Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/VrCmHlMYxPyGgdBpIU13-IE07QQ.roa
File: VrCmHlMYxPyGgdBpIU13-IE07QQ.roa (raw, json)
Hash identifier: CPvhLbw0ADSjHhEIOnnONBBPW/DPITHC9ByPEBxxAn0=
Subject key identifier: 56:B0:A6:1E:53:18:C4:FC:86:81:D0:69:21:4D:77:F8:81:34:ED:04
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 014EB102
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/VrCmHlMYxPyGgdBpIU13-IE07QQ.roa
Signing time: Wed 23 Feb 2022 16:03:58 +0000
ROA not before: Wed 23 Feb 2022 16:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201935
IP address blocks: 84.254.137.0/24 maxlen: 24
84.254.144.0/23 maxlen: 24
95.210.111.0/24 maxlen: 24
95.210.132.0/23 maxlen: 24
84.254.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21934338 (0x14eb102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Feb 23 16:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56b0a61e5318c4fc8681d069214d77f88134ed04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:9b:87:f6:62:6c:e6:71:04:36:3e:b7:27:
30:c3:30:f7:8f:2b:1f:c0:82:0c:37:77:85:32:32:
cb:88:6b:1e:42:48:ec:53:3b:ba:62:36:0a:ce:f0:
96:f6:be:0c:59:8b:a3:1b:50:b4:82:ca:e1:a1:16:
ef:5f:7f:40:3f:f3:de:28:5b:1c:1a:51:f7:b1:67:
92:3f:de:69:42:1a:d0:12:2f:22:95:25:ee:02:14:
ac:86:a0:26:1b:a6:b6:20:2a:a6:92:08:42:5a:fc:
46:bc:73:c5:72:a0:01:39:c4:d8:07:9c:7b:b7:6e:
87:52:49:b6:53:5d:d7:a7:ce:c5:d5:0a:20:9f:53:
39:9b:26:1e:aa:f4:76:7c:8d:db:78:2e:59:e2:d0:
1b:d6:7a:a8:7e:bf:4c:b2:52:80:1d:78:7d:9e:10:
e5:96:20:1e:79:c8:a6:f8:06:7a:e4:97:96:98:e5:
aa:e3:3e:47:7f:3c:83:0b:08:6a:5b:79:c3:82:7a:
90:70:c7:44:3f:08:52:41:40:49:f3:81:78:84:04:
04:8f:cd:38:29:38:ae:01:f7:53:96:e3:53:bc:6e:
43:a4:52:6d:da:b5:d2:22:a5:66:72:91:60:cf:7c:
5d:74:bc:cf:0e:f2:2e:e5:cb:95:26:e7:a4:75:32:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:A6:1E:53:18:C4:FC:86:81:D0:69:21:4D:77:F8:81:34:ED:04
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/VrCmHlMYxPyGgdBpIU13-IE07QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.130.0/24
84.254.137.0/24
84.254.144.0/23
95.210.111.0/24
95.210.132.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ba:a4:ff:2b:c1:70:09:63:44:da:a6:4e:e3:60:21:0b:53:
43:82:0e:18:65:c9:8e:06:97:92:6c:ec:44:4e:5a:34:3c:7b:
a7:91:bf:41:8f:e9:d0:cd:2c:9f:b6:18:09:e6:b3:c0:9c:43:
b1:59:be:e3:94:7a:4d:4d:46:d7:10:69:04:4b:9e:5a:54:0d:
81:66:bc:95:18:72:74:3f:27:3c:94:47:92:e5:06:8a:3d:0c:
3d:1e:4a:f5:c8:8f:15:32:f5:62:41:69:e0:83:fc:ab:1d:45:
2a:0f:f4:e3:b6:8e:45:bf:21:b5:79:ac:d1:ee:49:ae:cd:31:
29:c5:31:90:a3:9d:27:6b:7d:e0:79:f4:83:e6:90:c1:24:c4:
cd:01:ba:90:3b:98:6f:99:7c:60:87:40:2a:0f:75:f4:94:dd:
44:97:b4:67:e9:02:d3:cb:a0:02:95:c6:79:45:45:f6:ac:ff:
f0:9a:cf:4d:37:f5:00:50:d7:3e:d3:47:8c:f4:21:6d:f1:a4:
c3:b9:ee:4d:50:ff:99:de:3b:78:03:3d:a1:6e:9b:02:27:de:
bd:3c:8c:fa:56:db:b3:43:46:44:b3:72:ed:ef:e3:62:58:b8:
92:a0:e3:b7:9f:86:e0:18:10:c7:a5:87:82:09:69:06:85:4e:
03:f9:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:26 2024 by rpki-client on console-ams.rpki-client.org