Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VPaLDpF2DJahKFhO1pX194q-YEg.roa
File: VPaLDpF2DJahKFhO1pX194q-YEg.roa (raw, json)
Hash identifier: G6lImkhcIb4XfMlz8rqrZ8qAsymaH+GthlsNeGEadIw=
Subject key identifier: 54:F6:8B:0E:91:76:0C:96:A1:28:58:4E:D6:95:F5:F7:8A:BE:60:48
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17F4243D
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VPaLDpF2DJahKFhO1pX194q-YEg.roa
Signing time: Sat 01 Jan 2022 04:00:02 +0000
ROA not before: Sat 01 Jan 2022 04:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44718
IP address blocks: 83.228.87.0/24 maxlen: 24
83.228.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401876029 (0x17f4243d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54f68b0e91760c96a128584ed695f5f78abe6048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:9b:e1:33:8b:e2:81:e2:b7:8e:d3:75:57:
43:3a:0d:45:63:82:85:48:4e:64:a5:07:1d:73:8f:
8d:eb:98:3d:ae:f6:25:fd:72:42:e7:ee:ad:93:27:
59:b7:e9:4a:21:91:bb:0f:1c:d9:5f:74:62:db:4a:
59:2b:82:3f:08:b4:ec:5a:0b:28:f0:9a:57:fc:55:
30:6c:7e:42:a3:07:80:71:ee:ba:07:f8:b4:f4:4f:
47:85:47:da:f3:5a:57:19:b8:aa:4c:fd:e0:83:8b:
58:90:67:f8:9c:66:c0:a3:8a:49:41:80:04:c3:64:
d1:09:37:89:b7:a9:fd:06:20:58:d5:fb:69:36:c0:
53:81:0c:7c:75:52:93:5e:17:aa:0b:0c:f8:9a:46:
44:7f:e7:e6:f0:d2:d3:0e:73:87:1c:57:6a:48:f9:
b6:24:a7:6f:d5:51:e3:c6:01:0e:ed:6a:f1:15:d3:
d2:eb:7d:f6:b9:4f:c0:bd:4d:f3:00:38:c3:13:31:
f3:19:7f:33:37:cc:a4:10:28:54:8f:d8:30:d8:8e:
c7:66:f1:3a:9a:67:16:36:cd:08:d1:60:c7:10:59:
d1:cb:9f:ce:dd:79:6d:0b:18:fb:13:64:2a:dd:6e:
6c:94:43:05:ba:d7:f9:25:83:c5:a8:48:62:8c:26:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:8B:0E:91:76:0C:96:A1:28:58:4E:D6:95:F5:F7:8A:BE:60:48
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VPaLDpF2DJahKFhO1pX194q-YEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:b2:33:f2:03:07:91:fc:ca:36:39:2b:c4:fb:08:9e:36:25:
50:55:0a:58:47:ec:8d:6f:2e:ba:76:13:07:31:d6:6b:b6:6f:
0d:2a:fe:67:6f:f2:dc:37:d5:54:72:aa:5a:84:14:67:c5:ed:
b8:f1:76:fe:ac:95:fd:e5:ba:49:fa:6d:ee:84:52:41:7d:db:
de:1f:bf:a0:9c:d7:b4:03:c7:94:dc:f8:a4:cd:47:89:99:60:
ba:fe:f0:3d:f7:16:cc:e1:e1:e2:59:d1:15:3e:1d:11:cb:b5:
39:ac:bd:ef:18:c7:c4:08:56:52:04:67:3f:e1:e9:c3:c3:42:
9a:12:94:cb:6b:63:a2:02:e7:be:a4:34:a9:ff:34:02:8f:8b:
20:13:97:78:5c:55:f4:1b:0a:20:9b:cf:21:c5:3c:e9:d8:af:
6d:38:0e:29:ec:86:05:bd:58:c0:ae:91:7c:d1:73:97:96:89:
c8:27:17:3e:67:96:42:c3:ec:46:f6:86:42:c1:ba:be:b3:7e:
02:cb:2a:1e:10:4c:32:03:91:01:ff:90:7b:49:5e:19:c6:ae:
a6:85:5d:21:f3:ee:34:2f:d0:01:4f:8c:d2:cb:bc:31:1b:25:
e4:de:2f:0e:22:db:02:e9:76:4d:74:80:e1:bd:e6:22:fa:64:
24:a5:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org