Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VKUA83nTJTZp0L6Clf6NlX5-H4c.roa
File: VKUA83nTJTZp0L6Clf6NlX5-H4c.roa (raw, json)
Hash identifier: lBtpa4wSm7cwxbRwraVV31ErVQ8n1qd1W262QbwOb7A=
Subject key identifier: 54:A5:00:F3:79:D3:25:36:69:D0:BE:82:95:FE:8D:95:7E:7E:1F:87
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2853E0EF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VKUA83nTJTZp0L6Clf6NlX5-H4c.roa
Signing time: Sat 01 Jan 2022 16:10:15 +0000
ROA not before: Sat 01 Jan 2022 16:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210442
IP address blocks: 95.46.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676585711 (0x2853e0ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54a500f379d3253669d0be8295fe8d957e7e1f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:aa:8e:03:80:f8:94:b0:8e:b7:e1:e6:70:
0d:c7:ec:36:39:7b:83:3f:1c:6e:da:61:52:28:6e:
c2:9d:6a:23:2b:63:f6:ef:8f:f1:94:55:37:e2:cc:
31:ad:2a:33:e6:05:af:92:77:f2:85:20:b3:32:83:
0f:b3:62:55:53:98:8e:90:92:b9:35:8c:43:4b:72:
c4:5c:46:88:dd:2f:6f:24:c6:96:9d:71:4a:fa:ae:
a9:bf:3f:f3:98:25:e5:71:33:46:fa:c8:f0:58:92:
c2:e9:b7:62:9e:9b:5c:af:70:3e:39:2d:55:52:9e:
79:61:dd:f2:a4:29:ec:58:d5:41:91:68:76:4f:c4:
0e:9c:ff:1a:f0:bd:6d:e1:27:b7:fe:fc:fb:7a:6b:
61:10:a0:5c:cb:30:32:cf:19:31:d3:50:27:15:60:
48:0d:ad:ab:19:ba:b2:6c:56:82:2f:64:29:07:ca:
1d:93:63:f8:40:00:9e:f2:f1:27:9b:7b:91:dd:3e:
2e:df:c6:e6:e6:75:cf:c7:7d:c7:d6:c0:bc:3b:e3:
12:5e:61:ad:54:c3:86:bd:f8:16:20:d5:19:24:72:
56:72:e9:d2:63:aa:63:45:e1:39:19:69:7b:27:a8:
d0:8a:5f:8e:8f:78:ca:95:fe:97:bd:92:bf:ce:f6:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:00:F3:79:D3:25:36:69:D0:BE:82:95:FE:8D:95:7E:7E:1F:87
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VKUA83nTJTZp0L6Clf6NlX5-H4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.72.0/24
Signature Algorithm: sha256WithRSAEncryption
32:02:bc:58:c1:5b:7a:03:cb:f4:03:ae:ac:d0:1f:a1:d4:f1:
a5:e0:f7:73:56:41:2d:91:24:df:16:81:86:93:ef:02:c0:b6:
1c:b4:48:4a:11:10:fc:15:05:be:73:81:51:cd:bd:c8:71:1c:
cc:33:66:4d:ac:b4:b5:0e:1c:a3:81:95:dd:8d:2d:7d:5a:2c:
b6:88:3b:91:0d:16:36:39:8f:98:89:71:3b:8b:d8:48:b7:4b:
88:7c:6a:fb:cb:ff:9c:cf:72:bc:56:38:ee:97:8a:00:1c:33:
55:04:96:cd:d9:92:ad:7f:72:3b:8b:af:77:4e:4d:3a:0c:0c:
60:37:a4:6d:8d:b1:31:1b:d9:4c:ba:a4:0d:6e:fb:89:ce:fb:
c1:0c:0f:5c:5c:45:87:cc:0e:37:bb:a1:08:24:9f:6f:60:60:
6a:11:a9:47:b3:f0:87:36:94:39:74:e6:93:ec:70:ef:c0:a0:
9e:62:03:c4:07:e9:d9:b2:71:5d:51:45:7e:2d:58:8f:13:f1:
ea:50:7b:84:65:d3:b6:5e:ad:52:40:68:ea:81:e8:af:9a:e5:
91:97:3b:50:01:b8:0a:88:03:2f:dc:d5:b4:b0:03:77:05:95:
ce:38:0e:f0:4f:6d:c2:2e:29:51:1e:47:6a:df:a2:18:0f:a4:
aa:da:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org