Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/VtBnV7wpaCujihYQEjA_dAm8dn4.roa
File: VtBnV7wpaCujihYQEjA_dAm8dn4.roa (raw, json)
Hash identifier: DZJ5VbSCFCuOOrbBBa3Mpszm2BjuJf9PpwYS7K7eFYw=
Subject key identifier: 56:D0:67:57:BC:29:68:2B:A3:8A:16:10:12:30:3F:74:09:BC:76:7E
Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial: 0A43CE64
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/VtBnV7wpaCujihYQEjA_dAm8dn4.roa
Signing time: Sat 01 Jan 2022 08:02:27 +0000
ROA not before: Sat 01 Jan 2022 08:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31042
IP address blocks: 37.0.64.0/21 maxlen: 24
79.140.144.0/20 maxlen: 24
185.12.40.0/22 maxlen: 24
185.80.96.0/22 maxlen: 24
89.207.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172215908 (0xa43ce64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
Validity
Not Before: Jan 1 08:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56d06757bc29682ba38a161012303f7409bc767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:0b:e8:b5:33:8f:3b:1c:1a:e3:03:17:c7:
35:cc:4b:9c:9c:85:cb:9c:de:02:de:3f:75:43:24:
d2:81:66:02:fe:f9:fe:a3:a5:5c:c1:39:1c:de:01:
44:98:8c:a4:8d:37:72:cf:15:96:82:c6:b2:a9:5e:
5a:55:af:f4:f8:fe:1e:11:98:00:62:ce:55:98:42:
a6:23:ec:e5:1b:c6:08:61:97:67:63:e0:c7:fd:c7:
82:9f:54:c5:b7:bd:47:24:d2:fb:c2:70:52:48:85:
ec:19:de:68:73:4c:84:e5:8b:8f:0f:8c:cc:17:76:
e8:44:29:ef:89:11:a1:c2:a2:c8:32:8a:2c:b5:40:
ed:1b:3c:7f:c9:93:6d:0f:32:ba:3e:8d:bd:97:e5:
75:b7:96:fa:3e:d0:d9:91:dc:da:39:f8:cc:3a:56:
d1:3a:bf:cc:4e:58:86:b7:b3:c6:9d:70:ed:b9:88:
52:76:60:a7:8f:2a:88:0f:e7:15:65:a8:41:a2:4a:
fe:16:b0:d1:75:42:e2:8d:f0:30:80:e9:8d:99:58:
6b:48:69:ad:55:75:f0:ad:66:ac:62:03:a1:39:33:
e6:4e:82:fe:94:f9:59:9d:42:fa:c7:fb:db:e4:b1:
fe:1f:26:a2:b5:6a:6b:31:81:2b:d2:89:ed:6b:13:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D0:67:57:BC:29:68:2B:A3:8A:16:10:12:30:3F:74:09:BC:76:7E
X509v3 Authority Key Identifier:
keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/VtBnV7wpaCujihYQEjA_dAm8dn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.64.0/21
79.140.144.0/20
89.207.192.0/21
185.12.40.0/22
185.80.96.0/22
Signature Algorithm: sha256WithRSAEncryption
85:5f:71:96:72:75:36:38:45:00:7e:9d:cb:ba:93:20:d8:1b:
5f:a3:ad:90:7c:98:12:e1:7e:ef:85:bb:f9:7b:fd:2a:6a:78:
91:ef:22:af:80:8b:e3:b2:9a:28:f7:9c:a6:81:be:76:cf:57:
08:ce:fd:1a:f7:5e:a9:e6:f8:99:34:22:55:84:d6:21:3c:94:
78:62:17:8e:de:11:75:95:f9:28:eb:f2:4b:89:85:ac:99:fa:
5d:33:43:f5:34:58:ce:37:1b:eb:e8:1f:1f:ff:98:aa:b7:e5:
f6:3b:2b:12:de:2f:63:1d:d8:eb:51:fd:e2:93:5a:e5:df:81:
ef:c2:b8:0d:3f:b3:83:51:44:15:98:42:a0:c6:ac:43:1f:2c:
e7:77:d4:40:ed:0d:f2:3f:e3:42:81:f3:df:6c:11:3c:50:60:
41:30:b5:08:24:87:6c:2e:ca:38:69:cf:5b:08:8b:c3:b3:71:
f7:bd:ab:d1:1c:53:9d:4f:04:ea:84:4f:1e:49:f0:d5:c8:28:
8b:a2:b4:99:1b:41:74:e8:13:cd:86:a7:07:75:a4:b3:45:c3:
c0:3a:d0:30:a8:f3:f6:56:d0:93:c9:8c:8c:3d:8e:d3:c7:38:
3a:2d:93:f3:cb:ae:d2:f3:e6:72:22:3d:c2:93:92:ae:35:90:
5d:d7:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org