Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/VQr6aJ_ARfoEoKwC5IaKnMS29V4.roa
File: VQr6aJ_ARfoEoKwC5IaKnMS29V4.roa (raw, json)
Hash identifier: POlE4BWYP4OZqCtJESSVN2fC4ZCWx0SRaOpO7NocjuE=
Subject key identifier: 55:0A:FA:68:9F:C0:45:FA:04:A0:AC:02:E4:86:8A:9C:C4:B6:F5:5E
Certificate issuer: /CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Certificate serial: 0B3B5C12
Authority key identifier: FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/VQr6aJ_ARfoEoKwC5IaKnMS29V4.roa
Signing time: Sat 01 Jan 2022 13:00:43 +0000
ROA not before: Sat 01 Jan 2022 13:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25151
IP address blocks: 81.24.0.0/20 maxlen: 24
185.78.196.0/22 maxlen: 24
2a05:6cc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188439570 (0xb3b5c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Validity
Not Before: Jan 1 13:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=550afa689fc045fa04a0ac02e4868a9cc4b6f55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:a6:58:d2:ef:37:3f:e6:04:63:f4:57:4d:
a1:f4:8b:5c:41:3d:35:ba:78:9c:21:5a:26:aa:f2:
1e:49:e0:d1:83:8d:b8:9d:ac:fd:e5:11:3b:9e:5f:
3e:01:94:73:26:f8:ee:dd:16:4a:21:19:70:7a:43:
2a:71:61:5d:7f:a0:bb:97:e7:d9:7a:2e:4d:3c:4f:
6f:8f:1d:b4:dd:95:5d:ca:1b:64:c0:27:a8:af:7f:
7b:b7:94:19:30:9f:ad:79:2c:f2:11:45:a1:4c:72:
fa:19:9a:d6:81:68:69:bf:9e:90:9d:11:4f:fa:0f:
5c:16:6f:9a:87:65:d9:75:68:4f:74:d8:c4:c4:d3:
9b:6f:e1:38:f8:32:61:1b:58:3c:47:6e:d3:0c:4c:
c9:e0:48:37:24:cb:a8:54:cf:f6:06:16:0f:7f:e0:
85:d3:a8:5d:6f:a7:0b:88:04:c9:cf:9a:36:86:c8:
67:2b:27:bb:dc:11:12:30:12:d5:86:19:75:ae:ee:
6c:93:fa:36:7c:90:f7:f6:d9:30:cb:80:99:a8:03:
62:80:62:28:79:20:2d:6b:fe:ff:ba:3e:9c:c5:ab:
1e:fb:0b:47:1b:9d:13:f5:c9:20:89:3c:34:04:d0:
18:e9:89:90:04:af:7f:91:01:0e:69:08:3f:de:69:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:FA:68:9F:C0:45:FA:04:A0:AC:02:E4:86:8A:9C:C4:B6:F5:5E
X509v3 Authority Key Identifier:
keyid:FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/VQr6aJ_ARfoEoKwC5IaKnMS29V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.0.0/20
185.78.196.0/22
IPv6:
2a05:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
34:6e:76:fb:ae:07:49:01:69:f3:1c:60:14:f0:85:88:e8:0d:
e2:1c:00:70:68:65:79:cf:8f:5a:55:2d:98:7a:e0:02:ee:cf:
b3:41:20:41:04:1b:51:b0:52:99:2f:e0:2b:30:7f:c7:a5:5e:
4b:c2:9c:96:7c:a3:50:e1:54:94:a2:73:de:04:ce:d5:2a:fc:
fe:ae:90:b7:55:1a:58:c6:a5:52:00:7e:0c:1a:e4:80:0a:93:
44:f9:fd:1a:70:b1:26:c1:26:a1:81:67:3f:d3:07:83:b2:5f:
cc:28:cb:33:57:37:16:25:48:55:bb:89:8c:c9:c5:b4:77:f1:
d8:4c:da:f9:d2:56:4c:64:99:df:9f:99:ca:bb:86:ad:65:5b:
30:2b:f6:2d:84:2b:f9:66:a5:2d:b5:c1:47:58:f4:fd:28:8c:
09:a3:ba:8e:9e:29:60:cf:df:c1:3e:4c:d7:0d:8f:40:09:91:
b2:75:d0:60:5e:88:e4:fa:4f:a6:56:97:a3:08:c4:be:90:07:
b7:96:54:cc:03:7c:8e:cf:e8:71:99:97:42:94:8a:e0:60:98:
8a:cd:39:21:ad:61:42:17:f1:93:26:48:dc:77:25:e9:97:ba:
e2:fd:d6:36:0e:90:57:ea:ec:bb:c2:c1:00:d8:3a:90:b3:8e:
28:24:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:04 2023 by rpki-client on console-ams.rpki-client.org