:c1:9b:e1:1a:73:8f:fc:c2:3f:bb:
5d:1d:90:d7:90:86:24:03:f6:da:05:c0:e3:4d:50:
03:5c:9e:78:fc:33:1c:96:02:0b:db:73:c3:bd:39:
8e:45:1f:57:7f:c4:2a:58:bd:60:b5:83:1d:1e:14:
1b:14:38:47:a9:9f:6c:6e:6f:bf:0d:19:27:3c:2f:
86:b8:c2:cc:65:8b:72:06:e6:34:9b:65:fb:0f:90:
9b:18:5b:38:94:43:14:31:da:fd:78:84:f3:53:53:
6a:d5:51:ee:24:ef:4a:6c:21:c2:6c:1e:2a:1a:8e:
f4:de:c0:48:88:10:a6:64:4d:f2:da:6e:f5:71:8b:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:E2:2A:CB:AC:1E:19:50:04:4D:C3:D2:7B:A6:CD:07:1E:A0:7C
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/VcLiKsusHhlQBE3D0numzQceoHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:49::/48
2001:4de0:1006::/48
Signature Algorithm: sha256WithRSAEncryption
9e:4a:a9:b7:a6:bc:ab:51:e3:1f:5c:78:cd:e9:59:60:ab:55:
34:db:54:40:8a:ef:5d:1c:a5:84:34:39:63:5e:ee:73:b8:7a:
d5:67:37:7d:4f:88:c2:8f:1c:da:83:ea:6b:89:4f:25:54:f9:
28:a5:04:1a:89:20:1c:61:ac:b4:d1:11:f6:af:97:87:3e:a2:
a3:32:63:7e:e7:7c:b4:13:f2:fc:e7:5f:23:59:3e:31:54:74:
95:72:3b:b2:b8:74:3b:b6:01:38:87:d8:a9:f8:9f:b8:13:91:
d3:35:a4:df:3a:71:98:40:c2:20:c0:35:45:b7:e3:f8:3b:fd:
88:65:5d:82:f5:04:c5:bb:45:58:1a:58:d3:89:db:37:7b:0d:
18:9d:ef:2a:a1:99:29:e6:76:f1:a4:c2:62:1d:ba:3e:31:1f:
c0:ae:68:b6:80:ce:5f:8d:c4:25:21:44:15:d9:f8:43:25:0a:
96:9d:b8:7f:8f:d7:b9:05:36:f7:6f:4a:54:95:0e:98:2c:83:
63:e2:a4:5a:4a:b0:e1:52:78:e9:45:71:c5:8c:59:6b:14:39:
67:04:44:71:df:a7:ce:1f:ea:43:18:02:13:9d:f5:ac:ad:6e:
aa:86:55:d4:5e:73:1e:a8:a6:72:fe:48:26:4f:67:52:c2:68:
66:01:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org