Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VFFDLsG-XJiaBERAKUnwRft6YSQ.roa
File: VFFDLsG-XJiaBERAKUnwRft6YSQ.roa (raw, json)
Hash identifier: jiEdknw+YvoGJEV63woOO+kF0DTwuQB+3e2ypnugsF4=
Subject key identifier: 54:51:43:2E:C1:BE:5C:98:9A:04:44:40:29:49:F0:45:FB:7A:61:24
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01844261166C4900A260FB2E85A3F2EB432F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VFFDLsG-XJiaBERAKUnwRft6YSQ.roa
Signing time: Fri 04 Nov 2022 11:22:49 +0000
ROA not before: Fri 04 Nov 2022 11:22:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:61:16:6c:49:00:a2:60:fb:2e:85:a3:f2:eb:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 4 11:22:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5451432ec1be5c989a0444402949f045fb7a6124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:cb:7c:82:55:35:e8:88:c0:c2:98:08:69:
e0:76:e3:ec:dc:77:f8:3f:33:0d:e2:4c:7b:93:6a:
6a:9a:75:5e:61:bf:7f:92:c9:94:35:38:87:d2:02:
f0:c6:b0:d9:23:ff:31:8d:cb:f8:89:d4:1a:3a:fe:
01:b6:63:ba:d6:9d:b6:86:e0:b9:2a:27:48:16:b6:
88:7f:5b:45:0a:76:0a:f7:a7:11:04:dc:ff:41:7f:
e5:ef:ad:21:cc:76:1f:e8:00:41:6d:31:c7:79:c8:
55:58:9b:70:e6:bc:22:fa:b3:3a:0c:a5:37:f6:9b:
92:de:a5:57:5f:36:3c:aa:91:ed:94:81:da:16:bd:
84:f5:28:05:37:36:fb:37:65:df:46:b2:95:ef:24:
7c:2d:31:de:6c:cd:5a:0f:66:76:a2:f5:94:2f:f9:
f7:3e:4f:61:6a:fa:76:70:09:24:32:c9:95:29:94:
db:52:8a:7a:bc:79:0d:fd:c6:c7:30:06:66:3f:29:
0c:f0:24:54:f1:1e:c0:bd:cd:60:db:b8:56:3e:d9:
fc:c4:13:f6:7b:05:ca:46:48:7d:fc:1b:cb:00:00:
3a:df:cc:0d:51:9e:bd:09:05:ac:8e:8d:25:4c:de:
5c:56:96:02:ae:d7:a8:10:1f:e8:b8:64:a5:0e:99:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:51:43:2E:C1:BE:5C:98:9A:04:44:40:29:49:F0:45:FB:7A:61:24
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VFFDLsG-XJiaBERAKUnwRft6YSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.63.0/24
88.209.201.0/24
92.52.214.0/24
178.210.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6c:e4:26:75:b5:44:a0:72:e1:ab:48:a7:6c:be:19:d6:8d:
21:9d:4a:82:80:fa:84:c2:56:94:4f:4b:00:74:a6:e9:31:92:
3f:39:d5:00:ab:c2:94:3c:cf:0e:ab:0c:40:ec:e2:30:35:73:
47:18:58:80:15:4f:7f:b5:a0:eb:b7:b0:65:58:cd:4d:89:74:
b8:5c:e9:db:ba:11:73:38:bb:e7:ff:97:bc:ff:06:55:d5:a5:
ec:42:91:7a:10:5d:5b:50:f6:ea:74:f7:26:05:4f:27:1d:25:
4d:be:c1:ac:10:9b:fa:16:3d:0f:1c:fd:f6:be:b2:5d:79:db:
9f:cb:bb:43:a0:b4:d4:52:79:df:a1:80:09:ad:c9:d9:b1:32:
b9:8c:a6:62:f4:62:3e:18:bc:7d:99:51:4f:18:7e:7d:3c:b4:
51:24:1c:99:71:b6:c8:f9:5e:fd:02:ac:23:b0:30:e8:19:c8:
5a:14:51:be:14:9a:ce:17:32:77:41:6e:0a:6b:48:63:6e:2c:
ac:0f:de:69:4f:b4:96:c8:d8:b2:8b:2c:79:a1:e3:d7:2b:c8:
47:22:08:23:87:56:b7:01:60:cf:da:ad:b8:16:a1:6d:4b:70:
c1:fa:24:a1:af:b3:b0:8f:38:23:d9:49:d2:a5:dd:52:a6:39:
44:0c:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org