Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/vlnVFP9FP26XXBV4N5EOBqCeCKE.roa
File: vlnVFP9FP26XXBV4N5EOBqCeCKE.roa (raw, json)
Hash identifier: 2eA4EXYX6nI2F6mQGU0v0Dk0w/phsBgXO3P8mdC2Z9Q=
Subject key identifier: BE:59:D5:14:FF:45:3F:6E:97:5C:15:78:37:91:0E:06:A0:9E:08:A1
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 0566A91F
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/vlnVFP9FP26XXBV4N5EOBqCeCKE.roa
Signing time: Sat 01 Jan 2022 13:55:45 +0000
ROA not before: Sat 01 Jan 2022 13:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 193.222.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90614047 (0x566a91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Jan 1 13:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be59d514ff453f6e975c157837910e06a09e08a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:26:ea:51:d2:8d:68:b9:d4:45:ca:38:f3:f6:
81:ea:21:06:e2:ca:5f:f0:67:30:9f:62:8a:9c:fc:
75:b9:9f:f0:6f:9b:35:22:5d:6e:4a:e3:eb:16:d2:
76:58:ee:b3:69:59:69:fc:ec:ab:81:42:9e:95:06:
d9:33:82:49:ed:e7:33:42:65:08:00:07:06:dd:a2:
c7:a4:20:02:83:c0:78:31:a4:30:13:e6:77:32:c8:
3c:e7:7c:eb:d7:ed:a2:91:d1:56:3a:3c:ae:4a:58:
91:18:68:e3:64:c8:2e:a7:9f:ff:66:c8:78:27:69:
c2:ff:28:6f:1b:54:43:2b:80:28:cb:1f:04:dc:3e:
47:6c:df:95:7f:e8:bd:ec:e5:84:ea:ea:e0:95:54:
47:20:d1:22:92:94:7c:96:24:1b:1b:e9:e7:64:39:
55:ff:51:83:30:bd:bf:ed:49:97:4e:b7:cf:4c:02:
db:fe:99:40:f7:60:fb:fa:12:9b:cf:b0:be:14:b0:
39:ac:47:92:0c:99:ef:66:95:f2:ee:28:6f:b8:db:
3a:71:8b:aa:47:e9:a7:be:1d:f8:b7:0f:f9:e1:f0:
bf:07:4f:88:f1:b5:03:da:55:28:e1:6c:28:0d:ee:
2b:81:a3:ca:1d:07:2c:60:7b:d5:3a:69:c5:53:5e:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:D5:14:FF:45:3F:6E:97:5C:15:78:37:91:0E:06:A0:9E:08:A1
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/vlnVFP9FP26XXBV4N5EOBqCeCKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.138.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6d:7c:5b:72:24:03:0f:f2:03:60:f8:50:ea:ff:24:02:c3:
7a:70:78:5f:11:17:5f:75:ec:16:f4:ed:5f:b2:ec:ba:8c:c2:
e5:33:87:09:a7:2c:a5:a4:b8:ba:13:e2:7b:79:16:ab:47:c5:
9f:31:0d:24:3a:59:b5:f6:93:ec:76:7f:8a:39:92:07:f2:bf:
5e:33:bc:55:c8:94:c5:00:23:5c:a2:11:2e:07:17:10:0c:c6:
c3:da:1d:6b:e1:39:f3:01:25:dc:d8:04:94:f1:42:ae:9f:4a:
69:ad:ca:aa:6c:a6:4c:cb:bc:d5:e5:9c:42:b0:11:55:9a:c6:
ce:ab:b7:95:2e:3b:ad:52:64:7b:02:4c:ef:11:b9:90:9c:66:
68:55:e6:c1:50:ef:62:18:1e:bb:a6:60:e9:36:b3:c4:50:8f:
13:1f:8b:f9:2c:96:7c:34:ee:b6:75:35:af:ff:04:34:12:5c:
f0:46:d7:19:0a:bb:f0:62:3b:bb:55:0c:22:c1:50:8a:ef:f5:
35:db:9c:d1:46:b6:48:ac:62:29:3d:5b:33:4d:8c:5f:c0:ff:
b8:71:d8:a0:6b:8f:83:64:8f:1a:49:10:b5:4d:90:23:3b:00:
40:6b:87:86:5d:9c:e3:bf:dc:a0:77:a2:2d:ab:53:7e:d1:e1:
22:ec:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:51 2024 by rpki-client on console-ams.rpki-client.org