Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/vYqpDFN1q24_0aiKP4giSTEaFTY.roa
File: vYqpDFN1q24_0aiKP4giSTEaFTY.roa (raw, json)
Hash identifier: UU8Nu/1xlmv/yyq1M1Wggb+kezpXzOS/hd4OoJBa1rs=
Subject key identifier: BD:8A:A9:0C:53:75:AB:6E:3F:D1:A8:8A:3F:88:22:49:31:1A:15:36
Certificate issuer: /CN=09ed2bca014c2c44e90b844de89426223c390cf6
Certificate serial: C2D9A2
Authority key identifier: 09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/vYqpDFN1q24_0aiKP4giSTEaFTY.roa
Signing time: Thu 24 Mar 2022 09:19:59 +0000
ROA not before: Thu 24 Mar 2022 09:19:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 185.161.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12769698 (0xc2d9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ed2bca014c2c44e90b844de89426223c390cf6
Validity
Not Before: Mar 24 09:19:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd8aa90c5375ab6e3fd1a88a3f882249311a1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:8d:7a:38:d0:14:de:de:37:3d:77:cf:a5:
b6:72:38:75:0c:5f:1a:bf:f3:3d:2f:2b:33:23:16:
33:10:c1:41:a1:1e:e2:72:75:6e:60:9a:4c:45:58:
4a:f2:c9:3f:5c:81:ab:dc:67:30:26:1b:71:59:0b:
a0:42:97:50:b9:64:b0:b2:1c:81:53:4f:03:20:97:
a2:37:d3:c1:e8:0c:f5:1c:38:bf:06:e6:29:96:47:
cd:dc:0e:82:cc:70:46:c6:77:63:98:26:95:73:c0:
e5:55:47:eb:f4:45:ed:23:c3:14:df:a2:ba:f3:c4:
9b:f7:16:fb:36:01:6e:06:96:78:75:6a:e4:35:84:
8f:22:76:33:98:68:bc:9c:31:80:8e:b7:d7:93:ca:
f8:fa:34:c0:1a:d9:37:42:74:c8:31:8f:39:5f:ce:
be:02:8d:f3:63:70:2d:b4:48:2d:61:aa:13:4b:43:
89:f4:8a:4c:0c:f0:b5:d6:30:74:ce:5e:1f:78:b4:
81:4a:89:b9:55:8c:7c:c8:2c:14:c7:34:91:1e:73:
e3:42:98:15:e0:13:3b:08:49:65:c6:28:af:96:9e:
fd:3a:c5:b3:ed:11:e4:53:c1:cf:11:66:fc:11:1f:
a6:99:0d:01:c5:fb:76:77:83:56:76:bd:a3:25:16:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:A9:0C:53:75:AB:6E:3F:D1:A8:8A:3F:88:22:49:31:1A:15:36
X509v3 Authority Key Identifier:
keyid:09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/vYqpDFN1q24_0aiKP4giSTEaFTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a4:6e:25:84:43:39:97:7d:f4:a3:9f:5e:2b:c5:42:65:ae:
c7:5d:7e:86:96:5a:15:50:31:55:6e:4e:67:ed:21:22:ca:96:
ea:24:25:85:33:7c:44:77:d5:2c:ab:cc:7a:1b:19:55:b3:ed:
f1:2a:ae:08:6a:c5:3a:d7:be:24:9a:97:03:d0:de:3c:07:5e:
ec:1a:51:80:a6:0a:9f:2f:ca:9b:ab:b8:88:84:d9:f3:71:7a:
cb:4c:6f:cf:06:55:dd:18:72:de:94:9f:62:03:4b:09:5c:86:
0d:c9:cc:0a:5a:f8:70:8d:74:4d:2e:eb:09:53:f5:a5:e7:7a:
63:e2:37:ae:a6:82:f3:bb:05:53:62:f8:03:d4:35:ed:ff:cc:
3a:22:87:ec:cb:3b:c2:c1:14:8e:3d:dc:f1:3a:39:4a:51:e0:
31:56:ce:9c:a9:1d:b8:86:be:14:8b:79:a3:96:c5:2d:f1:fe:
fe:e2:8b:78:25:e1:48:72:62:42:5d:a6:e1:81:ae:97:a1:69:
12:8e:c9:5d:35:31:06:67:e5:7e:c5:50:ad:08:5d:26:05:32:
db:a6:27:f5:7e:b2:5f:cd:04:af:9b:82:fb:e8:6d:02:ae:55:
fc:59:2e:ee:e3:f6:5a:66:dc:e1:48:22:2a:f9:0b:e6:93:60:
92:24:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org