Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VbVSkdEPi9ZlTteXn7nsE155CWk.roa
File: VbVSkdEPi9ZlTteXn7nsE155CWk.roa (raw, json)
Hash identifier: VKNWk2mb8VjQ/ld20ugVwPl44V0xUcuQzoRA8blLyqI=
Subject key identifier: 55:B5:52:91:D1:0F:8B:D6:65:4E:D7:97:9F:B9:EC:13:5E:79:09:69
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 090E62A3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VbVSkdEPi9ZlTteXn7nsE155CWk.roa
Signing time: Sat 01 Jan 2022 16:00:32 +0000
ROA not before: Sat 01 Jan 2022 16:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56382
IP address blocks: 194.50.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151937699 (0x90e62a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b55291d10f8bd6654ed7979fb9ec135e790969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:f6:84:17:78:3f:90:fa:fe:5b:61:6d:6f:
e0:2c:fd:7e:c2:82:9e:83:e8:d4:fb:32:92:cc:48:
78:e4:b1:b6:ee:d8:ad:10:bd:e5:c0:35:fa:a4:9d:
91:45:99:b3:ba:62:75:08:bd:40:31:0b:cb:6b:3f:
7b:3a:63:a3:79:3a:b2:39:0f:02:fe:b9:1e:3c:f6:
2e:21:58:72:9d:22:3f:85:62:e8:5b:8c:b1:e4:f8:
63:b5:f3:75:fd:19:96:8f:f1:56:5a:5c:e5:28:da:
7a:67:d7:a8:be:42:04:01:da:dd:85:c8:27:25:1d:
15:4a:03:68:e9:c6:4d:a6:f3:22:ed:06:e3:2e:ee:
7b:ab:d7:23:3a:45:10:aa:ce:f6:8d:2c:c8:a2:e9:
54:d6:3f:37:95:e1:3a:1e:23:6e:b5:60:0b:40:fc:
6b:2c:15:e2:aa:28:12:82:ae:80:bf:15:41:ae:4d:
83:b2:4c:17:32:dc:a2:41:ca:60:3b:a3:b7:a0:dd:
76:35:15:06:30:6d:bf:a5:a8:af:5c:ea:91:7e:7d:
23:2b:86:06:b6:9c:20:7e:94:24:44:72:c7:a8:0c:
79:c7:0d:f6:04:08:fe:19:d9:09:f2:c8:f8:0f:4b:
53:31:f9:e7:5e:f2:64:23:2a:a4:f0:e0:bc:b2:ab:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:52:91:D1:0F:8B:D6:65:4E:D7:97:9F:B9:EC:13:5E:79:09:69
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VbVSkdEPi9ZlTteXn7nsE155CWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c0:27:4a:bf:a9:ae:10:8c:4f:15:5e:7a:e1:6d:bc:c8:f1:
7d:67:ab:17:b7:6d:cb:69:0d:a1:21:3b:7b:25:c3:b5:20:55:
2d:c7:c0:4c:92:de:56:ce:6d:8e:b2:ab:55:d7:a5:59:83:14:
ea:62:ac:a5:3d:f4:ec:4b:dd:59:72:ab:0b:1d:d1:84:25:94:
03:38:47:0f:03:33:31:f0:e3:88:bb:16:fe:22:f5:12:ab:0b:
ab:b1:20:3a:71:64:e5:58:cf:01:e3:53:74:75:24:38:a1:2f:
69:58:0b:38:90:22:3f:d9:3d:0e:54:70:b4:5d:f0:2c:e1:4a:
5b:c8:07:f9:0d:85:7e:cb:e5:98:fc:a4:0f:c7:ae:7f:ef:4d:
61:67:95:9b:99:ac:35:57:9a:98:f0:3a:55:d8:41:bb:e2:54:
bb:28:b1:a2:f9:75:5b:92:fb:bb:4a:d3:cf:d0:01:3c:d1:e8:
fb:87:d0:73:6a:2b:4d:1a:ea:16:b3:d9:ae:95:37:a1:c4:ec:
7c:76:d3:a9:1f:1f:82:a6:86:71:71:f9:18:77:60:95:6b:05:
18:e6:f9:f5:0b:87:e7:9e:25:e3:b7:9c:7e:63:45:4a:9d:e2:
62:28:1e:b7:59:be:7f:17:bc:7e:fa:ee:ca:e7:47:cb:75:b7:
48:39:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org