Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/VbCyvyeU5wo2E9eLb6_gt0-CHX4.roa
File: VbCyvyeU5wo2E9eLb6_gt0-CHX4.roa (raw, json)
Hash identifier: ZH+DEuovRE7Bc1aG2AtFloC50jivQeBqxffeeNmQ5m0=
Subject key identifier: 55:B0:B2:BF:27:94:E7:0A:36:13:D7:8B:6F:AF:E0:B7:4F:82:1D:7E
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 14422133
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/VbCyvyeU5wo2E9eLb6_gt0-CHX4.roa
Signing time: Sat 01 Jan 2022 15:02:22 +0000
ROA not before: Sat 01 Jan 2022 15:02:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200919
IP address blocks: 185.91.112.0/24 maxlen: 24
185.91.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339878195 (0x14422133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jan 1 15:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b0b2bf2794e70a3613d78b6fafe0b74f821d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d6:f5:50:55:70:b1:93:af:51:3d:00:c3:71:
7a:33:6c:1c:44:68:3a:81:0d:69:50:ae:73:e1:e9:
df:bd:27:bc:da:54:05:60:3b:fb:da:08:23:f5:4d:
1e:34:4d:64:63:44:a2:dd:e7:ca:0e:72:d6:61:7a:
ee:29:d7:3a:dc:36:1d:f7:2c:2a:74:3e:3b:2d:df:
cd:9e:44:64:20:d1:76:e1:1b:45:3a:74:d3:a9:94:
be:6f:aa:2d:d4:19:aa:74:3c:a0:14:ba:de:e9:ef:
05:41:5c:02:5f:ef:0c:d3:ab:cd:3d:ce:31:91:3d:
b8:32:bd:d0:82:e3:87:0b:a6:39:03:23:05:42:aa:
67:a4:22:23:fc:0e:57:ed:15:83:ac:f2:8a:13:b2:
4b:95:e0:7e:24:3e:d3:33:88:7c:8d:e2:d1:5b:2b:
71:c8:84:05:6a:80:73:a7:cb:ab:62:0c:d4:30:dc:
e3:f3:b8:61:ae:7f:f0:66:b8:c9:1d:e6:db:12:e6:
44:ea:99:29:30:ea:02:d4:fb:ab:ab:d1:15:18:25:
72:ff:24:a5:da:dd:1d:b3:45:33:8b:3b:73:b1:ee:
4d:68:a9:ad:ae:c9:a4:2b:fb:b5:6f:ec:93:0a:6a:
94:d3:b1:ea:d7:00:7f:a7:4f:1b:76:50:e4:ba:d3:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:B2:BF:27:94:E7:0A:36:13:D7:8B:6F:AF:E0:B7:4F:82:1D:7E
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/VbCyvyeU5wo2E9eLb6_gt0-CHX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:52:c9:d9:1a:8f:ed:61:87:d7:5b:77:fe:db:46:f6:72:e0:
77:64:c8:25:fa:44:bc:d6:0f:23:97:ae:c7:e5:f8:37:02:86:
3c:0e:50:35:a7:c4:f4:8e:cd:21:e5:d1:e4:a1:92:6f:0c:f3:
c2:a4:0d:05:f6:fb:d7:6b:79:b1:d0:05:86:5a:e7:1e:11:a5:
76:d0:37:86:3b:f8:5b:5f:98:6f:92:d7:84:2f:43:92:96:86:
5e:54:d0:8d:f2:3b:02:bd:ca:24:f8:07:40:86:94:ab:90:86:
f2:c4:76:3d:23:8b:cc:95:be:9f:93:9f:c8:c0:d0:66:c4:1b:
3f:1b:33:e5:ba:2c:29:ea:b4:60:eb:f2:dc:6c:9f:b9:b5:99:
af:7a:f6:6f:c3:b2:b0:9a:d4:b9:be:15:f6:9d:bd:bc:0f:53:
33:9a:02:6c:b7:86:d5:0b:27:d6:82:80:71:6a:75:a3:fb:99:
31:14:f2:7c:81:5c:64:9d:99:a9:5a:69:03:e8:50:97:f6:91:
a4:a7:e5:bc:c0:45:60:da:6a:93:b0:5f:83:0d:a8:d3:5e:f7:
32:52:a4:5e:c2:43:92:cd:d7:59:6e:2a:9e:85:6e:71:8f:fe:
a4:e5:4c:51:cd:21:14:e9:67:96:2a:ca:08:ea:b7:44:1e:1d:
fc:82:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:30 2024 by rpki-client on console-ams.rpki-client.org