Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VezNFBW-Y-2tnk5So-yoTB-E68Y.roa
File: VezNFBW-Y-2tnk5So-yoTB-E68Y.roa (raw, json)
Hash identifier: ZrqSJimdUh2YvbGYc66nUc49fbMxaODKe0Fz+XmXwt0=
Subject key identifier: 55:EC:CD:14:15:BE:63:ED:AD:9E:4E:52:A3:EC:A8:4C:1F:84:EB:C6
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C4E4C30
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VezNFBW-Y-2tnk5So-yoTB-E68Y.roa
Signing time: Sat 28 May 2022 10:08:13 +0000
ROA not before: Sat 28 May 2022 10:08:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 87.248.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474893360 (0x1c4e4c30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 28 10:08:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55eccd1415be63edad9e4e52a3eca84c1f84ebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:b8:ca:cd:cf:ce:aa:5f:c7:69:a8:be:bc:
af:be:3d:bc:df:04:c9:11:6f:4d:50:33:42:fb:ea:
7f:8e:83:0f:04:03:ed:23:2e:61:56:86:e5:9c:8b:
30:43:21:2b:7f:db:8e:14:a1:50:e8:1f:77:af:0d:
a1:d0:1c:83:bf:d8:1b:b8:8f:9b:50:b7:ec:fc:f0:
32:28:83:64:d8:f9:bc:65:f0:7f:f3:3d:89:24:b9:
b0:73:04:6f:c7:ad:2d:a7:c6:95:f5:5d:77:09:2a:
e6:54:c1:a1:11:e0:11:e4:33:83:83:a4:49:9b:57:
8e:2d:9f:e5:ea:62:cd:5f:a7:37:76:7f:68:d1:03:
09:42:73:5a:23:d7:62:0c:34:cd:d4:48:3a:a9:80:
94:35:fe:98:ee:70:e7:57:79:ef:51:c3:83:e2:cc:
a6:46:19:e9:03:fd:42:ac:e1:60:36:a9:9c:dd:b4:
5e:6b:1a:d5:92:40:85:0b:8a:2e:04:5a:fe:8d:8a:
9a:0e:98:5f:24:ff:c7:3d:e6:c0:05:a0:f8:0b:cc:
70:ac:ee:0d:5d:a0:eb:8a:03:7f:03:52:a0:a6:0c:
1e:37:64:e5:97:d9:9c:26:26:04:49:d6:36:eb:78:
03:40:17:bc:16:25:0c:30:4e:9f:fe:90:4d:6f:61:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EC:CD:14:15:BE:63:ED:AD:9E:4E:52:A3:EC:A8:4C:1F:84:EB:C6
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VezNFBW-Y-2tnk5So-yoTB-E68Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cd:fd:ce:88:41:ad:33:7f:a8:9e:52:43:0a:92:b6:9d:52:
d0:8c:ba:b0:de:97:9b:60:98:9c:40:38:e5:9f:19:4b:b1:d2:
20:a3:09:07:a6:77:5e:e3:57:03:24:c6:8a:1e:dc:64:77:dc:
5a:d1:92:59:3d:88:50:0a:2d:7c:29:83:e9:da:c5:95:60:c7:
05:c8:13:3e:0d:3d:b0:96:41:bb:8a:fd:9c:55:f7:77:94:82:
be:c0:e0:7b:3b:04:e4:26:2e:ce:cf:4f:5e:9f:8f:cc:d7:cd:
8c:7f:63:2e:4e:a9:3d:a4:4d:da:09:df:e1:9e:da:20:5a:15:
e6:f7:44:4b:c9:95:a3:0c:11:ca:ef:dd:1d:79:9b:de:ed:29:
92:81:2e:0d:58:69:0c:87:00:6e:9f:ec:e8:02:7d:63:47:cc:
2c:70:ce:82:21:12:19:d5:95:89:fc:04:fc:9f:6d:50:1d:12:
fe:08:37:9b:3a:37:7c:c6:cb:51:ee:b7:00:50:18:b8:10:46:
f2:69:7c:71:bd:8f:e3:ac:78:b3:66:19:0a:9d:47:0a:af:53:
9b:bd:19:44:5d:12:de:af:c1:ed:22:75:50:3a:b6:75:75:f1:
f7:af:e1:17:01:be:0e:03:68:77:df:77:58:e2:68:98:12:12:
fe:06:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org