Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/VCNplSwdFCzJRAG79eX430NNxkE.roa
File: VCNplSwdFCzJRAG79eX430NNxkE.roa (raw, json)
Hash identifier: +6tvIZQFDPpuhPBjLrhZ154uE+TpHot+k409j5awVSk=
Subject key identifier: 54:23:69:95:2C:1D:14:2C:C9:44:01:BB:F5:E5:F8:DF:43:4D:C6:41
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 074133DE
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/VCNplSwdFCzJRAG79eX430NNxkE.roa
Signing time: Wed 09 Mar 2022 15:11:27 +0000
ROA not before: Wed 09 Mar 2022 15:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198887
IP address blocks: 5.56.8.0/22 maxlen: 24
5.83.125.0/24 maxlen: 24
5.83.124.0/24 maxlen: 24
5.83.127.0/24 maxlen: 24
5.83.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121713630 (0x74133de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Mar 9 15:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=542369952c1d142cc94401bbf5e5f8df434dc641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:c1:32:da:87:dd:9b:28:3a:a6:a0:77:16:
3d:ba:9e:7a:6f:95:b7:4e:da:5b:4b:84:6c:e2:0e:
45:7a:e2:50:7d:a8:07:9d:56:68:19:f8:11:3c:25:
31:af:d2:62:d6:19:e2:e0:cb:69:a9:27:c5:d7:27:
7c:d0:1a:9f:50:55:68:fc:42:c0:ac:03:19:6d:27:
5e:eb:72:a0:34:79:1e:f0:f8:d0:a8:3f:b4:99:81:
be:9d:62:b3:d4:14:5f:fd:a3:01:5b:72:fb:9e:34:
8b:6d:c4:34:5d:e5:46:3e:a3:5a:a0:6f:77:c5:5f:
e9:6d:2f:66:51:25:74:6a:2f:97:45:c3:79:6a:0a:
34:e9:c0:36:5c:34:10:dd:42:76:11:17:17:06:62:
07:97:46:4c:9d:e5:66:1b:e4:7d:2c:9a:b0:a3:fe:
0f:8c:27:4b:a0:96:56:30:8c:b4:ce:e7:c5:70:7a:
32:47:45:92:a2:28:8f:e6:39:a4:aa:3c:d3:35:7a:
11:7b:8c:0e:e9:14:ad:15:00:39:84:85:b7:19:dd:
1f:0d:23:ee:e7:ed:b0:5e:50:37:2c:91:05:9b:6a:
88:56:6e:34:9b:77:2e:75:a1:0f:56:cc:46:f9:e5:
67:28:7d:42:71:ba:07:ff:7f:da:b5:91:5f:d8:f9:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:69:95:2C:1D:14:2C:C9:44:01:BB:F5:E5:F8:DF:43:4D:C6:41
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/VCNplSwdFCzJRAG79eX430NNxkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/22
5.83.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:79:66:83:11:56:02:88:30:95:74:5f:c4:7b:a2:8b:9e:da:
90:39:28:12:fd:fd:e5:3e:ed:42:b9:12:ec:28:f8:35:4d:75:
3e:52:53:08:ff:23:52:8f:a5:ae:ad:71:3e:61:ba:ae:98:d3:
5b:19:3e:89:93:ea:c4:6a:e2:bf:c9:3c:6e:ca:bb:c4:0a:03:
25:c6:1b:f3:dd:55:84:85:ec:80:37:fc:4f:a5:46:3d:d4:7e:
d8:bd:73:e2:aa:be:84:ee:ee:4f:9b:79:96:69:d0:15:ab:45:
1d:c6:69:1d:0f:96:bd:e0:79:2a:e8:e7:2e:27:17:7b:b6:61:
f1:60:60:01:e8:e0:af:22:ed:aa:b7:ab:30:2d:8c:f7:af:8b:
eb:3d:ea:a3:cf:94:70:99:fe:c8:00:b9:f2:d6:63:e1:0e:d7:
be:e9:bd:ff:bc:aa:09:45:e3:4a:54:d1:ae:1f:c6:5e:7d:c9:
ee:16:84:94:84:bb:18:9c:1e:2f:53:97:5f:73:24:03:97:ad:
f5:a5:90:83:c3:eb:80:80:66:aa:47:ce:a0:f4:d8:69:0a:88:
e7:74:2e:29:0d:83:95:fa:ef:b0:f3:60:09:80:c7:bd:04:1d:
c9:67:6f:a2:00:39:c5:96:55:c8:d1:e7:0c:5b:01:fe:f1:36:
fd:13:77:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org