Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/vqCkhrtRn4NsEw1GNs_ZObJdPa8.roa
File: vqCkhrtRn4NsEw1GNs_ZObJdPa8.roa (raw, json)
Hash identifier: 0so4jQbyRgKLjl2RUXwv5OMYIRgb22wI42zph/T4WZs=
Subject key identifier: BE:A0:A4:86:BB:51:9F:83:6C:13:0D:46:36:CF:D9:39:B2:5D:3D:AF
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0183E1C4E023C198458259E69730A76B922C
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/vqCkhrtRn4NsEw1GNs_ZObJdPa8.roa
Signing time: Sun 16 Oct 2022 17:08:39 +0000
ROA not before: Sun 16 Oct 2022 17:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209279
IP address blocks: 195.182.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e1:c4:e0:23:c1:98:45:82:59:e6:97:30:a7:6b:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Oct 16 17:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bea0a486bb519f836c130d4636cfd939b25d3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:ca:e1:ac:7f:16:ba:03:c7:4f:97:e8:31:
d5:1e:bd:1f:cc:a0:2f:7c:0a:27:11:b3:c4:37:4a:
00:12:97:6b:c0:c2:ce:25:1e:34:a8:02:7a:fc:54:
5c:70:5a:32:80:49:d9:20:44:db:d1:95:b1:1e:89:
c1:78:1e:32:6d:1f:33:5c:a2:3d:82:10:0e:98:78:
3c:2e:cb:5f:0c:8a:83:33:44:d3:90:b0:20:0b:d4:
e6:ca:31:c0:67:5f:69:b7:9f:c4:61:21:19:42:0c:
a8:ba:d7:a4:58:03:b9:cc:16:fe:8a:40:e7:04:f5:
57:b3:8e:dd:c6:78:34:4d:0e:18:5b:ae:80:37:4b:
da:f4:1b:08:93:ba:63:32:e6:69:d8:30:b7:8a:e4:
67:6e:89:f3:8e:89:4a:3f:53:e7:bb:36:91:e9:3c:
cd:96:67:bc:e2:ac:74:12:f2:0a:34:57:fe:1a:57:
76:5b:7e:09:59:ae:fb:65:54:2d:92:f6:e0:a6:4f:
90:32:b8:14:8c:2b:9a:fd:78:70:bf:aa:b7:0d:d3:
d7:04:c2:fd:36:5b:e9:d4:f9:da:a2:c5:ce:30:fa:
aa:95:65:aa:32:55:f0:10:da:c5:0a:c4:ac:c2:d3:
46:ba:1d:95:a0:fe:9b:7a:ae:71:26:59:cb:fc:8a:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:A4:86:BB:51:9F:83:6C:13:0D:46:36:CF:D9:39:B2:5D:3D:AF
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/vqCkhrtRn4NsEw1GNs_ZObJdPa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.38.0/24
Signature Algorithm: sha256WithRSAEncryption
73:13:fb:fe:d9:39:5f:be:66:13:24:aa:1a:d7:66:bc:80:68:
97:1a:fe:86:5e:c6:61:98:a0:1c:12:ec:28:9c:2d:3b:a6:30:
92:42:1e:34:a5:cc:86:03:d8:b0:da:51:97:30:a7:73:2d:b3:
8e:46:9d:18:c2:47:ea:8b:cf:4d:f2:63:3c:5d:fa:94:9b:4e:
4a:d1:39:f5:ff:37:47:2b:fa:7d:a2:2b:58:ad:e0:82:f0:de:
af:d4:49:4c:48:8d:22:bb:6d:09:b7:66:af:a7:83:47:5b:15:
d3:7d:dc:ab:7c:b6:1b:ff:b0:a2:b3:27:e5:b3:b2:2f:fa:ed:
86:c4:8c:f8:a8:4e:d7:62:9d:57:76:d0:5d:f8:40:1f:b3:85:
83:0d:a5:56:e9:83:d7:9e:34:81:5e:fb:63:6e:48:15:b6:75:
34:9c:59:a7:3a:e5:7a:fe:08:b3:40:8a:d9:c0:8d:6a:70:b9:
80:5a:99:25:df:1b:7e:bc:10:83:71:07:86:79:2f:e6:90:49:
0e:28:22:14:73:da:d3:f8:0d:34:93:62:89:85:74:65:72:d8:
75:d1:cb:b9:7e:51:2e:1f:78:50:bc:c3:ca:df:f3:1e:51:e6:
c9:79:b8:0b:27:46:65:60:3e:84:8c:e7:87:54:55:b0:b7:c0:
aa:7f:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:47 2023 by rpki-client on console-ams.rpki-client.org