Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/VjTFw_807HDehjnw6ofWOO6tYIM.roa
File: VjTFw_807HDehjnw6ofWOO6tYIM.roa (raw, json)
Hash identifier: 3u2Epzmy36STC4Ki993C5QhjmsYdTlQnK9wPDYAJBX8=
Subject key identifier: 56:34:C5:C3:FF:34:EC:70:DE:86:39:F0:EA:87:D6:38:EE:AD:60:83
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01833C4AC4C9605BC70D6D8911ACD9F0CFAC
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/VjTFw_807HDehjnw6ofWOO6tYIM.roa
Signing time: Wed 14 Sep 2022 13:57:56 +0000
ROA not before: Wed 14 Sep 2022 13:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
194.64.172.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
194.163.76.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
212.224.0.0/22 maxlen: 24
194.195.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:4a:c4:c9:60:5b:c7:0d:6d:89:11:ac:d9:f0:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 14 13:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5634c5c3ff34ec70de8639f0ea87d638eead6083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:f4:5e:2f:d2:cf:a9:60:76:48:36:7b:d9:
36:7a:04:29:5d:a4:19:d5:5e:5f:a5:9d:be:fb:ba:
bb:63:0c:3f:66:44:38:91:68:49:21:f6:7d:ef:c8:
92:ad:42:cc:26:d5:6a:a6:46:8b:ab:bb:4d:65:56:
26:bb:2c:b2:e3:69:82:de:2f:80:23:55:c4:84:c4:
11:52:d8:bc:c3:bc:fd:ec:01:0c:23:58:14:b4:6c:
66:2d:39:26:de:3b:52:a4:db:89:db:72:74:94:5a:
98:6f:e5:60:05:49:9c:f5:c6:39:fd:0a:b0:8d:40:
e7:58:ed:35:e2:06:53:04:3c:f7:e5:3b:f7:20:b4:
1f:77:6c:a9:3d:e5:63:63:09:e9:78:d2:b7:ac:0f:
c6:75:cb:34:79:f3:08:66:64:c8:46:1a:2d:5f:93:
54:97:74:bf:a2:4d:86:6f:23:ba:9a:29:eb:af:dd:
71:45:a3:cc:ed:94:f2:a3:cb:81:c9:2d:ab:71:a5:
69:7e:7f:cc:af:15:e0:45:6c:02:f1:74:16:0b:46:
87:53:b2:c1:3e:d7:42:23:22:59:7c:5c:d0:30:86:
26:a9:c2:51:c8:c7:64:c2:7d:de:5c:9d:cf:9c:fb:
2b:6e:cf:e8:57:e3:9d:4d:5d:ce:d7:ce:4a:dc:d9:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:C5:C3:FF:34:EC:70:DE:86:39:F0:EA:87:D6:38:EE:AD:60:83
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/VjTFw_807HDehjnw6ofWOO6tYIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.172.0/22
194.163.72.0/21
194.195.108.0/22
195.179.44.0/22
195.179.80.0/22
195.180.140.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:0f:15:88:73:52:b8:f2:f1:02:4a:c3:59:0d:59:5b:26:7c:
6a:4b:42:41:b3:c5:a6:8f:04:3a:2e:ae:90:d8:0b:d6:17:fe:
88:60:33:92:0f:74:20:a1:61:13:b1:0d:28:49:56:8d:62:81:
41:fa:62:04:f8:67:07:a4:b6:b6:ec:70:e6:9c:1a:29:08:e1:
4e:40:77:ad:1f:9b:5a:cb:c8:7b:20:3c:9d:9e:5b:4c:f4:50:
dc:8d:3e:3a:f0:20:6b:39:d8:5c:37:89:14:be:24:01:db:08:
d2:a9:e1:38:83:e5:24:92:a6:23:ac:56:50:2b:56:c3:41:8d:
30:df:b5:88:0b:5c:bc:b8:0c:53:44:6d:6c:73:d8:56:1d:7c:
aa:d2:4a:12:a2:bb:56:d7:cf:63:1a:5d:cb:5f:3c:9c:53:49:
76:2c:bb:9c:c0:c1:f9:fe:5a:71:44:e9:fe:68:eb:56:a0:24:
9d:ff:6c:0d:1d:99:01:66:dd:02:ff:dd:9d:d7:fc:38:56:76:
b7:53:e2:ed:51:37:b4:88:10:c8:9e:3d:12:fc:58:27:2a:04:
c9:79:e8:63:95:2c:92:35:2f:42:83:c7:26:ae:7c:f7:b6:73:
8d:de:71:a2:3f:91:44:b1:ce:35:28:22:5b:27:35:a6:09:42:
a8:b3:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org