Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/vxbjsU60i0sA38grHo9Vm7jbj2Y.roa
File: vxbjsU60i0sA38grHo9Vm7jbj2Y.roa (raw, json)
Hash identifier: 5zPoCCvc9Tvf+m6UnWVFModDcCfD64a1ahGRyyB8s4k=
Subject key identifier: BF:16:E3:B1:4E:B4:8B:4B:00:DF:C8:2B:1E:8F:55:9B:B8:DB:8F:66
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 01856293A77BCA4CB517A9ED50C794A98A00
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/vxbjsU60i0sA38grHo9Vm7jbj2Y.roa
Signing time: Fri 30 Dec 2022 10:28:41 +0000
ROA not before: Fri 30 Dec 2022 10:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.59.96.0/19 maxlen: 19
194.59.121.0/24 maxlen: 24
194.59.119.0/24 maxlen: 24
194.59.120.0/24 maxlen: 24
2001:67c:67c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:93:a7:7b:ca:4c:b5:17:a9:ed:50:c7:94:a9:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Dec 30 10:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf16e3b14eb48b4b00dfc82b1e8f559bb8db8f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:88:5c:a9:16:76:90:2f:0d:f6:52:59:0a:
28:65:f3:bf:22:d0:f7:8c:e5:f8:1c:ea:c2:fd:0c:
bc:c9:2e:57:7a:c1:00:d2:aa:a1:ca:09:69:08:40:
f9:dd:78:8d:90:28:df:5a:76:e3:fa:7e:0d:a0:c9:
2e:ed:e1:f0:7e:a1:2d:3f:9a:c2:0f:03:d3:bd:6a:
14:9b:4c:fc:4e:7d:77:17:4b:59:55:7e:1c:2f:0c:
86:d2:6d:f1:83:df:3d:74:f3:cd:b9:ba:78:ff:f1:
76:15:e0:a3:de:bd:67:ac:bc:d8:67:c4:6f:26:85:
38:76:52:a4:15:f3:ad:b6:33:ab:a8:31:84:ec:44:
40:ac:21:0a:c0:c8:56:d7:7b:5a:5b:96:a1:ac:4a:
04:dc:32:17:6e:11:aa:a7:71:b7:bd:06:e9:a1:8a:
44:35:64:ed:50:fd:b3:e2:14:dd:b6:bc:93:f5:08:
7f:dd:99:58:b6:04:3b:96:90:a7:83:48:b8:1b:20:
9f:0c:3d:e6:54:b4:3b:a1:1b:7d:64:6c:f5:3b:2c:
83:21:32:e2:af:80:57:17:b8:5d:34:03:cd:35:ee:
73:8c:02:58:e3:87:1a:ed:80:f8:ff:13:25:af:74:
fc:ef:cd:9e:ce:d9:db:9a:f9:6b:89:e6:8b:5f:20:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:E3:B1:4E:B4:8B:4B:00:DF:C8:2B:1E:8F:55:9B:B8:DB:8F:66
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/vxbjsU60i0sA38grHo9Vm7jbj2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.96.0/19
IPv6:
2001:67c:67c::/48
Signature Algorithm: sha256WithRSAEncryption
b3:8c:4f:5c:cf:e0:48:73:95:d6:d8:83:8a:4c:cb:b3:74:be:
82:fe:0b:52:5e:85:09:f1:d0:fc:e9:0b:10:c7:9b:4b:33:f1:
0a:bd:6a:5c:83:7c:a3:90:7e:bb:13:52:24:82:41:d0:64:06:
9b:91:b2:0f:20:77:60:39:4a:73:5c:dc:a1:67:90:21:93:c0:
db:ae:d8:34:3f:36:94:9b:8a:ec:e4:19:ae:f3:7f:ac:33:48:
9f:1c:6c:05:ef:f4:65:6b:d6:42:88:b2:9e:84:51:9c:4a:fc:
d6:c0:e6:5e:41:96:94:d6:fc:e0:9b:12:ea:6e:1a:62:dc:c2:
fc:e5:e7:b4:55:dd:7f:07:d1:f7:31:cd:f2:2e:c2:9a:cd:43:
54:65:82:56:9b:fe:c7:76:e6:c0:a8:27:dd:ac:2a:e6:31:fc:
36:f6:42:54:3a:98:6b:21:a6:34:d4:7e:21:f0:b0:af:73:b3:
99:d2:b2:99:28:e0:12:b8:dd:a6:28:08:8b:29:4b:80:51:fa:
ec:3a:6f:81:c4:1f:57:25:18:ab:a2:fe:ed:15:cf:ad:78:38:
08:19:2c:6d:52:eb:9a:fe:00:f9:99:6b:7c:42:c1:c0:b4:ea:
a0:16:09:1f:51:25:e9:72:3d:83:ea:d7:c7:9f:cd:85:51:94:
f0:2a:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org