Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/vnCMAWQLDDmYQ3dRlwnh_2XehyA.roa
File: vnCMAWQLDDmYQ3dRlwnh_2XehyA.roa (raw, json)
Hash identifier: ZmBjMZG+OYtCSDFwS1cTl1n30ND6i2ap6MqMIx9Cg8M=
Subject key identifier: BE:70:8C:01:64:0B:0C:39:98:43:77:51:97:09:E1:FF:65:DE:87:20
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 052E1F8A
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/vnCMAWQLDDmYQ3dRlwnh_2XehyA.roa
Signing time: Sat 01 Jan 2022 13:56:44 +0000
ROA not before: Sat 01 Jan 2022 13:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6696
IP address blocks: 91.216.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86908810 (0x52e1f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jan 1 13:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be708c01640b0c39984377519709e1ff65de8720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:5c:21:23:00:5f:02:79:66:6d:9a:3a:03:
c2:52:4f:10:08:7f:98:bd:2d:7b:a7:de:62:a4:cd:
ec:a6:90:c6:8e:f5:de:67:64:89:eb:fc:47:f0:6d:
eb:48:2f:be:20:0e:c3:e1:9f:69:b5:4c:59:41:53:
c9:50:ca:be:33:80:6c:18:b5:15:d8:3d:ba:de:73:
c8:a2:71:d4:91:c6:6a:60:66:48:4d:8c:44:7a:37:
24:17:75:b0:29:48:49:77:86:1e:66:59:2e:3c:9e:
a0:ea:e8:bd:b3:08:f7:44:36:7c:fd:e9:79:63:6a:
3f:0f:15:c1:f5:30:45:d1:c7:f5:4c:78:4e:aa:5f:
b7:68:69:f9:3f:ec:83:f3:6d:dc:0f:96:d6:0b:5e:
34:b2:6a:05:f3:c1:a7:05:6d:c6:1c:7f:08:e4:d1:
ca:0c:e0:42:14:6c:eb:a6:9e:d7:05:68:01:f6:c7:
80:62:a6:4e:47:5e:e7:b9:13:1c:d5:0a:0d:58:a5:
02:d9:d4:49:9f:cd:fd:76:54:28:67:b1:55:0a:b9:
41:98:bd:88:bf:43:20:32:1d:35:de:39:b6:df:b5:
d8:8e:28:bb:83:54:ca:78:eb:d7:53:ac:ee:5e:9e:
e6:08:f8:27:12:32:a4:ec:b2:c3:ef:31:9a:f0:91:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:8C:01:64:0B:0C:39:98:43:77:51:97:09:E1:FF:65:DE:87:20
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/vnCMAWQLDDmYQ3dRlwnh_2XehyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a8:bd:44:04:40:ee:67:47:41:56:25:3b:e2:07:b2:d5:15:
34:72:4b:15:f5:fd:b9:5b:56:37:f2:16:7c:6e:eb:94:4a:f2:
35:22:6b:6d:12:b1:c4:9a:dd:1c:7d:d5:48:41:b8:49:82:f8:
99:14:c3:0c:61:be:c6:4f:f4:eb:f3:c4:3c:ac:75:ef:29:77:
17:db:36:27:2a:cd:75:8d:0e:6a:40:9e:00:7f:bb:e0:2d:44:
48:6b:0c:f4:9a:30:01:94:eb:7a:4b:67:78:7b:6b:82:8a:22:
22:5a:d8:de:e8:43:11:80:a8:d4:48:85:20:8c:48:90:0e:d3:
e1:40:6e:d6:19:b3:f3:70:64:8b:0e:28:20:d7:e9:7b:e1:7c:
bb:12:83:f3:da:ec:5a:21:9e:f2:bd:8f:5a:1e:e6:9f:2f:01:
0b:6c:5e:d5:92:c7:54:84:a6:37:ca:fb:8c:38:bc:fc:89:f5:
9c:f6:70:34:a8:4a:b7:c7:b4:c6:46:11:9f:e7:84:ae:64:0f:
55:33:5f:a7:0e:c0:11:17:e0:1c:2c:7b:6c:8c:d0:4b:de:ba:
e1:56:02:95:6f:f8:f7:92:61:43:8b:e3:da:5e:ed:93:9e:79:
d5:c8:20:91:07:77:5b:0d:23:42:bb:14:e0:26:92:3d:92:d6:
97:dc:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org