Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/VpOGVh8YK5SSNJafeHIchW4YHqI.roa
File: VpOGVh8YK5SSNJafeHIchW4YHqI.roa (raw, json)
Hash identifier: h/P/a00TQOaD99Fu2LjBJwEAZC6TYnbTre9291C89n0=
Subject key identifier: 56:93:86:56:1F:18:2B:94:92:34:96:9F:78:72:1C:85:6E:18:1E:A2
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 08F0D14C
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/VpOGVh8YK5SSNJafeHIchW4YHqI.roa
Signing time: Sat 01 Jan 2022 06:59:43 +0000
ROA not before: Sat 01 Jan 2022 06:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44459
IP address blocks: 185.182.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149999948 (0x8f0d14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jan 1 06:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=569386561f182b949234969f78721c856e181ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:ba:f8:bd:8e:4f:ed:8f:7f:44:59:0c:52:
88:ab:e6:ec:fb:a4:ad:55:12:e6:d8:17:06:72:49:
67:36:c2:fa:46:28:de:c8:ff:cc:40:30:ea:97:4b:
db:ee:8d:d1:5b:1e:88:d0:6e:70:d1:8c:b4:3c:03:
0c:5d:e8:dd:5c:ad:9d:c1:bf:9e:5d:28:a1:14:2e:
ef:0f:75:20:bf:33:78:1a:af:a1:f4:ad:57:fa:a5:
29:22:02:2f:92:7a:37:c4:5d:12:32:81:b4:06:a6:
33:6d:4c:e7:4f:70:91:89:40:0c:bf:d3:49:c2:51:
fa:63:9f:e7:21:6a:57:b2:dd:4e:3f:5a:59:ae:05:
2b:4a:57:a1:2c:ba:22:a0:00:ad:4b:57:0b:fa:e9:
f4:34:bf:dd:d1:23:94:6a:d3:9d:98:91:2c:a5:18:
20:f9:cd:74:ce:67:2f:83:84:54:55:8c:0c:3b:82:
10:fb:1c:92:0b:33:03:5d:3c:33:c1:31:cc:0e:36:
94:71:43:8d:99:a8:5f:53:ea:dd:3c:9e:7a:94:51:
09:52:36:cb:4f:8c:7d:82:de:85:51:e6:36:13:1e:
a0:27:8f:be:0c:db:f7:e0:9d:b1:2b:ca:11:ba:fc:
ae:85:1e:fb:57:03:63:74:53:27:58:81:77:88:71:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:86:56:1F:18:2B:94:92:34:96:9F:78:72:1C:85:6E:18:1E:A2
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/VpOGVh8YK5SSNJafeHIchW4YHqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:81:60:b4:f1:68:f4:da:b1:1d:7b:60:e2:aa:91:15:03:04:
ec:99:3e:65:a4:80:5d:5d:f7:97:e4:45:43:f9:9d:2f:72:f8:
e5:43:6b:96:ff:ba:02:a7:ab:ea:d4:1f:8d:24:24:7f:56:cc:
b1:bc:44:4c:02:bf:ab:33:e7:25:5f:54:78:0c:4e:c8:cd:dd:
b0:72:52:fb:ba:88:0e:3d:d9:a9:77:9e:f7:88:9c:9e:3f:5a:
da:b5:90:37:21:38:92:17:0e:9e:24:9b:93:d5:af:6d:69:c1:
fb:60:92:6f:ac:2e:07:fc:dd:db:d4:2a:cf:ba:35:bc:ad:f9:
e3:6e:63:cd:3e:d7:27:7a:ea:24:22:27:b4:6c:c3:a7:0b:72:
10:5f:35:0e:1b:ce:d2:74:7f:a3:f9:47:07:98:84:b4:7a:90:
41:a0:30:10:b5:a9:ec:08:30:f5:d2:fa:47:12:04:78:ae:a2:
96:2b:d2:b4:99:07:dc:ba:b9:99:91:7c:a4:a0:06:60:dd:f0:
cd:5b:e6:42:22:e7:2c:89:e3:34:da:d0:fa:13:0f:78:a8:bb:
34:66:21:cf:d1:c2:ce:68:1f:7d:59:40:cb:5f:8b:4e:be:8a:
60:6e:23:ca:32:d3:ce:83:63:52:5a:50:6f:da:4c:0d:62:ab:
5b:64:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:24 2024 by rpki-client on console-ams.rpki-client.org