Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/VV8gGJJCWn2Uu5p6OAqdagDFst0.roa
File: VV8gGJJCWn2Uu5p6OAqdagDFst0.roa (raw, json)
Hash identifier: nRvjbJG4OXRpjeWX+0c8/mssK2aLyic74q3mAShYwf4=
Subject key identifier: 55:5F:20:18:92:42:5A:7D:94:BB:9A:7A:38:0A:9D:6A:00:C5:B2:DD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018281CF48EB90FA6F61A5CEACD5B7773862
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/VV8gGJJCWn2Uu5p6OAqdagDFst0.roa
Signing time: Tue 09 Aug 2022 08:53:41 +0000
ROA not before: Tue 09 Aug 2022 08:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 194.110.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:cf:48:eb:90:fa:6f:61:a5:ce:ac:d5:b7:77:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 9 08:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=555f201892425a7d94bb9a7a380a9d6a00c5b2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:0b:f7:97:cb:24:2c:ab:0c:f6:37:4a:bc:
fa:fd:f5:0f:58:db:b7:81:31:52:6c:e9:70:68:48:
72:62:2d:4b:9e:b5:64:39:5d:be:60:ab:15:a6:f6:
9c:14:37:f9:11:de:bd:3c:9e:34:d8:b1:8d:52:17:
38:48:13:da:57:00:ca:28:b3:c7:09:92:96:97:51:
46:44:ff:bf:7a:06:a3:b3:ce:7e:5a:4c:34:a7:5d:
68:e8:21:02:56:ad:ac:ff:03:86:1e:65:b5:79:cd:
4b:5a:bf:88:99:91:dc:a0:8f:1c:3e:e8:78:cd:c1:
92:52:07:4c:49:93:29:98:63:bb:1b:5e:b9:b8:4b:
0f:06:2e:fb:ef:e8:fe:c6:0c:21:cc:ef:ab:35:e8:
0a:7a:83:4a:29:2d:b3:fd:93:d7:62:75:4f:25:16:
72:b4:a3:a8:1a:f4:29:d0:21:d8:40:c7:b0:46:73:
96:32:2f:f3:89:f6:da:75:0b:0a:b7:da:9a:d7:c8:
4d:10:cc:f3:82:a4:85:ad:48:d8:a1:03:92:1d:46:
8e:18:53:29:73:32:0b:d0:9f:de:48:48:a4:ed:34:
d2:ad:64:79:2e:8e:96:09:82:c9:e1:60:be:91:da:
91:2f:52:01:32:a5:5d:bc:24:0f:2b:eb:ed:c1:9c:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:20:18:92:42:5A:7D:94:BB:9A:7A:38:0A:9D:6A:00:C5:B2:DD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/VV8gGJJCWn2Uu5p6OAqdagDFst0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.150.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b1:77:6d:34:ad:0f:e1:05:80:20:bd:03:55:fd:8b:b7:d4:
25:95:a8:86:d8:14:d7:ea:15:e0:dd:8b:05:f4:10:3b:0d:ef:
ad:1c:cd:10:76:87:e6:fa:b6:8d:19:b9:07:d9:88:df:51:b7:
1c:3c:fe:11:4b:39:92:02:d8:78:8b:80:75:97:63:f1:a4:b7:
fd:ad:25:69:15:2c:2c:87:69:0d:fd:88:f7:be:f5:e6:d9:00:
37:3d:3c:f4:07:d7:61:ac:07:8b:e5:40:ca:20:da:8a:f3:b2:
57:cb:79:4d:f4:61:dc:5c:58:7e:ac:76:44:12:b2:fd:00:13:
0f:55:f3:c6:94:7d:67:6f:34:b8:64:f4:30:22:b2:6c:57:10:
83:ea:fb:c9:75:bd:f3:a3:6d:c5:53:e7:8b:36:6f:17:55:64:
38:a1:23:20:fe:d9:0a:1a:bc:c8:27:e0:28:42:43:4f:b7:ce:
24:91:d7:4d:bb:b8:95:0f:c3:d5:a1:0f:72:ad:29:b9:53:a5:
81:03:f9:16:9e:2a:01:1e:d2:f8:be:d4:5d:24:f7:1d:19:86:
96:79:e7:c4:8d:5c:0c:c2:ee:16:f9:61:ec:ab:92:7d:f3:c2:
5a:7e:7d:58:0a:2e:8c:2b:50:54:2d:ac:73:f5:5c:c0:13:36:
8b:eb:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org