Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/Vqkt9F8iOCkMDV8ZNYR6k7wtOWs.roa
File: Vqkt9F8iOCkMDV8ZNYR6k7wtOWs.roa (raw, json)
Hash identifier: EJS9NwKNArUiadIvzqr4CztmdQHv2vKG3Dvirpg6hIY=
Subject key identifier: 56:A9:2D:F4:5F:22:38:29:0C:0D:5F:19:35:84:7A:93:BC:2D:39:6B
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 03B74A2D
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/Vqkt9F8iOCkMDV8ZNYR6k7wtOWs.roa
Signing time: Sat 01 Jan 2022 04:03:54 +0000
ROA not before: Sat 01 Jan 2022 04:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31234
IP address blocks: 195.225.228.0/22 maxlen: 22
185.115.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62343725 (0x3b74a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jan 1 04:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56a92df45f2238290c0d5f1935847a93bc2d396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:83:74:69:52:d2:ea:e6:4e:d9:19:e6:ed:
20:fc:97:b4:5e:92:34:62:21:82:46:ae:35:6e:b3:
94:11:8a:9a:13:b4:d2:3a:2f:ce:1a:b8:99:37:ca:
96:8a:5f:63:1c:01:2c:f0:7d:68:b5:c4:3e:44:33:
23:74:13:b4:df:9d:41:ca:aa:0e:72:dd:40:39:e1:
38:c6:8a:e1:98:d8:e8:93:74:3d:67:e8:d3:e2:9d:
d0:0d:df:00:23:10:e2:8c:21:b1:38:ef:4b:0c:b3:
97:cd:e1:dd:ee:78:a6:0f:51:b3:aa:14:75:cd:15:
a8:1c:b8:a1:f0:b6:a4:45:51:e7:c0:5a:04:13:df:
56:f0:70:67:25:c4:1f:d3:f0:33:9e:fc:bb:62:e8:
c2:70:e9:f9:43:e8:f2:e0:b2:4e:d4:52:cb:de:87:
5b:ca:f4:c2:01:e9:e1:4c:46:f3:a2:c4:5d:0a:e2:
e8:1f:2d:59:97:ed:04:9f:8d:ad:0e:10:00:c5:47:
d6:27:17:59:59:34:a8:9b:63:fe:f1:cc:db:6d:23:
80:59:f1:6b:14:19:92:15:87:7f:1b:3d:fe:c1:d0:
60:ba:ab:9c:b1:53:2c:e8:39:d8:fd:e2:cf:61:d5:
67:c4:a7:bb:2e:74:28:b6:47:3e:54:77:a5:47:73:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:2D:F4:5F:22:38:29:0C:0D:5F:19:35:84:7A:93:BC:2D:39:6B
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/Vqkt9F8iOCkMDV8ZNYR6k7wtOWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.36.0/22
195.225.228.0/22
Signature Algorithm: sha256WithRSAEncryption
53:48:cf:a3:74:10:80:b0:5f:24:bf:66:82:9d:65:ad:e5:b4:
97:10:36:71:52:c2:40:42:f5:eb:1b:d6:cd:81:7a:84:0c:70:
07:78:c2:21:04:af:5d:cc:bd:c5:27:92:92:9e:ba:b7:a9:db:
8a:6c:8d:8c:75:09:72:f1:ec:f3:f9:d7:91:98:4d:d3:9a:5f:
5d:6e:b9:7a:89:ef:7d:4d:15:66:8b:42:cb:8e:c7:32:65:23:
d9:b6:a5:43:aa:bc:30:ed:07:05:cc:cf:f9:8b:a5:df:b9:c4:
b5:81:ef:97:b0:f1:3a:4e:b2:37:bb:97:76:52:b9:a2:27:7f:
f1:42:d5:e9:ea:b3:41:40:69:52:33:67:fd:21:0a:74:14:e0:
ae:8c:af:29:1e:a4:60:12:6e:75:43:73:2e:f4:be:62:c6:e1:
20:ea:3b:b3:12:da:54:46:67:0d:fa:34:52:ed:ed:76:14:d6:
55:67:1c:3d:b4:d1:fc:0b:5d:0a:81:92:c3:cc:bd:98:fe:37:
d9:ad:3d:8e:4c:d3:73:3d:8d:12:68:b8:1b:c3:5c:e8:bb:de:
f9:e1:b3:3a:ee:1e:13:cf:12:ab:34:7b:4d:8a:27:56:f4:7a:
92:89:85:51:7d:e2:e1:6c:e8:ac:cf:a3:0a:a4:17:5a:e1:8c:
0f:ed:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:31 2024 by rpki-client on console-fra.rpki-client.org