Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/VBU7rARG_weMT9z7AB0x4UB4uWI.roa
File: VBU7rARG_weMT9z7AB0x4UB4uWI.roa (raw, json)
Hash identifier: LrKuDQoneu8I4ND9hn8qjSHZKCxdj3Y4Zpsggh23/ns=
Subject key identifier: 54:15:3B:AC:04:46:FF:07:8C:4F:DC:FB:00:1D:31:E1:40:78:B9:62
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 1698D44B
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/VBU7rARG_weMT9z7AB0x4UB4uWI.roa
Signing time: Sat 01 Jan 2022 02:57:56 +0000
ROA not before: Sat 01 Jan 2022 02:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57653
IP address blocks: 109.69.232.0/24 maxlen: 24
109.69.232.0/21 maxlen: 21
109.69.233.0/24 maxlen: 24
109.69.239.0/24 maxlen: 24
109.69.238.0/24 maxlen: 24
109.69.234.0/24 maxlen: 24
109.69.235.0/24 maxlen: 24
109.69.237.0/24 maxlen: 24
109.69.236.0/24 maxlen: 24
185.191.85.0/24 maxlen: 24
185.191.84.0/22 maxlen: 22
185.191.84.0/24 maxlen: 24
185.191.87.0/24 maxlen: 24
185.191.86.0/24 maxlen: 24
2a00:1ba8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379114571 (0x1698d44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: Jan 1 02:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54153bac0446ff078c4fdcfb001d31e14078b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:2f:63:c4:7b:25:bf:bb:76:25:05:80:06:
60:11:bf:da:97:d9:df:18:c2:5d:b4:b0:59:59:10:
e3:40:b0:63:21:a8:4f:94:11:de:32:51:62:1e:06:
5b:27:e4:71:79:e2:a4:0b:aa:da:ba:fa:e7:4f:31:
9e:9d:6d:fd:e8:91:45:9e:dc:e8:90:68:cd:89:2b:
38:69:dc:9f:ba:56:76:12:df:1c:b9:eb:de:cf:c0:
86:9f:a5:d6:ea:42:a2:62:09:cd:5d:f9:fa:d4:54:
3c:16:39:36:6e:cb:3e:6b:e8:d0:91:e2:47:c9:48:
62:e7:ba:24:f1:87:28:88:9f:09:e8:00:09:a6:93:
0a:e0:25:1c:05:4c:b9:c8:b1:9c:cf:f3:cc:bd:8e:
54:fe:5c:82:fb:7c:74:1d:3a:cc:83:12:4a:df:55:
9e:d5:67:5e:a9:65:8b:06:9f:ec:bc:71:2c:9c:f5:
2d:8c:ab:8b:ba:68:31:e7:20:34:8f:a1:9a:6b:87:
21:2a:3e:42:0f:6a:87:9b:f4:88:82:b4:c0:7d:d4:
e6:28:bd:1b:8a:b1:b4:af:44:db:95:f4:f7:b0:91:
ed:81:bf:ec:08:79:2e:c7:71:8b:8c:11:69:60:93:
b1:f0:a5:d7:9d:59:bc:a5:f2:34:76:0a:a3:da:53:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:3B:AC:04:46:FF:07:8C:4F:DC:FB:00:1D:31:E1:40:78:B9:62
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/VBU7rARG_weMT9z7AB0x4UB4uWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.232.0/21
185.191.84.0/22
IPv6:
2a00:1ba8::/32
Signature Algorithm: sha256WithRSAEncryption
52:14:00:d9:14:23:4f:39:e7:4d:37:6c:a6:17:cb:aa:e7:a9:
