Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/VtIZ67VbKyB6aZ9MM_u74FJjMQI.roa
File: VtIZ67VbKyB6aZ9MM_u74FJjMQI.roa (raw, json)
Hash identifier: k1T5NYzUFtL3vGpLQs15/ArqXGZGw1Ncj0Cfd89oVnY=
Subject key identifier: 56:D2:19:EB:B5:5B:2B:20:7A:69:9F:4C:33:FB:BB:E0:52:63:31:02
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0D71C11D
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/VtIZ67VbKyB6aZ9MM_u74FJjMQI.roa
Signing time: Mon 11 Apr 2022 14:03:31 +0000
ROA not before: Mon 11 Apr 2022 14:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6848
IP address blocks: 195.162.192.0/19 maxlen: 19
212.76.224.0/19 maxlen: 19
78.29.192.0/18 maxlen: 18
213.132.128.0/19 maxlen: 19
81.82.0.0/15 maxlen: 15
195.16.0.0/19 maxlen: 19
141.134.0.0/15 maxlen: 15
46.253.160.0/20 maxlen: 20
62.205.64.0/18 maxlen: 18
185.30.52.0/22 maxlen: 22
78.20.0.0/14 maxlen: 14
178.116.0.0/14 maxlen: 14
5.23.128.0/17 maxlen: 17
188.95.146.0/23 maxlen: 23
212.88.224.0/19 maxlen: 19
85.28.64.0/18 maxlen: 18
84.192.0.0/13 maxlen: 13
83.217.128.0/19 maxlen: 19
213.214.32.0/19 maxlen: 19
213.251.64.0/18 maxlen: 18
213.224.0.0/16 maxlen: 16
217.168.120.0/21 maxlen: 21
212.123.0.0/19 maxlen: 19
82.143.64.0/18 maxlen: 18
94.224.0.0/14 maxlen: 14
213.118.0.0/15 maxlen: 15
81.164.0.0/15 maxlen: 15
195.130.128.0/19 maxlen: 19
188.44.64.0/19 maxlen: 19
185.248.41.0/24 maxlen: 24
185.248.40.0/22 maxlen: 22
2a02:1800::/24 maxlen: 24
2a02:1800:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225558813 (0xd71c11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Apr 11 14:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56d219ebb55b2b207a699f4c33fbbbe052633102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:e6:f2:e0:d8:d0:53:dc:44:21:a4:7a:d7:
45:88:54:10:25:53:1a:13:29:83:b1:55:3b:6f:cc:
b0:37:9b:81:c9:77:70:5c:7e:5a:a7:b9:f4:c1:f1:
96:f3:e0:6c:45:fa:38:b0:fd:4a:9e:5d:9b:ac:0e:
90:b7:31:79:2e:d3:81:68:0c:a3:bc:34:a8:17:b2:
b5:a2:ee:51:5d:67:ae:e5:c1:80:26:06:87:20:10:
45:b8:9f:48:b6:23:eb:f1:40:c8:81:df:b9:86:1e:
8c:ec:0c:4a:b0:5d:7f:1b:33:ba:f9:6e:56:da:c0:
3a:15:ad:ca:69:52:c1:1e:9a:13:79:7c:99:5c:01:
5a:30:fc:63:3f:07:fe:29:d8:4c:17:0c:7d:8e:89:
e6:47:f6:3c:de:11:85:4b:6c:0b:bb:8e:fc:27:ce:
d7:49:05:28:41:2d:db:37:f0:0f:94:e9:2c:b0:db:
84:5c:1f:9c:ab:d1:86:bb:45:72:59:e1:3a:68:af:
73:e0:6e:91:eb:16:ca:b2:0e:93:ac:cf:8b:11:f6:
ff:97:26:f2:f2:2b:f0:f4:47:6c:93:cd:8c:50:7d:
c4:88:4c:c7:8f:9b:f1:30:87:34:86:10:9f:c6:12:
81:24:38:1c:ef:a7:4b:cf:b2:f3:a4:83:e2:b8:23:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:19:EB:B5:5B:2B:20:7A:69:9F:4C:33:FB:BB:E0:52:63:31:02
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/VtIZ67VbKyB6aZ9MM_u74FJjMQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.128.0/17
46.253.160.0/20
62.205.64.0/18
78.20.0.0/14
78.29.192.0/18
81.82.0.0/15
81.164.0.0/15
82.143.64.0/18
83.217.128.0/19
84.192.0.0/13
85.28.64.0/18
94.224.0.0/14
141.134.0.0/15
178.116.0.0/14
185.30.52.0/22
185.248.40.0/22
188.44.64.0/19
188.95.146.0/23
195.16.0.0/19
195.130.128.0/19
195.162.192.0/19
212.76.224.0/19
212.88.224.0/19
212.123.0.0/19
213.118.0.0/15
213.132.128.0/19
213.214.32.0/19
213.224.0.0/16
213.251.64.0/18
217.168.120.0/21
IPv6:
2a02:1800::/24
Signature Algorithm: sha256WithRSAEncryption
59:2f:a6:72:47:a6:f4:dc:7b:45:e9:90:67:b1:18:c9:b5:f4:
11:b3:f3:ab:57:11:a3:ad:07:68:4c:d7:67:7a:9a:0e:30:dc:
eb:ca:58:05:b1:5b:bc:c1:65:1d:06:48:54:ff:1c:94:18:a4:
f5:7a:30:cb:7d:7e:e3:45:b4:b4:66:ce:9a:4e:fa:f6:63:96:
a4:55:cc:70:70:65:a7:be:3e:4b:57:7d:3d:78:55:39:05:d3:
02:95:47:37:48:e6:c6:28:6b:51:4d:b9:b2:dd:b1:7a:cf:62:
4a:53:ab:61:d2:8e:8c:91:fe:f7:99:70:1a:20:d4:5b:88:62:
a3:78:28:a8:52:5f:31:9c:d0:8e:0e:6f:15:11:bd:43:50:21:
f0:d7:6b:ec:c9:5e:f0:9f:93:2a:1a:5f:eb:8b:71:4d:d8:e6:
c7:6d:25:dd:44:ad:cb:f2:52:35:26:e9:f3:0e:98:5e:47:0e:
7a:d7:85:f3:19:56:de:3c:95:dd:f5:5f:19:ed:bd:db:f3:48:
46:18:b0:41:17:df:05:e7:22:68:ac:26:70:98:5d:8c:b8:86:
7d:d8:0c:3f:7f:ca:5e:fe:92:90:96:e1:26:9b:f9:9e:90:fc:
d7:80:32:0d:eb:d1:de:ff:d0:15:7b:7c:f2:e2:8c:a8:8f:3d:
65:03:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:30 2024 by rpki-client on console-ams.rpki-client.org