Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa
File: VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa (raw, json)
Hash identifier: 2tbLONPbbdSld4DhlCDnz6m1yCEZicYAU22ds0FT8Kc=
Subject key identifier: 54:50:E8:23:34:46:5F:8B:94:FA:2A:A1:08:24:D9:93:4A:4D:48:FC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0182B7DB409FF2704377B8FA473ACF564650
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa
Signing time: Fri 19 Aug 2022 20:46:15 +0000
ROA not before: Fri 19 Aug 2022 20:46:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 79.175.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:db:40:9f:f2:70:43:77:b8:fa:47:3a:cf:56:46:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 19 20:46:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5450e82334465f8b94fa2aa10824d9934a4d48fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:fe:c1:75:5c:60:21:45:46:48:37:23:0e:
68:c7:a3:46:6f:4b:5d:ce:93:0c:4a:f3:96:c2:4a:
aa:53:87:3f:53:ed:8c:22:d4:d8:62:51:ab:c4:87:
3a:34:b3:c6:3e:34:e8:7c:c1:64:2a:f8:13:d6:0f:
cf:28:14:86:cf:98:ee:b9:45:57:63:d1:bf:b3:cb:
83:24:ad:e7:8e:84:ff:c0:21:b1:ea:69:39:8b:c7:
93:f7:6b:a6:1e:75:a9:7d:f2:5e:5f:02:80:8d:f2:
b7:b1:6e:47:e5:63:1b:93:ed:ab:ae:ab:ea:77:59:
bf:6b:46:7b:08:2e:6d:30:4b:98:0e:18:c3:ef:14:
c2:3a:86:08:19:39:fe:29:4a:be:d1:7b:d0:ae:9c:
6c:8a:2c:40:43:b8:81:f9:18:cd:c8:41:3b:76:73:
61:e8:93:0d:20:79:c1:3b:06:26:ea:f7:ea:b0:6c:
91:28:51:ea:8c:87:06:64:62:7b:c4:24:58:6e:0c:
b6:df:f9:9e:74:19:f7:14:af:55:18:65:cf:87:87:
87:7c:6e:97:c6:4b:e5:f2:51:c1:11:ce:c9:58:dd:
9b:aa:dc:01:8c:d0:7b:d6:f4:c8:33:60:54:f6:45:
d4:88:9b:52:26:3f:76:5a:a4:cb:0f:93:0f:c0:cc:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:E8:23:34:46:5F:8B:94:FA:2A:A1:08:24:D9:93:4A:4D:48:FC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/VFDoIzRGX4uU-iqhCCTZk0pNSPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f4:b2:f1:45:e3:a6:3c:73:ee:27:34:a6:b4:b4:ef:78:ec:
01:35:1a:0b:20:d0:b1:fe:74:01:71:5b:f0:f1:27:60:78:4c:
43:34:c3:df:dc:c5:8a:d6:b3:61:6d:07:ff:f1:59:76:7a:42:
86:18:11:c3:05:7c:ff:4d:35:b1:fe:00:95:37:0f:34:b8:00:
e2:3a:ee:f5:6d:6e:ad:09:90:26:f4:d0:1a:84:97:57:04:79:
66:a3:78:a3:80:c4:68:2c:79:fc:a4:a4:07:b8:2f:4a:5b:ab:
15:e8:1b:81:b7:f4:84:e5:54:6a:49:c3:27:ba:03:96:d8:6a:
ca:65:4a:b5:b9:27:b6:95:06:34:a0:3a:4f:e4:79:95:ba:66:
46:a6:c5:b1:cb:ee:e4:9a:b7:61:28:58:d0:09:0a:40:29:45:
95:21:51:d9:9e:e8:9d:d0:c0:a8:35:49:0a:4c:05:be:8d:f0:
77:d7:00:0e:1d:dc:c7:34:59:aa:c2:c3:d2:bb:1d:da:74:4c:
98:91:63:e4:04:ce:ef:ff:0d:ba:1c:d6:4d:86:21:7d:5f:77:
91:41:75:ad:aa:37:58:98:99:07:7f:54:79:b5:3d:08:aa:95:
20:27:96:73:03:ed:fe:85:2e:81:b8:22:d2:fb:7b:f6:54:09:
21:60:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org