Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/vmXl-g13tRSjbVw_e-zHLl9u_CQ.roa
File: vmXl-g13tRSjbVw_e-zHLl9u_CQ.roa (raw, json)
Hash identifier: eP0ZNGkHg1F0SLSTjvEVcZWQQQAK3cTcjkpj5Vb1ThE=
Subject key identifier: BE:65:E5:FA:0D:77:B5:14:A3:6D:5C:3F:7B:EC:C7:2E:5F:6E:FC:24
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 37F4D1FB
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/vmXl-g13tRSjbVw_e-zHLl9u_CQ.roa
Signing time: Sat 01 Jan 2022 03:53:53 +0000
ROA not before: Sat 01 Jan 2022 03:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39263
IP address blocks: 185.79.144.0/22 maxlen: 22
93.115.212.0/22 maxlen: 22
188.247.172.0/22 maxlen: 22
80.94.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938791419 (0x37f4d1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jan 1 03:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be65e5fa0d77b514a36d5c3f7becc72e5f6efc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:8c:9f:e9:d3:f8:02:dd:0d:ef:2c:ff:be:
11:5c:11:12:72:fc:07:55:1c:4b:70:d9:1f:66:f7:
2c:4f:77:48:5e:8c:46:da:40:d6:90:ed:4a:a1:69:
af:03:ed:4f:f8:f5:ed:45:69:ae:24:f3:b9:f9:47:
88:d0:27:19:df:69:b6:70:48:d6:6a:42:90:e9:23:
a4:24:d6:25:91:0f:2d:ec:66:84:71:b6:0d:c9:fd:
58:12:2a:8f:ba:30:9d:ed:bf:98:72:50:d8:17:f7:
fc:0c:7e:cd:f1:59:49:93:77:1a:c4:54:8a:5c:f2:
f8:e6:57:1e:e5:05:a1:66:67:05:44:01:fa:15:ba:
cc:d8:31:ed:24:79:0a:6d:0c:24:78:06:bf:47:3e:
e3:7b:db:e4:37:e1:6a:a1:75:a5:49:2b:3b:0c:46:
65:94:fd:a8:59:04:8f:c9:25:13:73:2a:a8:92:4d:
44:7b:3a:07:56:1f:7b:4a:5b:55:5a:36:6a:60:34:
23:03:2c:54:c4:72:be:b2:b7:75:f6:c6:d5:be:70:
50:01:05:e9:c1:c4:9b:07:aa:fa:68:f7:fa:d7:d2:
de:d3:b1:7a:0d:48:be:44:24:84:fe:26:68:6e:1a:
fc:da:a8:e7:1f:a2:83:31:16:eb:a1:cc:17:3d:1b:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:E5:FA:0D:77:B5:14:A3:6D:5C:3F:7B:EC:C7:2E:5F:6E:FC:24
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/vmXl-g13tRSjbVw_e-zHLl9u_CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.0.0/20
93.115.212.0/22
185.79.144.0/22
188.247.172.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ae:64:54:8b:dd:ad:16:6c:0f:c8:df:fc:fc:82:e4:1f:46:
6d:da:0d:b8:8c:e3:bd:82:b1:59:a9:57:16:78:c2:40:31:fe:
36:ea:6a:7f:9a:93:8d:57:cd:df:6c:88:46:be:45:29:9c:76:
5e:1d:56:d2:e4:7b:16:ae:d8:ba:69:ba:7e:03:bf:cb:28:3f:
f6:52:7c:c1:7c:fc:e7:f5:2e:8b:b9:f6:20:87:f6:aa:a9:ad:
36:f9:6d:2a:f4:08:54:27:d0:d9:a5:a4:6b:6f:34:39:e5:3a:
5c:02:b3:81:e9:fe:ee:26:aa:54:34:ca:44:29:15:c2:ce:09:
40:ab:ce:52:c9:1a:14:42:0f:10:ca:17:14:33:8f:3e:20:c2:
06:64:0a:f6:a9:a0:52:45:a2:3a:37:07:d0:b3:18:59:99:aa:
aa:2b:84:15:f3:a2:2d:62:7e:9a:ec:9d:c8:d9:c2:43:0d:aa:
7b:aa:d0:ae:15:de:16:2e:fa:e6:60:24:1b:86:f5:96:e8:fd:
af:3f:4f:8d:fb:fd:f3:c8:b2:ba:c3:c6:dc:e3:fe:21:25:e9:
80:60:89:40:74:ff:2e:4e:7e:cf:df:cb:72:e8:a2:13:38:3f:
27:f6:77:3a:c1:35:8d:75:fc:b9:38:42:de:5c:d2:04:7c:0e:
ae:17:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:09 2024 by rpki-client on console-ams.rpki-client.org