Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/VZ84QJNKek9yBzS5IxFB3DSEWUs.roa
File: VZ84QJNKek9yBzS5IxFB3DSEWUs.roa (raw, json)
Hash identifier: J7SmU6cT7LbicdjWzka98PvDIcNGm5Iav1frGosUxeE=
Subject key identifier: 55:9F:38:40:93:4A:7A:4F:72:07:34:B9:23:11:41:DC:34:84:59:4B
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 08D3A17A
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/VZ84QJNKek9yBzS5IxFB3DSEWUs.roa
Signing time: Sat 01 Jan 2022 05:52:27 +0000
ROA not before: Sat 01 Jan 2022 05:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204919
IP address blocks: 80.91.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148087162 (0x8d3a17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jan 1 05:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=559f3840934a7a4f720734b9231141dc3484594b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:81:e7:10:aa:c8:67:f0:82:29:ad:ed:4e:
66:4e:1d:b0:7f:e6:ef:67:11:2b:f8:59:71:d7:7e:
35:4b:40:59:f0:aa:6c:66:08:54:2f:3a:26:f7:2d:
54:51:91:22:b7:75:ad:34:52:33:78:fb:73:41:43:
5e:af:26:be:ed:23:26:1c:d7:b1:0a:64:b1:4a:fd:
9f:ea:89:25:4a:25:ee:49:e3:4f:26:cd:68:7a:7a:
54:90:ea:40:f9:62:60:1d:ae:32:25:33:d8:18:a1:
4d:75:79:f1:e0:ca:2d:cd:42:68:2e:08:b4:26:ef:
a0:7f:a3:44:67:43:37:c2:98:98:5f:9a:62:03:33:
13:8d:2a:ed:96:c1:b7:67:6c:70:4b:4e:62:92:4a:
59:df:38:1a:af:b8:e6:98:20:0c:2a:4c:e4:f9:50:
28:c3:6a:6d:f3:0c:22:de:7a:b5:e1:7d:cd:89:76:
0d:b6:81:ad:03:17:8f:12:c8:73:f2:30:da:ff:ed:
ae:61:f9:e6:84:4e:07:40:66:d0:11:f9:3c:cc:2a:
da:71:52:30:24:43:e5:e8:9d:9d:1d:a7:bb:f2:86:
08:54:5d:41:4e:3f:b0:cd:ec:d3:19:ed:0d:fb:b2:
32:fa:94:f5:e4:52:8c:a3:e0:83:29:19:80:dc:e2:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:38:40:93:4A:7A:4F:72:07:34:B9:23:11:41:DC:34:84:59:4B
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/VZ84QJNKek9yBzS5IxFB3DSEWUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.205.0/24
Signature Algorithm: sha256WithRSAEncryption
02:17:6f:c4:e8:54:7b:1d:63:62:e6:ba:93:f8:22:ea:e4:37:
c1:0b:bc:53:af:d9:34:ee:49:b0:0e:ec:31:00:a1:a8:d1:16:
b1:80:92:6c:63:78:52:2b:4a:5c:c0:94:8d:40:79:0d:9b:19:
f8:d3:5d:cd:f8:b5:5d:4f:8e:93:ac:fc:95:19:a8:1e:48:f9:
be:0c:a1:86:6e:44:7f:02:a0:55:18:a7:7d:ac:78:e9:cd:87:
5a:39:fe:af:07:0a:3a:ee:e9:23:d1:6f:77:bf:34:61:2a:1c:
e6:74:b7:d2:c2:70:91:18:09:e9:10:de:3a:2b:8f:cc:43:e2:
43:31:c1:92:73:9c:a0:72:8d:74:d9:7e:96:1d:7e:4b:0f:2a:
eb:30:16:91:6e:17:2b:36:c4:50:d2:79:fd:f5:a1:73:e5:26:
25:9d:e7:80:83:3a:38:80:cb:96:c3:1b:a3:59:c3:62:d4:32:
5d:ca:88:77:9f:6f:a4:18:10:27:3a:bb:20:df:60:11:d5:19:
29:7d:c5:3d:69:51:c5:bd:36:7f:0c:45:4f:38:8d:cf:84:b1:
f4:36:76:c9:4e:62:5e:06:da:67:90:2e:56:ad:c2:88:41:fe:
89:a1:0c:eb:f1:b9:9d:76:10:02:ea:dd:d9:19:64:14:96:cf:
81:e4:e6:64
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECNOhejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NWI5ODBiODEwMzk1ODFlMGQyYzM3YTUxMjE2Y2Q3OTcyOWIwYzcxMB4XDTIyMDEw
MTA1NTIyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTU5ZjM4NDA5MzRh
N2E0ZjcyMDczNGI5MjMxMTQxZGMzNDg0NTk0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbvgecQqshn8IIpre1OZk4dsH/m72cRK/hZcdd+NUtAWfCq
bGYIVC86JvctVFGRIrd1rTRSM3j7c0FDXq8mvu0jJhzXsQpksUr9n+qJJUol7knj
TybNaHp6VJDqQPliYB2uMiUz2BihTXV58eDKLc1CaC4ItCbvoH+jRGdDN8KYmF+a
YgMzE40q7ZbBt2dscEtOYpJKWd84Gq+45pggDCpM5PlQKMNqbfMMIt56teF9zYl2
DbaBrQMXjxLIc/Iw2v/trmH55oROB0Bm0BH5PMwq2nFSMCRD5eidnR2nu/KGCFRd
QU4/sM3s0xntDfuyMvqU9eRSjKPggykZgNziJN0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRVnzhAk0p6T3IHNLkjEUHcNIRZSzAfBgNVHSMEGDAWgBSVuYC4EDlYHg0s
N6USFs15cpsMcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xibUF1QkE1V0I0TkxEZWxFaGJOZVhLYkRIRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvNjM0MTcyLWJiMzctNGQ4Mi04OGEyLTk0MmQyYzZjNTg1Ni8x
L1ZaODRRSk5LZWs5eUJ6UzVJeEZCM0RTRVdVcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQv
NjM0MTcyLWJiMzctNGQ4Mi04OGEyLTk0MmQyYzZjNTg1Ni8xL2xibUF1QkE1V0I0
TkxEZWxFaGJOZVhLYkRIRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBbzTANBgkqhkiG9w0BAQsFAAOC
AQEAAhdvxOhUex1jYua6k/gi6uQ3wQu8U6/ZNO5JsA7sMQChqNEWsYCSbGN4UitK
XMCUjUB5DZsZ+NNdzfi1XU+Ok6z8lRmoHkj5vgyhhm5EfwKgVRinfax46c2HWjn+
rwcKOu7pI9Fvd780YSoc5nS30sJwkRgJ6RDeOiuPzEPiQzHBknOcoHKNdNl+lh1+
Sw8q6zAWkW4XKzbEUNJ5/fWhc+UmJZ3ngIM6OIDLlsMbo1nDYtQyXcqId59vpBgQ
Jzq7IN9gEdUZKX3FPWlRxb02fwxFTziNz4Sx9DZ2yU5iXgbaZ5AuVq3CiEH+iaEM
6/G5nXYQAurd2RlkFJbPgeTmZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:46 2024 by rpki-client on console-fra.rpki-client.org