Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ViVot72zmYmzY_3dS3zmXxBWBU8.roa
File: ViVot72zmYmzY_3dS3zmXxBWBU8.roa (raw, json)
Hash identifier: RCFn+D6jyLrkDMp3w99cjVRdTWK+JEKOzctoQP34qCE=
Subject key identifier: 56:25:68:B7:BD:B3:99:89:B3:63:FD:DD:4B:7C:E6:5F:10:56:05:4F
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0680F76D
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ViVot72zmYmzY_3dS3zmXxBWBU8.roa
Signing time: Tue 12 Apr 2022 17:04:13 +0000
ROA not before: Tue 12 Apr 2022 17:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109115245 (0x680f76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Apr 12 17:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=562568b7bdb39989b363fddd4b7ce65f1056054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:a3:e7:ed:48:1a:6c:33:08:f3:b4:87:51:
5b:88:ed:c2:85:02:e5:9d:ea:f4:b3:9f:27:14:d9:
7e:62:06:ba:f2:fb:8b:62:2a:dc:f1:18:5f:f5:20:
1b:f3:4f:6e:dd:85:43:fe:a2:57:58:b9:93:b2:c5:
1f:65:35:21:1b:a5:86:e6:81:2b:24:fb:da:49:01:
2b:a5:be:2a:c2:86:5b:82:1f:00:80:1f:fd:6c:68:
f9:4c:57:69:b7:6e:c2:16:f8:7c:a8:a5:e5:a7:a8:
7f:da:91:3a:5b:61:ce:1a:4a:93:23:b9:b2:9b:99:
7e:0c:10:01:98:df:aa:87:86:3e:98:2c:49:ea:4c:
e9:60:16:0a:89:13:f5:bb:ee:34:75:d8:cb:7f:76:
a8:17:c5:90:46:6b:2f:1b:f0:46:0e:76:80:4b:94:
59:15:c3:a5:46:2f:21:5a:69:81:78:b2:da:7d:f0:
50:7b:3c:c2:73:a0:d6:05:59:d9:c8:cb:1a:5a:31:
09:a1:51:14:b9:f6:77:21:2f:ec:84:16:d0:34:65:
09:98:b2:6d:22:31:68:57:08:4b:b3:7a:c5:99:b6:
88:d1:cc:f4:3e:95:f8:9b:b1:91:23:92:7e:6b:17:
59:65:4a:5d:93:eb:cc:fe:21:1d:ca:31:d5:cb:2d:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:68:B7:BD:B3:99:89:B3:63:FD:DD:4B:7C:E6:5F:10:56:05:4F
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ViVot72zmYmzY_3dS3zmXxBWBU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1a:c6:3f:ca:4d:05:f3:5d:61:da:3a:18:14:60:3a:6e:27:
aa:f5:5c:d2:62:e4:86:e1:e9:b0:9c:c0:88:b1:1b:82:c3:55:
83:75:ac:df:c8:df:25:10:96:ee:23:f1:c5:d0:6e:14:de:2c:
f5:f1:98:ed:d2:fd:0a:82:45:73:18:ee:32:8d:b1:10:ee:f7:
58:bc:0e:89:1f:cb:08:48:0d:26:73:2f:50:ee:f5:4c:61:ae:
ff:28:35:b3:30:1e:d3:d0:60:76:b3:04:a4:6b:bb:46:b8:e8:
7f:58:9d:18:06:1a:2c:20:6b:f7:ae:9b:e8:df:71:59:b0:eb:
53:c7:a2:41:d8:c7:d2:e7:47:c5:ac:c2:98:b9:6d:6e:cd:90:
97:c3:5e:17:73:5d:2f:43:9b:c5:48:70:52:99:09:e4:fc:d3:
e7:ad:ae:e7:49:dc:50:80:5f:67:e3:64:fc:60:9b:c9:fd:20:
02:39:a7:1c:74:e9:b1:a1:2c:a9:10:8e:ac:81:75:6c:dc:33:
ff:72:5a:e2:90:83:02:0a:f9:8a:d9:41:ec:67:30:b2:79:1a:
bf:62:ce:63:8e:55:97:26:7f:ef:ce:69:f1:f6:7f:09:05:35:
31:8f:d2:49:00:7c:a6:5c:f5:89:0b:ac:e2:1b:df:04:46:b0:
bf:42:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org