Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_VESNhaaR3w18k6xCyJEPVGWQr8.roa
File: _VESNhaaR3w18k6xCyJEPVGWQr8.roa (raw, json)
Hash identifier: PBUoN/7K5cUmJMLZfAKxJP8aFAol3bkEgLYoDo5yAj0=
Subject key identifier: FD:51:12:36:16:9A:47:7C:35:F2:4E:B1:0B:22:44:3D:51:96:42:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DB78CB4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_VESNhaaR3w18k6xCyJEPVGWQr8.roa
Signing time: Mon 04 Apr 2022 13:00:39 +0000
ROA not before: Mon 04 Apr 2022 13:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.221.67.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498568372 (0x1db78cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 4 13:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd511236169a477c35f24eb10b22443d519642bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:f9:1c:95:9b:53:0e:1d:c8:22:c4:e6:da:
95:9e:f5:1f:be:66:7f:a2:e3:db:9b:a6:a1:b7:b4:
78:40:bf:ef:e7:f2:ef:e8:18:d4:dc:4f:71:e5:01:
f4:69:56:5a:14:f4:4b:f2:54:71:74:f7:d8:2e:dd:
0f:9a:40:77:34:9f:73:23:a3:14:28:c3:c7:0a:32:
fa:48:4b:0a:d1:3d:f7:19:58:10:ac:56:87:05:ee:
89:8f:d2:67:73:de:f7:ee:dd:01:be:b5:57:72:0a:
ac:e1:be:03:98:2c:31:d3:8b:56:7d:3b:13:f8:73:
32:29:1b:9d:91:05:9b:a2:23:91:08:24:c5:c1:c3:
9d:33:96:eb:4f:6c:df:49:87:60:09:d0:d8:c1:69:
29:df:9b:5d:f1:3d:83:ff:5b:b0:08:19:ff:aa:30:
58:01:53:b6:62:fd:45:df:23:68:93:b4:6b:68:62:
1d:ee:1e:cb:d5:94:ba:cf:b0:74:dd:7c:7a:13:a8:
de:f6:a7:0b:c9:c8:e3:fc:9c:44:1e:1b:91:e6:2e:
42:27:72:f2:85:bd:80:7d:bb:25:f7:c9:1b:c7:01:
b2:cc:6b:9b:77:cc:81:fe:dc:50:cc:1e:b8:be:16:
9f:0e:98:93:7a:9c:80:75:83:70:75:a8:40:af:e5:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:51:12:36:16:9A:47:7C:35:F2:4E:B1:0B:22:44:3D:51:96:42:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_VESNhaaR3w18k6xCyJEPVGWQr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.145.0/24
92.249.49.0/24
185.221.67.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d0:e7:74:78:f4:e0:28:5b:d9:bf:05:83:48:0e:f4:3c:9d:
6c:6b:ff:8d:77:e4:23:76:d0:60:ef:62:cc:78:03:c2:a8:35:
36:8e:16:98:6f:b7:83:ec:b4:21:3b:61:47:0d:fa:96:06:67:
0f:b8:08:40:86:60:e6:f2:d9:43:8d:ad:aa:08:a9:22:19:ce:
91:65:f3:60:79:c6:7b:48:70:ef:ab:ef:f1:38:78:4b:e8:8e:
ee:21:b2:13:f2:79:7e:8a:e9:b2:57:7f:2f:e9:ee:60:a2:2e:
1f:e4:a8:93:19:53:c0:59:28:bd:30:44:4e:0c:b2:c0:86:d3:
15:fb:58:87:7d:07:5b:17:57:72:be:77:49:46:9c:f2:75:0c:
3f:a5:d3:c9:5f:9b:e7:5d:05:6f:52:37:81:9c:46:3e:8f:3c:
cf:3a:81:e1:a3:9f:b3:ee:b9:ae:ee:0d:5a:4d:ab:e0:88:82:
dc:c1:b1:67:5e:fa:87:79:26:9c:00:ab:54:50:15:95:ea:8b:
4a:8e:68:94:fd:c6:d3:a5:ee:4f:bb:95:d6:59:88:c9:32:3b:
55:7d:1f:42:96:84:0c:60:7b:38:63:6d:12:c9:6f:85:2c:62:
85:31:fa:6b:4d:ea:5e:83:d7:cc:56:94:60:22:68:24:41:5a:
ff:25:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org