Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vaJO41eU7Naz4ZYPojyXyuLGoEc.roa
File: vaJO41eU7Naz4ZYPojyXyuLGoEc.roa (raw, json)
Hash identifier: eaxrmREU/Wrgdm4/jqCeO+MAm+44+me0aYNtI47Y35A=
Subject key identifier: BD:A2:4E:E3:57:94:EC:D6:B3:E1:96:0F:A2:3C:97:CA:E2:C6:A0:47
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018490F83429159A03248942C37FA44B6BF4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vaJO41eU7Naz4ZYPojyXyuLGoEc.roa
Signing time: Sat 19 Nov 2022 17:38:16 +0000
ROA not before: Sat 19 Nov 2022 17:38:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208621
IP address blocks: 80.64.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:90:f8:34:29:15:9a:03:24:89:42:c3:7f:a4:4b:6b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Nov 19 17:38:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bda24ee35794ecd6b3e1960fa23c97cae2c6a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:da:6a:c4:26:82:3a:73:4c:a0:7c:47:97:
a7:2e:92:0f:93:38:16:d3:1f:6d:fc:54:49:b7:0e:
53:e8:e7:47:53:8f:1d:e6:ae:87:4d:44:6a:5c:2a:
28:19:d9:8d:53:f7:fb:9d:78:f2:11:89:45:36:2d:
48:a5:2a:a6:ee:0b:bb:0d:eb:0e:a6:f3:cb:0c:15:
51:41:44:f1:5c:41:78:f3:14:30:00:bc:04:db:1e:
7d:38:ef:2a:a2:90:90:3d:12:08:70:77:0e:34:20:
3f:9f:74:58:19:a1:b6:65:46:64:cd:11:ad:53:4f:
37:ab:1b:1c:96:f6:f7:58:c1:c7:f2:7f:bc:3c:bd:
71:19:93:56:bf:c9:b8:32:be:b3:a9:29:2f:1a:cf:
f8:84:f9:58:e7:49:2b:72:7e:cf:9e:42:cc:47:6a:
d3:a4:7c:3f:95:39:70:de:18:c7:db:4a:08:45:77:
6f:16:ac:43:5d:aa:d0:2a:26:db:a1:41:b4:88:fd:
a0:fd:13:f9:43:a9:d2:56:c2:f9:a9:e3:84:33:20:
f2:18:d1:72:db:07:8e:29:32:d1:d6:32:88:fa:4d:
53:e3:3a:24:b4:ea:f4:21:d8:05:0d:d7:c0:6a:bc:
4f:82:8b:eb:ab:a9:fe:cd:77:6b:93:bc:c5:3b:1f:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:4E:E3:57:94:EC:D6:B3:E1:96:0F:A2:3C:97:CA:E2:C6:A0:47
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vaJO41eU7Naz4ZYPojyXyuLGoEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.218.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:8f:21:e4:f3:40:63:97:19:50:bf:4e:ec:f0:88:64:81:6b:
cb:08:17:73:be:20:06:c2:b6:ab:07:cd:0b:5d:8b:93:36:e5:
d7:c2:5b:37:ad:ad:0f:fb:55:4a:a5:8d:57:9f:74:18:39:e5:
c9:72:14:c5:a6:fb:b3:8b:c0:0b:10:b3:41:39:64:62:dd:31:
0b:3b:7d:95:bf:63:c7:8f:7d:0a:a2:fd:3e:bc:45:02:ac:52:
0b:7b:50:fa:f7:d9:11:c9:f6:1c:ac:04:d2:07:c5:92:bb:e9:
dc:89:1a:0f:25:9f:cd:4e:c9:06:ec:dd:14:c8:3e:53:8e:ae:
75:e1:77:1d:a6:0e:18:b2:5d:f9:e3:2a:e8:19:a5:f8:33:20:
ff:71:4d:11:a8:82:0a:34:c3:ee:9f:57:a4:e8:15:6f:ae:b7:
10:6c:6b:3e:c5:c1:a1:cc:79:90:03:76:c0:4e:b5:84:4b:42:
7e:03:a6:30:4b:db:d5:61:b1:43:6c:06:cb:16:6e:44:66:a4:
3c:ac:98:dc:a9:8c:d3:f2:28:aa:db:0e:e1:66:c1:b9:2e:b2:
ac:82:10:45:13:e3:d5:d2:b5:59:5c:14:9e:cb:fc:6e:fe:22:
0a:9a:39:f6:8e:73:c3:1c:96:f3:0b:4e:43:6b:e0:0c:5d:74:
6a:0e:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org