Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VPXOSuwygcyj0G_424IAkpJEeWk.roa
File: VPXOSuwygcyj0G_424IAkpJEeWk.roa (raw, json)
Hash identifier: FjuwkesS59JpN54OD6rm1JrXy5Z6Ah7KB7HDbAglGKY=
Subject key identifier: 54:F5:CE:4A:EC:32:81:CC:A3:D0:6F:F8:DB:82:00:92:92:44:79:69
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185301BCBAD124B559059004D1DFF98DF32
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VPXOSuwygcyj0G_424IAkpJEeWk.roa
Signing time: Tue 20 Dec 2022 15:16:46 +0000
ROA not before: Tue 20 Dec 2022 15:16:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202599
IP address blocks: 185.159.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:1b:cb:ad:12:4b:55:90:59:00:4d:1d:ff:98:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 15:16:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54f5ce4aec3281cca3d06ff8db82009292447969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:4a:97:84:99:ca:e4:c6:8b:80:f0:5f:1c:
27:b9:9a:ce:d6:d2:e2:de:44:0f:ab:d4:64:7f:0d:
aa:4b:93:be:0e:af:c7:a4:e5:10:fd:46:73:08:ea:
4f:02:9d:69:2e:06:80:1e:c1:ac:a2:33:53:33:4a:
c6:74:ae:20:08:ee:5b:05:83:bb:48:d9:3a:48:f3:
c0:0c:a1:9a:92:45:e4:9d:7c:c8:6f:10:ea:c8:81:
3a:3f:b8:0a:ad:0f:03:9a:2a:f0:b1:49:42:7a:0e:
ea:65:69:51:76:ab:c8:d1:bf:ec:12:c7:be:b6:84:
1f:fd:a0:3d:4d:fc:e2:b0:0c:55:ef:df:08:b6:e8:
af:e2:4e:48:92:2c:db:04:23:a8:65:6a:01:80:11:
c3:b6:6e:97:79:27:a6:c8:8e:da:67:1a:ce:6a:28:
e0:fb:61:6d:78:1d:81:96:aa:82:83:71:e7:a4:96:
5b:2d:73:13:ba:33:ea:47:b0:5a:90:2d:a4:9f:fe:
d1:05:ba:e0:b5:f0:51:a8:e4:27:07:6a:fb:8b:10:
2d:ab:57:89:e3:45:5c:7f:ca:b6:92:15:2e:65:d7:
ac:a7:50:59:69:8f:df:b8:27:62:5a:f5:08:7e:32:
51:f4:cf:e5:6e:2e:a0:e0:36:09:1e:39:c1:b5:1c:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:CE:4A:EC:32:81:CC:A3:D0:6F:F8:DB:82:00:92:92:44:79:69
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VPXOSuwygcyj0G_424IAkpJEeWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1b:b4:20:f1:7b:f6:d4:bf:81:27:08:c6:8b:cb:3d:2e:22:
f7:da:f4:b3:8f:c0:5c:2b:cb:ea:14:57:26:bf:b9:cc:e4:72:
06:53:e7:86:a2:a6:eb:bf:f4:1c:17:81:d0:7a:4f:55:32:e8:
1e:71:b5:0e:0c:3f:64:c4:7c:6e:b0:91:15:fd:7d:5f:52:51:
ec:76:56:a8:a5:f0:cd:44:4a:16:40:c6:e8:79:bb:9b:99:55:
f3:5c:18:26:21:9e:21:31:3d:07:c4:b3:ef:f6:bd:0d:57:6a:
09:ec:17:8a:ab:8c:19:f7:ab:64:27:de:6b:10:99:4a:70:f0:
9c:16:51:0f:8c:c3:c4:e1:0f:be:fe:a8:7c:e5:8b:99:cc:53:
82:13:dc:ef:18:23:03:39:e8:ee:03:ee:1d:1f:fc:37:ee:b5:
81:39:55:ae:cc:0b:eb:4d:fb:9a:bb:ea:ff:db:5b:11:f9:20:
33:f8:78:bf:d2:65:c9:bb:14:70:ba:a0:a7:69:6e:26:9d:1c:
e5:c0:be:1e:14:ab:62:c5:65:0a:eb:bb:23:e0:30:5a:0f:93:
d5:bb:ee:3d:0e:a9:5a:d7:15:9d:ca:2f:fe:bf:ad:8f:ff:24:
6d:85:29:90:07:2d:00:b5:35:08:fc:09:99:50:59:75:04:95:
f7:98:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org