5c:ce:54:a4:1d:60:58:49:a4:88:52:ca:b8:6e:1a:ac:6c:06:
85:38:fd:0b:69:3b:f2:8e:20:0f:b9:4a:0b:fe:c9:e6:5f:ff:
98:8b:af:59:42:c5:bb:72:d5:96:7d:e9:e7:40:a6:d5:c8:5c:
cb:22:02:6e:26:a9:5d:7d:64:b9:0a:ea:93:31:60:26:b8:50:
ce:81:09:75:3a:11:d0:8f:09:16:d1:e6:71:d9:9b:24:3d:50:
d0:c1:1f:c0:09:d9:ef:99:6b:85:25:28:7b:fd:06:37:2e:c6:
52:13:67:47:9d:8c:ba:56:8a:da:aa:6c:8c:9f:29:de:c6:0a:
3b:77:a1:7d:7b:8f:7b:ac:f4:16:fa:e6:02:e5:00:21:3e:c7:
5f:a2:66:1f:1e:53:af:f5:14:8f:e2:ab:7b:49:c0:6d:ea:f0:
b6:3d:05:de:8d:32:77:23:54:a7:e9:b1:c1:52:8b:79:fa:15:
d1:06:70:78:c2:11:31:7a:b5:97:35:51:5e:f7:7e:0f:38:ed:
b3:33:80:21:f9:6b:50:b4:c2:c4:38:f9:a2:66:be:87:63:86:
18:0c:32:c9:d5:fb:91:f0:e6:c9:33:40:a2:b3:3c:a9:79:80:
0e:03:9b:b3
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEFpjUSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NzUxNzU5YmI5MmNiYTU1MjA1MzY5NDVlZDFiM2ZhNWFkMTUxYjY1MB4XDTIyMDEw
MTAyNTc1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQxNTNiYWMwNDQ2
ZmYwNzhjNGZkY2ZiMDAxZDMxZTE0MDc4Yjk2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOZQL2PEeyW/u3YlBYAGYBG/2pfZ3xjCXbSwWVkQ40CwYyGo
T5QR3jJRYh4GWyfkcXnipAuq2rr6508xnp1t/eiRRZ7c6JBozYkrOGncn7pWdhLf
HLnr3s/Ahp+l1upComIJzV35+tRUPBY5Nm7LPmvo0JHiR8lIYue6JPGHKIifCegA
CaaTCuAlHAVMucixnM/zzL2OVP5cgvt8dB06zIMSSt9VntVnXqlliwaf7LxxLJz1
LYyri7poMecgNI+hmmuHISo+Qg9qh5v0iIK0wH3U5ii9G4qxtK9E25X097CR7YG/
7Ah5Lsdxi4wRaWCTsfCl151ZvKXyNHYKo9pTRE0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRUFTusBEb/B4xP3PsAHTHhQHi5YjAfBgNVHSMEGDAWgBSHUXWbuSy6VSBT
aUXtGz+lrRUbZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2gxRjFtN2tzdWxVZ1UybEY3UnNfcGEwVkcyVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvODYyNTI1LWY2M2YtNDY1My1hM2E2LWU4OWY1MWNhNjg0MC8x
L1ZCVTdyQVJHX3dlTVQ5ejdBQjB4NFVCNHVXSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
ODYyNTI1LWY2M2YtNDY1My1hM2E2LWU4OWY1MWNhNjg0MC8xL2gxRjFtN2tzdWxV
Z1UybEY3UnNfcGEwVkcyVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA21F6AMEArm/VDANBAIAAjAHAwUA
KgAbqDANBgkqhkiG9w0BAQsFAAOCAQEAUhQA2RQjTznnTTdsphfLquepXM5UpB1g
WEmkiFLKuG4arGwGhTj9C2k78o4gD7lKC/7J5l//mIuvWULFu3LVln3p50Cm1chc
yyICbiapXX1kuQrqkzFgJrhQzoEJdToR0I8JFtHmcdmbJD1Q0MEfwAnZ75lrhSUo
e/0GNy7GUhNnR52MulaK2qpsjJ8p3sYKO3ehfXuPe6z0FvrmAuUAIT7HX6JmHx5T
r/UUj+Kre0nAberwtj0F3o0ydyNUp+mxwVKLefoV0QZweMIRMXq1lzVRXvd+Dzjt
szOAIflrULTCxDj5oma+h2OGGAwyydX7kfDmyTNAorM8qXmADgObsw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net