Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/VRr7D08Q2kL0C7E48jdeV0Nl-m0.roa
File: VRr7D08Q2kL0C7E48jdeV0Nl-m0.roa (raw, json)
Hash identifier: cozy0m5oVjvPiIS9hBQdAIsQS3RPbpKiaAomsgKnQgY=
Subject key identifier: 55:1A:FB:0F:4F:10:DA:42:F4:0B:B1:38:F2:37:5E:57:43:65:FA:6D
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 1D2659
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/VRr7D08Q2kL0C7E48jdeV0Nl-m0.roa
Signing time: Sat 01 Jan 2022 01:57:25 +0000
ROA not before: Sat 01 Jan 2022 01:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 185.26.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910361 (0x1d2659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jan 1 01:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=551afb0f4f10da42f40bb138f2375e574365fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:52:6f:d1:d3:94:19:15:d8:9d:f8:c3:83:
5a:27:94:e5:76:90:11:e2:6b:03:d0:8c:c3:60:3b:
92:40:e5:14:b7:e4:22:3f:9a:f7:cb:3b:0c:9b:52:
1b:18:c7:06:94:47:a5:09:b3:a9:bf:05:b2:8f:d7:
5d:72:b8:3a:6e:ad:c8:0e:14:5a:f7:84:3c:5a:e4:
6d:a8:45:59:e6:db:6e:ca:b4:f7:a8:27:d8:82:02:
53:0d:0a:1c:87:a8:4e:93:4f:30:b0:67:a9:df:36:
5c:f4:db:6b:05:57:1d:81:61:32:4f:69:be:fb:87:
1d:f0:f2:30:76:18:6f:87:50:95:69:21:ed:9c:0c:
9a:36:02:a4:9a:01:c7:55:b2:ca:32:75:ab:43:d6:
47:ee:a3:98:a3:83:34:b4:1e:75:5b:8a:f8:f1:53:
2c:4f:70:62:b2:26:62:70:db:1e:59:03:56:52:68:
1a:af:4b:aa:22:1b:00:c8:83:a1:8b:df:6e:9d:8e:
a4:f4:ad:3d:eb:21:e0:b9:53:72:09:4e:e7:be:92:
a4:d7:92:95:cb:aa:14:6e:b9:82:cf:34:64:d8:c0:
bc:6a:8b:d7:92:28:f5:14:09:73:ce:47:fc:6d:d6:
99:28:7b:f9:d2:c1:1f:65:df:12:ac:bc:85:38:37:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:FB:0F:4F:10:DA:42:F4:0B:B1:38:F2:37:5E:57:43:65:FA:6D
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/VRr7D08Q2kL0C7E48jdeV0Nl-m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.191.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a8:c7:75:20:92:c5:93:f5:af:31:e9:95:d2:1e:03:69:48:
42:bc:3d:7d:71:21:9f:42:84:82:4e:85:44:a5:18:f6:4f:d6:
09:20:25:58:91:74:53:af:4d:7f:8d:9c:62:57:b9:4f:d3:34:
cc:3a:96:64:5c:21:47:e6:1b:46:ab:c5:8f:2d:a7:10:67:83:
4c:e0:ab:a0:e5:a1:d3:5b:cb:4c:54:05:f7:80:3b:ae:65:e2:
25:bc:01:82:51:f2:a1:69:13:c0:37:17:5c:7e:fd:9e:79:7d:
12:e1:54:9e:34:c6:22:fa:85:3f:75:0c:ee:31:fc:ff:1c:41:
18:59:93:4c:32:ca:96:f1:da:41:a3:bf:4a:17:20:49:7d:f3:
87:da:18:48:db:b0:09:b9:74:47:f1:10:c0:d5:09:6d:7d:e6:
0f:d3:91:d8:88:61:1a:47:ef:38:ac:21:4f:35:e5:9e:98:c9:
e1:44:81:d8:bb:1b:6a:f1:05:ff:8f:90:7b:b3:77:3b:c1:a9:
2a:eb:8d:6d:b4:c1:bd:d1:3b:51:81:21:d3:ed:3e:e8:cf:98:
d8:89:3a:bb:55:a5:79:f1:8a:c4:14:97:f3:98:f3:43:aa:cb:
cc:63:e6:66:80:f8:67:59:ce:25:46:05:14:2b:d1:73:c2:d7:
c8:97:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:08 2023 by rpki-client on console-ams.rpki-client.org