Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/VtktASSxxBi2fmv1u5dm_RcbLkE.roa
File: VtktASSxxBi2fmv1u5dm_RcbLkE.roa (raw, json)
Hash identifier: pGxKK5VBakx29sWDfbgoCSoQz8ulZW4Oufjrt/316lI=
Subject key identifier: 56:D9:2D:01:24:B1:C4:18:B6:7E:6B:F5:BB:97:66:FD:17:1B:2E:41
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 0183C50C3A195C2E13943E3957AA0811A250
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/VtktASSxxBi2fmv1u5dm_RcbLkE.roa
Signing time: Tue 11 Oct 2022 03:17:36 +0000
ROA not before: Tue 11 Oct 2022 03:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47165
IP address blocks: 185.13.176.0/22 maxlen: 22
62.182.192.0/21 maxlen: 21
178.74.64.0/18 maxlen: 18
94.137.16.0/20 maxlen: 20
94.137.32.0/20 maxlen: 20
94.137.48.0/20 maxlen: 20
176.62.64.0/18 maxlen: 18
109.120.0.0/20 maxlen: 20
109.120.16.0/20 maxlen: 20
46.233.192.0/18 maxlen: 18
217.25.208.0/20 maxlen: 20
109.120.32.0/20 maxlen: 20
94.137.0.0/20 maxlen: 20
109.120.48.0/20 maxlen: 20
2a02:ddc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:0c:3a:19:5c:2e:13:94:3e:39:57:aa:08:11:a2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Oct 11 03:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56d92d0124b1c418b67e6bf5bb9766fd171b2e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:dc:89:06:01:cd:df:4d:8c:16:a8:ee:c4:
44:fa:5f:2d:9c:00:f2:b8:61:c7:28:84:03:fa:a0:
d9:e3:1b:4e:53:95:0a:ee:d7:fd:6d:6e:79:8a:02:
01:97:76:00:03:3d:4c:23:a9:88:04:fc:20:b0:d1:
c1:71:73:a3:37:6b:58:fb:e4:3a:27:2d:3f:9b:8e:
a8:d6:64:fc:6c:b3:f6:26:c3:f3:62:3a:6b:b3:a4:
37:dc:66:04:e1:50:19:de:86:90:a6:ed:15:ad:a9:
77:c4:fe:70:29:15:88:ec:62:37:12:eb:bd:dd:62:
c4:9d:fc:52:19:06:97:09:74:d2:78:e7:4a:ef:73:
20:f0:65:41:14:e9:b1:86:99:e7:41:ec:dc:45:84:
0b:d3:5a:62:98:51:b7:44:f4:ed:60:20:72:d0:f8:
87:fb:d7:bd:77:6f:bd:00:67:6a:e2:f2:3f:7c:53:
6e:fb:05:20:98:19:36:2a:79:9c:5c:48:ff:71:ad:
ed:67:68:e1:a2:1f:67:76:60:d7:6f:02:c2:2a:42:
fc:18:2d:a6:41:90:5a:8d:50:42:8a:c8:c9:69:36:
fe:78:ad:f3:3d:f0:9d:4a:c9:54:de:88:13:76:b5:
ea:70:14:02:d3:8a:3c:98:02:77:ba:df:48:36:7a:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D9:2D:01:24:B1:C4:18:B6:7E:6B:F5:BB:97:66:FD:17:1B:2E:41
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/VtktASSxxBi2fmv1u5dm_RcbLkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.192.0/18
62.182.192.0/21
94.137.0.0/18
109.120.0.0/18
176.62.64.0/18
178.74.64.0/18
185.13.176.0/22
217.25.208.0/20
IPv6:
2a02:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:5c:2f:ae:63:55:ef:ea:18:07:84:7a:b3:df:b6:90:41:20:
df:26:cf:0e:ef:ef:bc:4b:7f:be:b3:82:5f:0a:5d:40:dc:6f:
2b:d3:c0:98:da:58:6c:be:83:78:e5:41:95:14:67:18:d9:f8:
77:f0:54:4c:9f:3f:9f:b9:80:fa:56:93:cb:a2:c5:e6:2b:e4:
4f:44:29:6b:c3:08:c7:ef:d8:8e:b5:73:73:71:db:b3:f6:2b:
19:50:94:14:72:04:f3:58:16:80:b2:e7:af:2d:c2:b3:80:53:
7a:d1:2b:6a:0e:7f:63:1c:e6:fa:82:12:6f:f3:d7:0c:e4:f5:
a4:98:5a:c4:9b:bb:30:90:0b:d3:ce:0f:de:eb:ad:05:71:c3:
4f:1e:d0:44:2b:f0:e8:57:68:cd:17:87:a9:e5:e5:a5:be:f5:
4e:34:2a:89:c7:7c:f3:69:dd:36:59:b9:be:02:2d:df:35:d4:
ed:72:e9:5a:cb:aa:ee:a6:bf:45:ee:7c:21:ee:75:05:27:7f:
6c:38:a1:cb:af:86:60:95:3d:06:42:ef:67:9a:38:29:73:8b:
08:66:9e:eb:4e:18:1d:a8:b8:53:61:49:f7:ed:e3:9f:09:05:
b5:f4:21:a9:fa:c0:3a:31:cc:99:ed:57:4f:c3:b3:df:0f:6e:
2e:52:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net