Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vmks8wTM6gcArmbDu7IvQv1t2_s.roa
File: vmks8wTM6gcArmbDu7IvQv1t2_s.roa (raw, json)
Hash identifier: S9QfrvkN5IQrNdQeLP6y/AFck1dP0tfCV7QoTHkRRpk=
Subject key identifier: BE:69:2C:F3:04:CC:EA:07:00:AE:66:C3:BB:B2:2F:42:FD:6D:DB:FB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 03BA10
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vmks8wTM6gcArmbDu7IvQv1t2_s.roa
Signing time: Tue 22 Mar 2022 17:48:22 +0000
ROA not before: Tue 22 Mar 2022 17:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.237.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244240 (0x3ba10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 22 17:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be692cf304ccea0700ae66c3bbb22f42fd6ddbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:e4:9f:38:d9:60:09:50:38:03:b6:2d:d5:
5c:db:53:e1:23:b0:72:4c:a9:7b:cb:79:d0:51:56:
c6:c1:12:3e:4b:51:5f:45:cc:97:03:85:9c:6e:af:
55:d6:3e:eb:4d:1c:75:cc:13:35:41:5c:53:11:27:
00:cb:60:22:7a:e2:14:6f:53:42:1f:d4:56:c8:b5:
23:16:6f:f5:32:47:fe:5e:38:02:04:17:19:fb:c8:
fe:2c:0b:08:4d:f7:8b:d3:cd:01:6c:cd:03:fc:44:
12:33:4d:f1:cd:0e:93:53:d5:0d:45:2e:3a:b6:21:
e3:87:4c:6a:e0:ba:39:e8:2b:9e:3a:8b:2e:b5:54:
60:5a:ba:14:50:79:9a:39:ff:22:f5:ac:3e:ac:83:
a0:4c:a6:f3:ba:8a:12:51:29:11:de:bc:bf:b4:0e:
b3:13:ed:2c:7f:e5:f4:84:19:d1:9a:42:bd:9b:06:
00:18:52:dd:da:85:01:1e:54:96:23:f5:45:34:70:
29:12:90:2d:79:4a:c3:03:24:e7:1f:3d:3a:62:2e:
5a:85:10:6b:3c:4a:a7:b5:47:fa:ba:55:a9:cb:80:
a2:7e:57:3c:b6:a3:54:a7:e0:5d:1c:11:75:25:0a:
b5:b9:7b:5b:64:c5:b8:1f:8e:9d:74:30:b2:c3:7a:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:2C:F3:04:CC:EA:07:00:AE:66:C3:BB:B2:2F:42:FD:6D:DB:FB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vmks8wTM6gcArmbDu7IvQv1t2_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fb:b9:48:1b:89:99:3a:d6:de:1a:a6:53:e8:d7:55:c3:6a:
4f:5a:6d:8d:08:3c:fc:97:bf:8d:0a:e7:2b:f0:cd:6a:07:a4:
43:cd:4e:03:03:67:1f:77:ba:36:68:7f:21:b5:15:c0:35:37:
b5:6f:46:d7:70:e8:48:67:2f:82:8c:f6:0a:74:2b:c1:dc:31:
cb:92:3b:bc:fa:26:63:27:44:6c:96:42:a0:4a:e7:9b:5d:52:
83:88:b3:34:76:24:25:60:82:6f:21:c5:e2:b1:bc:f5:56:cc:
63:95:d1:48:67:3e:4c:ed:1c:56:b4:b0:36:b9:d0:37:d4:db:
69:61:33:f8:10:7b:2c:9b:6f:ae:89:94:23:25:85:65:f2:ef:
3c:26:8e:6d:49:9c:0e:ce:19:00:e8:07:88:26:47:d4:bd:30:
39:a9:1b:65:21:45:6e:79:4f:60:7a:e2:5b:80:47:30:8a:66:
80:9f:c5:14:37:18:93:0b:f7:9e:5e:32:58:f0:72:f5:b6:25:
56:d8:43:bf:d5:49:ac:f4:39:ac:cd:6c:97:59:65:39:8a:6b:
ae:0f:e4:30:9f:94:a5:4c:76:6c:18:50:c6:08:c8:75:e5:d1:
99:3e:e5:58:47:99:09:b5:a0:8d:8c:8e:f8:dd:3d:65:6a:27:
98:3c:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org