Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/fVyAgmNKiVfOaDnPUdd6_nWFbb4.roa
File: fVyAgmNKiVfOaDnPUdd6_nWFbb4.roa (raw, json)
Hash identifier: vsLfBePTB+ARItVNYobO44iskKh1rRGVPLs6gKDzhF0=
Subject key identifier: 7D:5C:80:82:63:4A:89:57:CE:68:39:CF:51:D7:7A:FE:75:85:6D:BE
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E1BACCD
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/fVyAgmNKiVfOaDnPUdd6_nWFbb4.roa
Signing time: Sat 01 Jan 2022 03:02:55 +0000
ROA not before: Sat 01 Jan 2022 03:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35831
IP address blocks: 94.31.54.0/24 maxlen: 24
213.152.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236694733 (0xe1baccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d5c8082634a8957ce6839cf51d77afe75856dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:db:81:f6:4f:6f:39:f7:68:b8:59:eb:39:
36:e0:09:fc:9d:b1:6c:d1:51:bc:58:26:0c:a0:a0:
b6:6c:83:19:3e:34:27:2a:7e:03:f4:48:6b:d9:78:
e1:ce:82:5f:22:5d:8b:82:98:cf:27:b8:d2:d2:dd:
04:39:31:a3:b8:e8:05:40:df:bf:f6:0d:e7:6d:ca:
97:3d:79:c1:cc:38:eb:c3:04:8f:62:94:a3:bd:6b:
fe:3d:02:e8:d6:bb:58:01:25:64:81:62:99:64:fe:
e2:7a:9a:dc:d2:dc:91:e1:48:ed:1a:86:40:89:d5:
c4:fd:66:16:91:14:60:8d:a0:25:6e:9e:b5:1a:80:
b0:81:e1:17:70:94:9f:0e:cc:66:ac:98:17:24:2c:
13:0b:c2:56:f3:7d:67:7e:cd:6d:0e:83:12:74:e6:
60:45:ca:2f:a4:c2:0f:37:40:c1:00:3d:52:a9:47:
f6:69:85:e7:a0:57:b5:ba:69:4e:eb:41:0f:55:64:
d1:ea:05:49:44:98:32:d9:27:18:f1:09:8b:7b:e7:
09:1b:e6:dd:0b:a6:f4:9e:08:20:cd:47:a2:7d:b5:
db:58:64:fa:f6:96:f0:6e:84:71:71:5f:27:45:c9:
33:b2:28:73:f0:68:a5:96:4c:28:fb:7d:4e:28:6e:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:80:82:63:4A:89:57:CE:68:39:CF:51:D7:7A:FE:75:85:6D:BE
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/fVyAgmNKiVfOaDnPUdd6_nWFbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.54.0/24
213.152.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d7:92:55:7b:dd:28:b8:f1:81:74:85:1f:a0:d9:ba:d0:fb:
b1:54:b6:37:18:ec:a2:a0:b3:9e:e3:c8:50:56:f3:49:9b:cb:
e1:28:d9:8e:75:b5:5d:04:b3:9b:87:8d:62:07:3f:fd:06:31:
af:96:b4:af:e8:35:b4:5e:f8:de:36:c9:ef:f8:01:99:9d:a1:
a4:1c:b8:a0:83:a7:36:ed:af:cd:aa:b9:89:c2:92:cc:80:42:
8b:d0:3e:d7:bf:d3:2a:06:5e:56:5f:24:60:19:76:6b:43:3d:
50:cc:02:cf:e7:f0:d1:f8:75:5a:92:5d:ab:a2:2c:36:67:bd:
fd:e9:f0:46:c5:6b:5a:16:7b:30:f9:33:50:9e:91:61:a7:8f:
e1:bd:ec:ba:9b:40:12:3d:63:b8:c0:4e:c7:34:16:ff:f6:70:
6e:d9:cd:4c:34:45:bc:70:a2:44:2d:ca:24:5d:02:71:58:a3:
81:73:5c:10:e6:27:a4:b1:ea:5f:f6:55:e8:ba:d8:6e:2a:bf:
2c:ee:9f:d6:de:c8:ff:02:2d:1d:41:a2:96:2c:98:82:fc:e7:
ed:f8:87:19:40:c5:37:ec:b1:c2:c7:89:87:50:75:bc:29:95:
35:88:3b:ab:85:41:67:37:bd:ae:38:38:da:3f:b0:b4:33:93:
25:ee:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org