Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/VbGZyfKh-JIIxsDA1QbroAKsFcs.roa
File: VbGZyfKh-JIIxsDA1QbroAKsFcs.roa (raw, json)
Hash identifier: BovCkzR3banSWUOARRWbUQT4Q7ZIsaSB5cSNz9/BzQk=
Subject key identifier: 55:B1:99:C9:F2:A1:F8:92:08:C6:C0:C0:D5:06:EB:A0:02:AC:15:CB
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018437E3D955D8C2C8C7C35200A282AB70B6
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/VbGZyfKh-JIIxsDA1QbroAKsFcs.roa
Signing time: Wed 02 Nov 2022 10:29:49 +0000
ROA not before: Wed 02 Nov 2022 10:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.180.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
45.133.36.0/24 maxlen: 24
45.133.38.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:e3:d9:55:d8:c2:c8:c7:c3:52:00:a2:82:ab:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Nov 2 10:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b199c9f2a1f89208c6c0c0d506eba002ac15cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:df:ed:9a:7d:5d:86:67:be:38:a7:1a:74:
4b:c5:7a:ea:6e:de:83:5f:71:ea:1c:03:da:86:1b:
80:0c:18:c9:9d:81:7d:9c:47:f9:3a:c4:88:54:d4:
f7:89:f8:34:27:2a:6a:a8:da:c4:9f:3a:5f:61:76:
3c:ed:3f:69:0c:7d:3d:f6:cf:65:7d:32:5e:7b:2a:
2d:79:94:94:33:69:8d:45:fa:be:c7:28:d9:e2:dd:
00:e9:a9:14:94:ed:03:03:b1:c3:5e:54:52:8c:33:
91:41:1b:e2:89:55:63:01:d1:56:99:76:ef:0f:cd:
d5:6c:b6:3c:5a:13:3b:79:32:8f:bb:a4:26:12:ba:
70:06:a3:85:64:35:d4:ee:82:5e:58:34:53:0b:eb:
99:a3:c5:e0:c3:7e:35:f0:8f:44:e4:6c:1f:57:66:
e1:98:bb:e0:5d:e2:66:39:db:d5:df:c0:52:74:d4:
5f:7c:c4:b1:c0:30:80:6e:39:7f:22:8d:1b:6d:98:
45:f8:46:bf:bc:ed:0e:1e:5d:9f:cf:3d:85:29:73:
59:05:3a:f3:f0:2a:5f:0f:80:d0:3c:0d:27:fc:2b:
7d:77:20:6d:56:23:1a:09:a6:50:00:ac:7f:53:6b:
58:2e:76:79:6e:c7:29:8f:74:7e:10:7d:72:6d:0f:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:99:C9:F2:A1:F8:92:08:C6:C0:C0:D5:06:EB:A0:02:AC:15:CB
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/VbGZyfKh-JIIxsDA1QbroAKsFcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0-45.133.38.255
185.169.180.0/24
185.169.183.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:26:ed:06:12:a0:0f:91:f2:b6:ad:e9:6a:d9:67:e2:ad:46:
aa:c8:f7:92:03:5b:b7:0c:da:8b:63:d6:50:21:16:55:80:02:
0e:fe:55:e3:d2:62:60:0b:d6:7e:b3:5f:2a:4a:0a:a9:08:7f:
a9:b2:1c:5d:82:68:55:84:30:46:8d:4b:89:53:aa:fd:49:fa:
0d:33:f2:df:71:fa:a7:12:44:d4:88:ad:5f:88:06:25:c8:38:
c7:c1:0e:40:0f:ec:5d:d1:cf:96:08:72:0d:ad:47:0e:20:94:
4f:d4:cf:7b:a3:cd:fc:8b:de:f0:da:d6:0d:3c:e1:2a:22:47:
dd:99:e9:17:6d:a8:62:c3:30:90:28:03:26:0a:c2:d2:a3:40:
bd:d2:15:71:f9:5e:2b:d3:7d:96:78:21:be:e4:b3:e5:66:64:
76:ff:c2:45:f9:2e:5a:32:21:90:09:c5:ae:30:01:2b:91:8e:
65:d3:1a:b9:c7:ae:44:68:52:99:b7:cf:f8:d0:fc:42:c7:8d:
e7:83:6f:3f:05:41:f2:33:db:e4:a3:91:e6:8c:39:58:5c:73:
c9:80:b6:76:4b:22:46:84:8c:d7:46:e9:6f:00:75:55:f0:46:
66:9a:3c:bc:65:77:3a:89:c0:73:99:e0:64:7b:5a:41:12:f9:
b9:de:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org