Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/VlpCk8sqe1JAgxR6lK2V1Z4cE6U.roa
File: VlpCk8sqe1JAgxR6lK2V1Z4cE6U.roa (raw, json)
Hash identifier: Z40CzlZ21AGe3JXjFa5irAz4RRTlI/+BM8HJmEgsJKc=
Subject key identifier: 56:5A:42:93:CB:2A:7B:52:40:83:14:7A:94:AD:95:D5:9E:1C:13:A5
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01840E9368EFD1F648FE40CE58B04E0D5BC8
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/VlpCk8sqe1JAgxR6lK2V1Z4cE6U.roa
Signing time: Tue 25 Oct 2022 09:57:32 +0000
ROA not before: Tue 25 Oct 2022 09:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 24
81.31.252.0/22 maxlen: 24
185.84.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:93:68:ef:d1:f6:48:fe:40:ce:58:b0:4e:0d:5b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 25 09:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=565a4293cb2a7b524083147a94ad95d59e1c13a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:ad:5f:95:41:2c:9d:24:bd:c6:df:e6:87:
db:7f:2d:bb:8c:f5:82:12:74:b3:84:8c:eb:04:29:
39:4e:21:5b:8f:92:2c:06:14:6f:db:a8:e9:35:d0:
80:96:49:89:e8:d4:c3:3c:60:0b:d0:1a:b7:46:87:
a8:63:d4:12:1d:38:9a:f0:95:0d:f5:15:eb:2d:47:
3a:cb:03:1e:ff:33:b4:ea:d7:7d:d7:54:74:0b:e8:
b0:2b:f3:8b:fd:93:fa:e6:6a:ae:77:16:0c:c8:1c:
8d:a7:44:c9:7b:12:b1:5f:36:3f:80:e0:b8:a2:59:
f3:10:74:c3:02:59:76:c4:7a:57:46:49:cc:ca:d0:
1d:a1:e3:e1:33:3d:53:61:8d:d1:24:fb:4a:b1:02:
bc:b6:0b:8c:48:c8:48:59:1b:61:57:95:ca:8c:1a:
7b:01:81:aa:3f:80:22:dd:fa:16:e8:0b:4b:38:da:
57:46:a4:8c:46:d9:ef:43:56:2e:74:63:c7:eb:6c:
94:e1:88:c3:72:6e:22:ad:9b:3d:df:64:2b:29:1a:
52:ba:3d:e0:23:ad:35:61:c7:b2:18:11:b7:8d:a8:
77:2d:77:94:e2:f8:8e:20:72:79:34:af:37:eb:03:
c7:ef:21:16:04:c6:f0:32:ab:93:0a:34:36:f1:9f:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:42:93:CB:2A:7B:52:40:83:14:7A:94:AD:95:D5:9E:1C:13:A5
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/VlpCk8sqe1JAgxR6lK2V1Z4cE6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0-81.31.232.255
81.31.242.0/23
81.31.252.0/22
185.84.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:f0:34:a5:53:ec:91:b2:25:a1:e2:a5:46:8e:8d:24:a4:6a:
30:a0:55:2d:a0:a9:cd:b6:a3:68:39:8d:c7:0d:e2:32:e7:7b:
43:dc:29:58:36:5b:e7:96:08:00:39:43:bd:e7:f0:f3:de:81:
f1:5d:4e:37:43:d2:5f:27:bd:cc:1c:24:a7:80:fd:38:4e:07:
43:af:e9:45:41:cf:fd:09:36:70:f7:c3:25:52:71:cd:9c:4e:
96:80:ba:bb:ad:fa:a5:db:05:7b:c6:3b:a1:29:ad:f9:e9:11:
c6:61:38:64:19:21:75:07:5c:81:39:fc:5b:7f:27:bc:ab:68:
39:a9:f8:fd:e2:b8:93:58:05:19:36:df:47:31:ce:30:30:9a:
f9:f2:a0:c1:35:3d:f3:86:5f:8e:f5:bf:7e:1d:dc:ff:ff:cc:
1d:39:39:5b:3f:e0:b0:31:3c:42:5e:ae:a7:a5:05:ac:ab:3c:
63:a1:61:be:4b:68:da:e7:bd:39:12:d4:43:ad:51:85:24:8e:
2c:26:ba:37:44:c9:b2:72:62:cb:22:3e:96:a2:57:e7:a1:d4:
4c:cd:5f:b9:2f:0b:d6:94:82:65:12:99:2a:e2:55:a5:32:b0:
8d:9b:0b:d2:c3:99:fa:70:86:00:15:31:ec:13:66:63:24:80:
27:a7:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org