Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/vrorNJuj8GWf5zKZQg81VXfN30k.roa
File: vrorNJuj8GWf5zKZQg81VXfN30k.roa (raw, json)
Hash identifier: luKS/oGBzilrd/UftkctoI1vjsl5rd1QdN8zoPZxDuY=
Subject key identifier: BE:BA:2B:34:9B:A3:F0:65:9F:E7:32:99:42:0F:35:55:77:CD:DF:49
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 12B1F3F3
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/vrorNJuj8GWf5zKZQg81VXfN30k.roa
Signing time: Sat 01 Jan 2022 06:59:31 +0000
ROA not before: Sat 01 Jan 2022 06:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 185.142.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313652211 (0x12b1f3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jan 1 06:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beba2b349ba3f0659fe73299420f355577cddf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:cc:5d:0a:e2:6a:a0:f3:97:a1:af:0d:ab:
97:75:b6:a4:93:55:d0:e2:52:ff:43:77:5e:99:74:
94:0c:25:8a:ca:30:d9:ac:87:ac:e0:6d:a8:40:e5:
63:14:0a:2e:93:06:55:e6:70:7f:e7:64:b1:60:83:
0f:55:da:c3:7c:27:3b:c5:ff:3b:7f:d1:eb:e2:3f:
ca:8f:49:cd:e5:5e:c9:98:be:4b:8e:4d:13:c0:f8:
fc:f2:88:a3:5c:6c:4b:15:0b:cc:ae:6e:cc:c3:fa:
2c:4e:38:58:be:df:c8:52:0c:1a:27:5d:63:5a:99:
05:d1:98:9d:67:f3:a4:45:4f:3a:35:82:b9:87:ce:
b9:9b:df:60:cc:2c:59:14:94:38:ea:8c:d8:29:85:
65:55:bd:aa:24:dc:a0:6a:d8:0b:f6:35:29:1c:21:
9d:69:2d:cf:28:51:c1:46:1c:3b:76:2d:7a:bf:a2:
ff:15:bc:2f:eb:01:a7:d9:75:48:e8:23:41:d3:6c:
7d:dd:6c:39:4d:98:59:b9:d1:05:77:4d:75:6b:c2:
6d:64:9e:07:98:d2:77:7a:6c:68:38:79:8d:65:52:
2d:fc:09:d1:53:e8:a0:be:51:ef:6b:de:cb:c6:84:
be:70:37:5f:34:dc:83:52:7c:55:73:7b:85:18:71:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:2B:34:9B:A3:F0:65:9F:E7:32:99:42:0F:35:55:77:CD:DF:49
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/vrorNJuj8GWf5zKZQg81VXfN30k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7e:cd:d8:11:0a:95:0c:01:5a:7f:e6:df:44:9f:13:7a:c2:
de:b3:42:5c:95:7b:6f:7d:0c:43:9d:29:bc:05:cd:d3:66:a2:
3c:f1:1d:93:7a:f8:93:a9:25:b3:d5:58:6b:7e:58:a6:5c:b9:
86:f7:52:9d:fb:cf:7d:a2:ef:73:44:1c:fd:6e:14:87:52:ff:
ba:e3:0d:ac:47:69:7d:c0:52:70:ed:1d:7f:18:64:79:87:4a:
ab:90:1e:07:9d:01:4a:af:3c:85:4a:1e:80:82:d1:2d:75:25:
17:8f:f8:97:31:7d:5f:e1:31:12:3c:71:bd:40:72:0b:a0:d9:
fc:a1:e1:65:6c:d6:5d:42:9f:a8:60:0a:61:73:4d:d7:74:db:
70:9a:42:35:6f:24:1a:9a:6f:e9:6d:64:eb:d3:0f:4c:c5:2f:
32:0f:fa:ba:7d:be:34:31:f4:50:9a:e9:b4:03:e9:35:24:6b:
2d:8b:30:89:46:ad:dc:03:1e:d2:9b:39:b3:ec:63:32:a9:ea:
8f:0d:aa:50:8a:9b:96:3a:8a:fb:a9:f5:f9:58:03:18:6a:6c:
9b:e8:bf:ef:fb:0e:ed:5b:87:5a:e6:53:e7:44:57:ba:77:25:
f4:79:a4:fa:f3:fe:f8:9f:b0:cc:9d:da:a5:df:a2:df:0c:c2:
e8:9a:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org