Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/VrW_lowFhulSf7xzSa_vlije8GI.roa
File: VrW_lowFhulSf7xzSa_vlije8GI.roa (raw, json)
Hash identifier: ru0w6hCBKCTfSuved3fB6DmIBwKnUWpaM9vjZ4Fmwjc=
Subject key identifier: 56:B5:BF:96:8C:05:86:E9:52:7F:BC:73:49:AF:EF:96:28:DE:F0:62
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 347DA3BF
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/VrW_lowFhulSf7xzSa_vlije8GI.roa
Signing time: Sat 01 Jan 2022 06:04:44 +0000
ROA not before: Sat 01 Jan 2022 06:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42868
IP address blocks: 185.87.253.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.254.0/24 maxlen: 24
185.87.255.0/24 maxlen: 24
77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.157.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880649151 (0x347da3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jan 1 06:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56b5bf968c0586e9527fbc7349afef9628def062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:d6:18:4b:e6:c7:8e:73:1e:e9:63:c8:34:
02:04:60:52:83:1a:ba:9a:a0:ef:59:0e:7e:27:8f:
92:ec:02:e3:39:6f:41:a2:7f:ba:e1:ca:47:2d:d6:
aa:8a:08:c5:f6:67:00:5e:24:22:b3:e9:8d:0b:f6:
5d:02:b9:a3:d5:a8:4e:0e:86:a2:01:c7:fc:c1:48:
e8:83:2c:e1:e8:58:c0:de:60:ab:39:53:36:bf:35:
a5:5c:c4:1d:91:f3:e3:c4:e1:b3:e9:c4:e1:26:3b:
92:6e:e3:5c:9c:63:12:28:be:07:32:71:a9:87:a0:
bc:03:b5:9b:ef:30:51:11:00:c7:38:92:47:51:13:
64:fe:d4:85:a3:8e:9a:09:ea:81:db:e6:a1:68:a8:
6e:26:e3:8e:a4:79:76:5b:b9:d9:a1:42:07:42:70:
eb:21:99:40:ca:a9:c5:e2:6b:b4:07:da:92:75:5d:
9f:cf:19:ba:05:76:bc:1c:45:0a:c5:3b:6c:e4:0c:
d3:a6:2c:5c:0c:58:e3:0e:60:1d:b2:0d:73:fb:bd:
af:98:60:a6:bb:a4:24:30:cf:c3:c1:eb:8c:8b:6a:
59:5b:89:21:d0:b6:c9:fc:c2:84:1f:c6:27:da:ff:
08:dd:da:ac:e9:76:c4:d2:68:ff:16:bb:49:5e:0c:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:BF:96:8C:05:86:E9:52:7F:BC:73:49:AF:EF:96:28:DE:F0:62
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/VrW_lowFhulSf7xzSa_vlije8GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0/20
185.87.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:4d:9d:35:0a:14:1d:5b:a6:67:2e:af:80:7b:a4:4b:9f:99:
24:55:78:6a:1c:f4:e1:83:30:f3:f2:e2:77:4a:63:ab:41:f0:
9b:12:cf:c8:da:ba:94:90:46:e0:b4:1c:37:58:8b:9e:2f:74:
cc:1b:f2:65:92:e3:41:c2:0a:3a:c7:9a:42:9c:14:16:44:68:
26:58:f3:6c:2d:e5:1b:59:d0:32:59:17:a4:10:bc:81:59:91:
c5:f6:9e:f3:fd:9c:4b:f5:5f:59:28:6d:54:d6:79:6c:70:7c:
6b:62:34:51:a9:f6:1e:82:23:24:be:58:82:38:b2:0d:c7:a2:
cc:d1:bc:fc:e9:1b:27:53:8a:52:87:1d:29:91:dc:0d:f6:1d:
3d:ee:9a:87:35:0b:80:b2:78:b9:df:94:6a:4a:01:01:9c:ea:
92:4b:72:26:48:d7:1e:00:2f:f8:b5:dd:fd:5d:b2:2a:13:2f:
17:50:b4:53:7c:0b:11:9b:96:14:8d:46:57:d9:a5:f7:7b:7d:
c9:61:49:22:8b:e7:82:75:8f:7d:69:e9:39:7d:4c:85:a6:3d:
ba:65:92:fb:95:18:11:5a:b3:36:75:4e:99:12:15:63:60:7d:
5b:09:98:54:63:95:45:f6:ba:ab:76:18:19:8e:6b:c4:f4:fb:
96:4d:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:52 2024 by rpki-client on console-fra.rpki-client.org