Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/VgK26jZlUZeYL7JniFm2ZQDDG2Y.roa
File: VgK26jZlUZeYL7JniFm2ZQDDG2Y.roa (raw, json)
Hash identifier: +aMBgX0F/gHaw3Wo+LVxpMPFi+1RNNIQYt5zdlVFc3w=
Subject key identifier: 56:02:B6:EA:36:65:51:97:98:2F:B2:67:88:59:B6:65:00:C3:1B:66
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01838EF7CE598AF7658C5BB39922CFB1EA70
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/VgK26jZlUZeYL7JniFm2ZQDDG2Y.roa
Signing time: Fri 30 Sep 2022 15:15:48 +0000
ROA not before: Fri 30 Sep 2022 15:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209243
IP address blocks: 195.22.156.0/24 maxlen: 24
195.22.157.0/24 maxlen: 24
80.64.216.0/24 maxlen: 24
80.64.217.0/24 maxlen: 24
194.146.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:f7:ce:59:8a:f7:65:8c:5b:b3:99:22:cf:b1:ea:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 30 15:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5602b6ea36655197982fb2678859b66500c31b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:b3:57:3e:e7:ee:a4:e7:02:31:41:66:65:
5b:6c:16:e3:33:b2:ae:a7:7e:b7:55:6c:36:54:a6:
a7:cf:15:2f:d8:ba:ca:5e:10:4a:88:ac:b5:6a:91:
1f:c4:13:8d:3b:40:1b:8b:72:03:12:be:b1:2a:ae:
13:dc:49:09:dc:7d:32:26:1a:0d:cd:ed:31:49:cd:
35:6a:17:48:36:8f:4c:63:b9:0e:8e:1f:7d:66:c7:
e8:51:0f:60:52:9e:9b:fa:4d:e7:f4:3a:95:cb:22:
5b:2b:47:a7:1f:62:0f:d0:38:f2:68:1a:29:14:dd:
9c:00:65:c4:87:6f:70:a5:14:ad:41:bc:6c:9c:70:
0b:6f:94:c9:7e:e5:38:f2:f3:31:cf:0e:73:6d:f4:
09:a9:73:67:86:70:1a:20:d3:de:05:2d:eb:26:22:
d3:e2:8f:c5:03:6f:59:98:49:42:a8:42:57:7b:82:
22:b5:c8:ff:5b:40:14:02:0d:67:28:19:fb:9b:3a:
d6:7c:b0:4f:98:69:58:5d:35:55:f1:de:4e:8a:9c:
83:63:79:91:49:00:59:5a:1f:70:f0:2b:b7:18:ff:
c1:69:39:b0:a3:b1:85:a6:5b:f4:e3:2c:94:eb:76:
e4:d6:ea:bc:f0:61:08:00:e6:c9:0f:ef:0d:59:79:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:02:B6:EA:36:65:51:97:98:2F:B2:67:88:59:B6:65:00:C3:1B:66
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/VgK26jZlUZeYL7JniFm2ZQDDG2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.216.0/23
194.146.49.0/24
195.22.156.0/23
Signature Algorithm: sha256WithRSAEncryption
23:64:8b:ed:7d:e9:d9:9a:77:a7:96:63:d3:1e:36:6d:58:00:
05:f8:54:ff:d6:02:e5:0c:59:71:bf:66:a9:b1:bc:fb:1e:02:
6a:45:b1:04:25:a2:f9:41:01:38:31:7a:47:ae:0c:d0:06:d5:
a0:b3:4a:6b:7c:c0:55:8c:fd:e0:84:48:1e:ee:cf:57:4c:df:
27:fa:bf:a6:71:b2:5f:2a:c9:a5:55:b6:ec:bc:ac:08:17:49:
66:5f:f2:0c:07:2a:32:aa:97:2d:c9:c9:6e:eb:7f:d9:e7:f6:
ec:c7:b8:8d:da:3b:6e:bf:26:b3:73:bc:1e:62:95:11:cd:c7:
3e:bb:61:75:c1:61:ba:80:f4:ef:1b:e4:65:2a:72:1e:53:a7:
c2:f4:41:35:4d:02:7d:27:9c:00:27:86:17:0b:90:32:05:13:
73:68:8c:fa:9a:88:34:96:04:31:1c:b7:ab:dd:42:19:a6:aa:
99:64:55:58:8f:1b:78:9e:1b:92:a5:d3:fa:c7:70:5d:ee:c9:
b0:0e:b0:8b:b7:8e:b4:45:a4:d1:47:e7:0c:d6:17:a0:8e:5a:
57:1e:1b:29:70:f0:25:7a:2f:7d:f4:d2:c7:96:6b:1a:78:da:
cc:07:27:c4:2b:8e:65:f0:e6:16:87:60:07:da:61:09:2c:46:
d7:02:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org