Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/VaT09avWB3bnVfa1ZTiXLDgyccE.roa
File: VaT09avWB3bnVfa1ZTiXLDgyccE.roa (raw, json)
Hash identifier: 7EohTq/vwUs0Jbnp0L3RRW5NgqO2SW+cDd/UJv+S5xo=
Subject key identifier: 55:A4:F4:F5:AB:D6:07:76:E7:55:F6:B5:65:38:97:2C:38:32:71:C1
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 14BA2BE5
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/VaT09avWB3bnVfa1ZTiXLDgyccE.roa
Signing time: Wed 13 Apr 2022 15:13:19 +0000
ROA not before: Wed 13 Apr 2022 15:13:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.172.0/24 maxlen: 24
185.120.174.0/24 maxlen: 24
185.120.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347745253 (0x14ba2be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Apr 13 15:13:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55a4f4f5abd60776e755f6b56538972c383271c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:85:a6:1b:13:b2:a3:5e:c0:a8:72:9c:1c:
13:89:46:c6:a8:bd:f9:1a:62:d5:32:b2:ce:9d:1a:
24:b6:6b:8e:16:35:f9:53:c0:33:c5:54:ff:24:39:
70:10:db:66:38:d9:c6:45:b1:6d:b6:6a:92:b4:7a:
de:8e:a1:38:60:67:8c:c8:69:04:f4:db:ac:48:10:
91:9a:ce:4e:cb:36:18:25:31:48:9f:ae:d2:da:a3:
23:af:bd:d9:2f:8c:68:96:76:68:55:68:61:1b:5b:
4c:0a:6c:2a:65:62:ed:70:51:01:01:78:78:49:09:
f5:5f:d2:03:be:fa:45:14:cc:e0:57:f4:86:d9:03:
ba:83:56:8d:2d:a2:d3:f5:c7:89:da:29:9f:f7:e9:
20:36:54:ee:3f:c2:6e:0a:9e:d2:60:fd:47:3f:c8:
75:4f:79:b1:08:67:c6:df:e7:20:2c:07:7f:9c:63:
62:30:51:0f:47:1b:93:71:d4:9d:e3:9b:4b:b6:67:
f0:9c:13:74:23:31:a0:1a:1e:9f:ac:30:6c:d2:da:
d3:9e:3a:75:b5:ce:fa:bb:9c:8f:e8:04:ce:21:77:
e9:4d:24:a1:04:41:55:59:2c:21:72:a6:5e:91:67:
a8:5c:54:42:be:5f:41:f5:0c:90:62:27:a1:8b:40:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:F4:F5:AB:D6:07:76:E7:55:F6:B5:65:38:97:2C:38:32:71:C1
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/VaT09avWB3bnVfa1ZTiXLDgyccE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0-185.120.174.255
Signature Algorithm: sha256WithRSAEncryption
27:9f:91:6a:52:58:2b:65:ca:27:bb:55:69:5e:03:0c:0d:79:
30:96:21:0c:e5:88:9b:1e:5c:25:04:69:fe:b2:cd:a5:3b:2b:
3c:a3:65:a5:c0:a5:d6:17:da:b2:03:02:9e:b7:92:5f:71:1e:
2b:da:6d:42:31:6f:ad:b6:2e:88:05:e4:8d:b3:43:75:3f:d2:
62:44:b4:eb:61:2f:95:02:3e:28:fd:f8:91:df:ef:ca:7a:51:
f8:2b:fc:08:19:62:11:b9:66:44:60:26:98:f5:e9:1c:79:1b:
0f:21:c8:92:c0:3a:98:d8:86:70:cb:fb:b0:be:29:97:e5:81:
69:83:25:93:8b:bf:79:2f:24:00:0f:5c:e0:5f:e9:44:b0:d6:
f5:d0:40:44:af:d4:96:96:0e:45:ae:42:24:b0:68:cb:7b:8e:
da:07:9e:b9:60:3b:98:be:b6:bb:12:8a:c3:46:cf:0f:7e:ff:
a9:73:9c:c3:6b:25:a2:ef:89:8f:87:38:27:3a:95:95:05:b4:
0d:68:e1:49:43:03:a8:d7:86:4f:08:58:55:c3:fa:cf:3f:76:
7f:45:7c:cc:b8:85:fe:81:36:50:2b:53:ff:90:29:b1:27:f4:
d5:49:f9:e4:7e:66:ca:24:e1:d0:87:15:35:95:b7:f0:8b:3e:
6d:98:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-fra.rpki-client.org