Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/vMJGKXKzZVDONJ8wHukKbKdxkLY.roa
File: vMJGKXKzZVDONJ8wHukKbKdxkLY.roa (raw, json)
Hash identifier: n+4SttpWnFMgQr3lUS3XKBm8IZJ72gdzG+TjlwX30Dg=
Subject key identifier: BC:C2:46:29:72:B3:65:50:CE:34:9F:30:1E:E9:0A:6C:A7:71:90:B6
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 06656A1A
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/vMJGKXKzZVDONJ8wHukKbKdxkLY.roa
Signing time: Sat 01 Jan 2022 04:59:04 +0000
ROA not before: Sat 01 Jan 2022 04:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.82.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107309594 (0x6656a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jan 1 04:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcc2462972b36550ce349f301ee90a6ca77190b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:76:85:92:be:2c:b1:07:f5:21:03:da:3d:
96:9f:03:11:b5:f2:68:c0:51:1a:c5:06:5f:e6:e9:
25:ca:63:13:6c:f6:7c:74:7a:79:9d:6c:ab:50:b2:
24:74:d7:65:aa:dd:cd:5d:21:5c:e6:8b:50:59:d8:
25:c1:e4:85:77:29:41:d9:34:93:de:a4:25:37:cb:
4d:7b:8c:d2:0e:f6:29:6b:88:ad:8c:00:35:2c:e9:
f8:e3:35:87:67:c8:3c:fa:98:04:71:1f:7e:a1:06:
04:fb:ed:5e:f7:9d:13:2e:56:d5:98:81:37:0a:52:
e5:ba:4e:b8:87:4b:c1:30:c5:85:77:91:77:43:39:
61:39:86:09:15:ed:65:16:d4:82:8a:33:f4:c2:70:
15:1f:94:0e:b1:23:25:67:e7:d3:76:9c:25:10:2b:
4f:0a:a2:7c:7f:84:cc:81:3f:8f:a1:20:e0:bb:eb:
b7:a2:d9:be:1a:8e:e5:9e:34:12:e4:22:dd:ec:32:
9a:0f:fb:56:2c:f6:35:80:0e:ad:5a:9e:45:59:88:
0c:f9:ae:6d:d4:f1:aa:d3:25:7a:b5:e9:d3:81:f8:
3c:11:b5:9b:60:33:60:5c:be:1f:02:58:63:cf:3d:
5e:c2:90:a1:c1:ea:d4:61:25:96:6a:05:83:ff:85:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:46:29:72:B3:65:50:CE:34:9F:30:1E:E9:0A:6C:A7:71:90:B6
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/vMJGKXKzZVDONJ8wHukKbKdxkLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:58:af:8f:c5:3c:87:df:26:ed:6d:28:a1:71:aa:ce:61:ad:
97:a2:f3:14:78:f7:ec:32:8f:27:ae:e2:54:25:65:a7:a9:87:
de:a7:4b:e6:b1:21:33:fd:6b:07:8c:af:ff:5f:2b:3d:3d:8e:
e9:ae:7e:d8:ea:dd:75:5f:46:6e:1b:82:fb:52:78:93:ed:7c:
d0:24:ba:14:01:de:bb:b9:7f:5e:d0:c4:f0:22:32:f1:f1:6e:
0b:af:11:33:37:06:c4:cc:5b:6d:16:de:34:d2:89:b8:a8:8f:
de:16:c0:a4:93:d4:bb:4a:10:30:44:b2:f8:8c:e0:d3:76:c4:
4f:92:70:f7:57:06:d8:69:43:16:61:00:65:7b:78:93:c1:7a:
63:9d:5c:b0:34:91:64:7f:a4:b8:4c:2a:5e:1a:6f:d4:d0:74:
1c:77:b9:57:94:b0:26:bf:ac:6b:45:88:38:e3:50:62:70:13:
3f:e1:2b:ca:de:3e:e2:0c:70:14:74:45:76:26:fa:ab:c7:20:
88:8a:7d:ef:b2:c3:0a:1b:01:b3:68:a5:55:95:c1:9c:58:d9:
02:51:ec:30:55:7d:60:b9:df:0c:59:c9:d4:75:5c:5d:ac:fe:
36:b7:62:11:47:39:3b:55:63:15:76:41:90:b0:34:8a:aa:3d:
5e:bf:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org