Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/vtky1kEn5SOyPBXluN4cuBuguls.roa
File: vtky1kEn5SOyPBXluN4cuBuguls.roa (raw, json)
Hash identifier: POb4qVAqqY0wNVsy9YI5pCl1crh/9migoCEQktFp8uk=
Subject key identifier: BE:D9:32:D6:41:27:E5:23:B2:3C:15:E5:B8:DE:1C:B8:1B:A0:BA:5B
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01E8E0
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/vtky1kEn5SOyPBXluN4cuBuguls.roa
Signing time: Wed 12 Jan 2022 07:23:14 +0000
ROA not before: Wed 12 Jan 2022 07:23:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2.59.183.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
2.59.182.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
2.59.181.0/24 maxlen: 24
2.59.180.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
45.156.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125152 (0x1e8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 12 07:23:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bed932d64127e523b23c15e5b8de1cb81ba0ba5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:4b:29:6b:1b:d7:5b:d8:e4:09:e8:20:37:
09:e6:2f:fe:fa:b0:18:e5:ef:e5:e9:0a:22:46:ce:
aa:87:87:24:a4:8e:03:34:30:7e:38:0f:d2:00:e5:
72:71:f3:f3:4b:80:bb:82:06:83:7a:be:a2:d2:a2:
32:b7:6f:32:8b:3a:76:50:78:bc:51:cf:f4:9f:93:
ff:6f:2e:ef:f5:7f:71:c2:f7:63:f8:9e:99:0d:c8:
45:d9:c9:e3:44:d9:7a:f1:84:34:56:64:89:02:00:
ff:f7:49:80:74:12:dd:36:07:c2:f0:cb:9b:95:9b:
4f:ef:e2:1a:f8:3e:b5:76:19:d8:6c:3a:4c:24:ac:
68:d3:35:4d:55:1c:a9:34:e3:02:43:e9:d7:ec:00:
b5:85:21:1d:89:6a:9e:93:92:51:b8:c4:3a:95:97:
f1:f6:5c:cb:ae:0f:93:06:79:c0:46:f3:53:4e:42:
a1:c6:56:48:a0:7c:98:c1:ae:a8:4f:02:55:c7:c0:
38:47:89:d1:b7:8a:71:f4:8d:a4:a0:23:39:96:96:
6c:a2:97:8a:94:2a:6c:98:8e:59:fb:83:06:86:bc:
eb:b5:4b:e2:eb:24:a6:1a:f1:f5:fb:21:e4:8c:cd:
b7:ba:5a:b7:d3:ca:43:a6:bd:35:ca:86:c9:8f:31:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:32:D6:41:27:E5:23:B2:3C:15:E5:B8:DE:1C:B8:1B:A0:BA:5B
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/vtky1kEn5SOyPBXluN4cuBuguls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/22
45.156.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:68:11:53:02:6d:ef:b5:96:e5:16:f8:6b:42:95:21:c1:56:
99:7c:ca:53:83:ab:04:6d:44:82:d2:79:99:f5:5d:04:cd:6a:
4e:20:d3:4d:b1:c9:50:a7:2d:d8:3e:a4:60:d9:00:da:ee:24:
d3:46:ab:ff:f9:48:82:c8:60:f4:7a:af:5a:70:0b:86:1d:0b:
ee:d4:a9:45:19:43:4e:49:a6:b1:47:af:7a:88:be:b6:93:0f:
6c:ba:2f:a1:ab:96:61:fb:e9:72:6e:7a:df:4d:5c:90:35:75:
b0:ca:e9:66:5e:36:a5:f7:a3:cf:7f:4f:54:07:ed:1e:ab:6f:
4f:8e:ab:76:30:2d:13:c5:b3:7f:b5:de:18:17:b6:71:33:fe:
15:02:9e:76:76:a2:74:c1:a2:fc:6e:ea:6c:3c:6b:e6:ea:75:
c7:a9:be:c1:e7:b6:42:08:a3:9b:65:79:36:db:4d:57:61:1c:
86:8c:a4:7d:65:5e:2b:7a:b3:07:21:98:cb:95:e0:c4:e2:3b:
34:d7:27:45:d2:18:25:a1:00:8c:44:6d:c2:dc:c1:54:18:08:
f5:5e:e7:6d:1d:77:25:53:2e:94:8b:2a:d1:25:c7:b1:0d:3a:
07:0e:ab:f9:49:38:17:a0:60:3b:e7:87:35:66:4a:d6:d8:fd:
b0:7c:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-fra.rpki-client.org