Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VrtxheAQt7c0C25n4OvRbzIIow0.roa
File: VrtxheAQt7c0C25n4OvRbzIIow0.roa (raw, json)
Hash identifier: Y3OZzNPvhynUYG/DzSVo4cg/mS1ktaw1FGPSufm7yjY=
Subject key identifier: 56:BB:71:85:E0:10:B7:B7:34:0B:6E:67:E0:EB:D1:6F:32:08:A3:0D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183B8496AE7B19C72F81DA84B75F6700345
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VrtxheAQt7c0C25n4OvRbzIIow0.roa
Signing time: Sat 08 Oct 2022 15:49:22 +0000
ROA not before: Sat 08 Oct 2022 15:49:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 91.242.105.0/24 maxlen: 24
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:49:6a:e7:b1:9c:72:f8:1d:a8:4b:75:f6:70:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 8 15:49:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56bb7185e010b7b7340b6e67e0ebd16f3208a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:48:bd:84:d8:8c:14:9b:c7:80:d1:0c:33:
1c:f7:38:75:f9:a5:79:ce:d8:a1:d7:d7:88:b3:ee:
07:5a:80:ac:4d:32:51:17:68:11:d5:4a:68:8e:04:
43:ca:59:68:db:c3:f7:e2:6d:8b:9e:28:4e:ee:1a:
6f:8c:45:76:f4:67:a6:0a:c0:ba:c0:a4:89:a1:c0:
a4:be:13:e2:2b:7e:ab:86:7e:89:2c:0e:93:50:02:
c6:74:b6:cf:95:e3:a0:c0:b9:7d:a9:0b:14:70:e0:
fc:72:b5:bc:e0:5c:b1:61:e8:36:5a:af:f9:fa:16:
65:77:b2:82:b8:ba:44:e9:11:b5:42:4e:d7:74:2c:
0f:27:7c:71:9f:37:80:07:27:34:3a:55:fb:d0:e8:
0d:55:98:93:b8:1d:2f:aa:9f:c7:c1:b4:5f:f6:97:
f0:f2:4a:a7:d8:8a:33:a0:75:dd:c1:2a:35:77:56:
16:d6:a5:ad:44:ae:b5:c7:6c:06:de:5e:75:66:79:
87:29:d6:7d:57:bf:88:91:b1:2d:ad:42:f9:cb:d2:
64:c0:8e:15:c8:c8:86:a4:ce:32:2e:3e:68:24:10:
e2:51:5d:11:0b:80:46:4f:44:f5:ee:d9:bc:a0:42:
00:5e:18:3e:bb:b1:2d:58:3d:95:d0:cd:74:68:09:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:71:85:E0:10:B7:B7:34:0B:6E:67:E0:EB:D1:6F:32:08:A3:0D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VrtxheAQt7c0C25n4OvRbzIIow0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
70:20:b7:8a:c8:5c:c6:e2:a7:0f:e4:b2:dd:35:0b:85:dc:bf:
e3:12:1a:63:80:ea:34:ae:d9:86:79:8f:e8:97:39:42:bb:8f:
1b:74:44:60:b9:93:ae:27:5e:44:e8:20:47:a2:90:f1:2f:5b:
a7:8a:40:c0:5e:50:ea:da:e0:b0:2a:76:e4:7e:0b:70:75:a0:
79:23:b4:fa:71:28:9c:80:b0:99:77:0e:0e:ed:cf:3b:f6:01:
ea:8a:dd:70:1c:4a:0e:43:0a:8c:af:85:cd:f9:33:1d:3a:eb:
4f:bc:d4:97:15:39:c9:b5:16:39:66:aa:59:ad:eb:30:94:12:
05:51:a8:92:7b:fc:d8:26:6a:40:42:00:95:f8:6b:3a:11:9e:
ae:07:bd:0a:c1:b6:b3:7a:4d:45:8a:ca:da:c5:03:33:d6:70:
9d:2f:81:c3:be:e4:26:f6:a5:35:53:59:21:93:ca:a4:fe:d6:
c5:3f:fa:46:ab:b2:a8:92:6a:16:54:11:97:87:3b:df:0b:ee:
e4:e8:1b:86:8c:2e:b0:83:26:f6:2e:4e:4b:2c:da:ab:85:d4:
03:e0:e3:97:2c:c0:be:a8:63:6e:38:95:c2:96:6b:8e:97:34:
2a:82:eb:4e:0e:c2:c8:ab:bc:e7:bf:8e:a0:f7:1b:e8:3c:61:
0f:02:21:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYO4SWrnsZxy+B2oS3X2cANFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjIxMDA4MTU0OTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJiNzE4NWUwMTBiN2I3MzQwYjZlNjdlMGViZDE2ZjMyMDhhMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQxIvYTYjBSbx4DRDDMc9zh1+aV5
ztih19eIs+4HWoCsTTJRF2gR1UpojgRDyllo28P34m2LnihO7hpvjEV29GemCsC6
wKSJocCkvhPiK36rhn6JLA6TUALGdLbPleOgwLl9qQsUcOD8crW84FyxYeg2Wq/5
+hZld7KCuLpE6RG1Qk7XdCwPJ3xxnzeAByc0OlX70OgNVZiTuB0vqp/HwbRf9pfw
8kqn2IozoHXdwSo1d1YW1qWtRK61x2wG3l51ZnmHKdZ9V7+IkbEtrUL5y9JkwI4V
yMiGpM4yLj5oJBDiUV0RC4BGT0T17tm8oEIAXhg+u7EtWD2V0M10aAkDOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFa7cYXgELe3NAtuZ+Dr0W8yCKMNMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvVnJ0eGhlQVF0N2MwQzI1bjRPdlJieklJb3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/JAAwQA
W/JpMA0GCSqGSIb3DQEBCwUAA4IBAQBwILeKyFzG4qcP5LLdNQuF3L/jEhpjgOo0
rtmGeY/olzlCu48bdERguZOuJ15E6CBHopDxL1unikDAXlDq2uCwKnbkfgtwdaB5
I7T6cSicgLCZdw4O7c879gHqit1wHEoOQwqMr4XN+TMdOutPvNSXFTnJtRY5ZqpZ
reswlBIFUaiSe/zYJmpAQgCV+Gs6EZ6uB70Kwbazek1FisraxQMz1nCdL4HDvuQm
9qU1U1khk8qk/tbFP/pGq7KokmoWVBGXhzvfC+7k6BuGjC6wgyb2Lk5LLNqrhdQD
4OOXLMC+qGNuOJXClmuOlzQqgutODsLIq7znv46g9xvoPGEPAiEQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org