Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/VrWv9z9008_53ZKg8MAM9Ls9-f8.roa
File: VrWv9z9008_53ZKg8MAM9Ls9-f8.roa (raw, json)
Hash identifier: HlGbtPjjuJwx2FlrAfxCXkrIyQ9fIU3gyMd+oxRBL8Y=
Subject key identifier: 56:B5:AF:F7:3F:74:D3:CF:F9:DD:92:A0:F0:C0:0C:F4:BB:3D:F9:FF
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0183F5916B0C3292659081784C9D5189F902
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/VrWv9z9008_53ZKg8MAM9Ls9-f8.roa
Signing time: Thu 20 Oct 2022 13:24:51 +0000
ROA not before: Thu 20 Oct 2022 13:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 185.90.220.0/22 maxlen: 24
83.229.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:91:6b:0c:32:92:65:90:81:78:4c:9d:51:89:f9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 20 13:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56b5aff73f74d3cff9dd92a0f0c00cf4bb3df9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:c6:cc:c4:55:82:13:a8:f0:37:21:5a:5c:
49:28:41:fb:1c:96:5f:bb:fd:00:9e:52:77:06:31:
f7:ab:38:d9:a6:08:fc:87:84:3b:af:79:49:d6:f9:
1c:52:2c:9b:94:d6:d8:a1:98:ee:fa:c9:8c:a8:60:
37:e8:ae:9c:3f:16:30:2a:13:9b:f1:3c:8f:d9:8e:
ef:6c:59:d1:53:bb:60:57:0c:4c:c7:eb:c6:60:e2:
b7:68:40:d5:10:74:a7:e1:2c:cc:a9:ef:7c:04:99:
75:19:8a:47:ef:4f:a7:12:de:7d:7b:82:5b:9a:1d:
b7:fb:a3:59:42:07:57:78:96:d5:03:83:54:0a:f0:
6a:93:c0:a3:40:e7:e5:af:d7:b1:2d:20:ad:70:ff:
af:68:19:6d:24:94:0c:a7:52:f7:8b:5a:e6:a5:13:
91:99:0b:eb:29:09:2e:17:1a:1c:dd:3c:d0:1a:2b:
dd:d9:ec:6f:9f:c7:6b:ac:e0:7b:0b:e0:c7:0d:3d:
29:50:dd:ef:28:be:c5:4a:93:0d:7d:50:3e:04:8e:
76:76:ab:2f:42:b4:75:5b:db:1a:ef:13:8b:d0:bc:
58:e1:59:d3:79:80:ac:6c:7b:fd:f8:bf:5a:2a:45:
8c:88:c4:b6:06:c6:93:d4:d9:b9:84:2a:04:39:3e:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:AF:F7:3F:74:D3:CF:F9:DD:92:A0:F0:C0:0C:F4:BB:3D:F9:FF
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/VrWv9z9008_53ZKg8MAM9Ls9-f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
Signature Algorithm: sha256WithRSAEncryption
55:44:1a:c4:aa:96:1b:df:76:13:76:d5:40:f7:ea:67:76:f7:
94:e9:c7:df:be:c2:9b:75:18:e0:55:77:e0:31:d1:e7:0f:bd:
70:a2:85:be:a9:ce:ad:8e:dc:6b:49:34:61:d4:a0:7a:63:4d:
2b:fc:8f:61:18:2a:59:b3:2e:e5:44:60:b4:1c:12:9c:93:aa:
f3:dc:51:5c:76:60:73:07:cc:ac:d5:61:8b:7f:bf:31:51:78:
22:32:b4:96:7a:b5:28:1a:d2:2d:c9:98:36:b1:ad:53:bb:f9:
da:c4:f4:67:68:1c:bb:3c:c6:ac:fd:f2:70:6f:d6:46:96:1a:
26:2b:ad:f0:3d:57:2e:dd:e4:81:fb:03:32:74:a0:88:23:6e:
39:f8:4a:f9:f8:64:db:fc:20:10:21:f3:0f:57:56:4c:52:fe:
b6:fc:88:ba:e8:cb:82:0a:68:b8:32:ec:f7:3a:55:45:43:93:
e2:5d:19:7f:60:e2:86:9f:66:ca:64:8a:3c:01:a3:3f:6f:47:
cf:1f:2e:2e:9e:73:e2:0a:ba:3f:81:1c:07:9f:71:71:b3:69:
7c:f4:69:b7:74:b5:7b:f8:12:e2:2e:72:05:6b:cb:50:01:3d:
3c:ea:2b:c0:01:4e:f2:9d:77:18:9e:5d:5c:59:ae:0d:cb:fc:
d2:87:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org