Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VirZU5HHUmVzh-CPLDvknO9AGCw.roa
File: VirZU5HHUmVzh-CPLDvknO9AGCw.roa (raw, json)
Hash identifier: sBANXFQEHIYS0Dtiwny4gTw1zuFKELHf7aqlzwztv/4=
Subject key identifier: 56:2A:D9:53:91:C7:52:65:73:87:E0:8F:2C:3B:E4:9C:EF:40:18:2C
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0183FF194DDC22FBD2CC5573714096C59E83
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VirZU5HHUmVzh-CPLDvknO9AGCw.roa
Signing time: Sat 22 Oct 2022 09:49:51 +0000
ROA not before: Sat 22 Oct 2022 09:49:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:19:4d:dc:22:fb:d2:cc:55:73:71:40:96:c5:9e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 22 09:49:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=562ad95391c752657387e08f2c3be49cef40182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:4c:57:86:8d:05:d4:ef:08:5d:a7:b3:7f:
63:82:96:26:74:93:ff:a4:28:6d:23:2b:76:5b:67:
48:63:f8:06:f8:7a:2a:26:4b:3a:cd:22:a9:7c:ea:
82:58:ed:c8:f0:3b:8b:06:60:1e:46:84:9f:6f:64:
aa:66:76:69:4b:dc:bd:dd:fb:09:ed:1f:89:91:8f:
c7:75:b9:8f:05:31:59:2d:e8:8f:71:07:49:5d:92:
2d:58:21:86:80:89:92:7c:22:f9:aa:26:51:d4:b5:
68:84:d3:1b:40:65:eb:33:61:ac:fc:13:f6:c9:0e:
15:64:34:69:72:f3:32:8e:9a:4e:ff:e5:3d:45:67:
64:b2:e4:ba:06:b3:87:03:66:b1:18:14:b7:7d:06:
60:4b:90:cf:a5:09:d1:a6:b6:23:0c:49:5c:73:45:
ba:2b:ed:19:5b:65:ff:0f:f0:f0:84:cb:b1:f5:c5:
aa:48:bc:37:5c:39:b2:76:8d:64:2f:c1:b1:e5:e0:
1c:1c:d2:e9:da:32:11:9f:bb:04:7b:3b:07:0c:ea:
38:c5:1d:a6:b9:f0:58:8f:59:d8:af:70:fd:be:4f:
b8:c3:fb:89:87:68:2a:68:07:78:99:c9:95:3c:de:
20:69:9b:d5:86:7a:62:6c:c9:d0:09:95:45:e9:a0:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:D9:53:91:C7:52:65:73:87:E0:8F:2C:3B:E4:9C:EF:40:18:2C
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VirZU5HHUmVzh-CPLDvknO9AGCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:22:d9:16:8a:ff:83:93:a2:05:d8:27:05:89:3c:c9:f8:81:
fd:94:8e:7c:5b:d7:e4:14:8a:82:6a:1d:85:ac:ac:0d:21:4d:
d0:18:c8:1d:31:94:82:e6:55:b3:05:41:f8:c9:7a:d2:e5:69:
9d:13:11:ed:8b:f8:6b:17:49:73:07:f9:c6:e2:b7:27:e6:20:
0c:58:06:46:c1:12:4e:71:23:0d:f3:ba:71:2f:48:c3:66:de:
9a:23:f2:65:2d:32:d2:d5:87:ce:a5:24:90:e4:e9:34:96:5c:
62:99:ed:b6:2f:0a:5c:6b:1e:e9:3b:90:40:51:1d:92:fb:2a:
70:b1:81:21:6a:36:2e:7c:27:5f:81:19:0f:8a:cd:03:b0:bc:
5b:2c:44:64:b0:a3:14:8d:6c:8a:70:36:e6:42:30:2b:b8:c8:
ef:61:21:48:14:de:88:af:a0:a6:a3:30:c4:85:62:3c:9d:19:
60:98:ff:1d:72:6b:bd:01:67:47:e6:77:67:0a:7e:4a:5b:df:
4a:2b:40:af:13:e8:fd:16:53:61:26:f5:84:79:aa:ed:14:47:
67:77:43:3c:34:69:df:37:34:15:6b:0c:5d:91:89:ab:f3:d8:
6a:69:9e:db:31:54:dc:68:bc:39:30:4b:2e:a3:8e:1d:54:8b:
f3:a9:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org