Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/vvq8XIe45vX5c1jgO9ByF0g_qJc.roa
File: vvq8XIe45vX5c1jgO9ByF0g_qJc.roa (raw, json)
Hash identifier: 4dnzei62BK+IIm3zhDkPGLmrEYdJdscD4hRstM1amGg=
Subject key identifier: BE:FA:BC:5C:87:B8:E6:F5:F9:73:58:E0:3B:D0:72:17:48:3F:A8:97
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 0405825F
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/vvq8XIe45vX5c1jgO9ByF0g_qJc.roa
Signing time: Sat 01 Jan 2022 01:52:31 +0000
ROA not before: Sat 01 Jan 2022 01:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200361
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67469919 (0x405825f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=befabc5c87b8e6f5f97358e03bd07217483fa897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:3a:24:20:44:0a:2c:02:93:ba:18:91:7c:
4a:41:1d:60:ab:db:6c:4a:c9:7e:57:fa:8c:99:29:
7d:c5:28:94:a1:ce:c4:0f:0e:77:07:4a:65:34:0a:
f2:b4:e4:74:b2:52:1d:ad:65:da:86:09:81:1e:09:
8f:50:5e:eb:90:70:44:e5:6f:3b:81:36:f9:06:fd:
c4:46:4d:e7:dd:b7:3a:6a:e1:f4:5f:83:89:e2:44:
f5:36:a9:a4:b7:0e:64:d9:c2:8b:66:73:4e:f5:6e:
a7:bc:50:e8:70:a8:06:46:a7:e4:dd:47:d4:7b:c0:
b0:b0:d7:95:d3:c0:e2:39:3f:b0:d0:66:3b:e5:74:
21:e2:e1:e8:d8:f0:7f:48:ff:d0:c7:ff:b5:ec:8f:
a7:6d:f7:3e:05:14:de:2c:c5:e1:93:a4:d1:18:fa:
51:74:73:38:db:7c:c2:b4:d0:f0:ba:d0:d5:01:9e:
18:32:84:aa:3e:64:39:2c:a4:99:16:c3:41:83:29:
be:b2:68:9d:23:ae:78:0e:c4:63:cf:42:5c:5c:03:
1b:a8:fa:a3:a7:d9:85:47:62:b9:b3:a3:5b:74:6b:
fd:12:ed:25:65:08:e3:93:9d:63:0d:e3:4f:99:5b:
d6:f5:ad:d1:7b:4f:f1:11:18:3f:bb:75:9f:0c:98:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FA:BC:5C:87:B8:E6:F5:F9:73:58:E0:3B:D0:72:17:48:3F:A8:97
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/vvq8XIe45vX5c1jgO9ByF0g_qJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:57:fb:7f:5a:92:6f:4a:5b:51:8e:5b:f8:4e:d5:c4:34:62:
de:b3:cc:2f:ab:70:93:58:8f:08:d9:c2:b1:d2:3a:15:8e:0c:
ae:93:63:8e:e5:b1:07:02:6b:16:66:7b:57:a2:cb:d9:85:65:
47:be:85:00:b5:09:d6:0f:ac:ee:18:b7:5d:8e:7f:d4:7c:4a:
00:d6:6f:49:ad:27:61:d3:d1:01:65:a7:9c:93:f8:8f:f6:09:
af:36:f1:c5:b7:dd:7e:09:43:d0:64:61:02:01:53:55:97:08:
eb:2b:28:2d:a5:f3:be:02:9e:60:27:35:4d:0b:44:83:d7:bf:
24:cc:3a:a0:a8:e7:82:8f:86:3e:fe:99:c2:fc:8f:0c:83:55:
6a:2f:d0:07:f7:c3:0d:d3:cb:73:68:83:24:f0:94:dc:36:83:
1a:96:0d:88:6d:b4:0a:16:28:8f:8d:a7:9e:fa:ea:19:ea:2f:
f1:33:88:94:83:a2:81:cf:81:bd:cd:6b:95:c9:23:47:50:ce:
aa:ed:3c:70:8a:c7:94:c8:3d:5c:d9:72:5a:bf:3d:ec:06:25:
21:2e:a6:a1:e4:a5:4f:29:29:7b:7d:a7:8b:ba:90:4f:cb:d5:
c1:b1:f9:43:fc:3d:e5:a8:bb:d0:9a:11:58:94:83:fa:f4:91:
99:bb:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org