Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vaPcgOJfy1ynlfaSw15HAE9MCgA.roa
File: vaPcgOJfy1ynlfaSw15HAE9MCgA.roa (raw, json)
Hash identifier: pG62W/V+XTPpxwL5qG32pePJLnjeik9mZkbkGfbyXic=
Subject key identifier: BD:A3:DC:80:E2:5F:CB:5C:A7:95:F6:92:C3:5E:47:00:4F:4C:0A:00
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0182820ACDB1AC1CC5C765F125693557DD0D
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vaPcgOJfy1ynlfaSw15HAE9MCgA.roa
Signing time: Tue 09 Aug 2022 09:58:42 +0000
ROA not before: Tue 09 Aug 2022 09:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5505
IP address blocks: 188.130.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:0a:cd:b1:ac:1c:c5:c7:65:f1:25:69:35:57:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 9 09:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bda3dc80e25fcb5ca795f692c35e47004f4c0a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:3d:95:36:34:3d:24:86:b4:06:4e:50:b6:
ac:5e:38:49:a5:f8:b3:1b:d0:ba:62:2c:12:40:53:
14:0b:45:3e:14:45:cf:16:55:0d:72:e4:85:59:9c:
b0:7b:54:1c:f3:d7:bf:0c:78:af:1f:61:11:bf:18:
14:5e:71:d7:c6:55:3e:db:ab:5d:8d:cd:74:24:d2:
ae:df:93:4e:73:93:3d:76:98:d7:64:c0:44:f8:d0:
e6:0f:fa:ee:08:f6:a7:64:38:26:11:14:a3:95:92:
3e:97:76:66:28:02:13:c2:db:42:83:33:c9:ad:80:
b7:a8:58:2e:c2:8a:1d:b3:de:2f:74:f6:b3:ef:06:
9d:a6:6d:35:43:9e:dd:be:a0:50:86:60:2c:5b:6d:
08:26:8a:20:d8:80:f9:06:ea:67:1e:01:40:21:6f:
02:52:f4:80:7c:74:68:d5:d6:52:81:7c:6c:22:86:
8a:23:1f:61:a1:4c:ba:2e:a9:44:8e:0a:0d:e2:89:
37:b3:be:24:d5:04:24:69:1d:de:df:d3:91:de:29:
cf:d2:56:af:e1:a2:90:23:a2:dc:52:0e:38:44:0f:
60:09:e6:68:2c:3f:32:3d:44:6b:54:ac:70:28:83:
b4:a5:f5:ef:0b:07:77:e6:a5:b3:5a:3c:f4:e1:22:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:DC:80:E2:5F:CB:5C:A7:95:F6:92:C3:5E:47:00:4F:4C:0A:00
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vaPcgOJfy1ynlfaSw15HAE9MCgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:56:45:16:0a:0c:03:60:c3:05:98:43:fa:4d:c7:f2:25:d0:
68:85:a8:d1:c3:4d:29:60:d1:0f:c9:39:89:f2:c1:c2:1d:45:
b4:4f:13:98:50:f4:a1:63:06:b5:5e:ed:c6:1c:03:38:3b:7d:
83:3c:67:44:f2:16:b9:c0:0b:78:d3:17:42:28:c9:25:75:ae:
f8:50:07:41:68:89:fb:fc:a9:73:8d:f0:91:36:eb:ed:15:20:
39:75:8c:1d:7b:08:eb:d5:67:9f:8b:f7:c2:df:4e:8c:14:a6:
72:9d:44:fd:fd:77:0a:c0:3d:af:b4:e2:b8:05:e3:84:ab:83:
e5:ee:7d:41:1c:85:18:b5:0f:4f:87:33:51:4c:18:e1:77:63:
0f:82:3e:f7:43:a8:60:3d:21:9b:f3:c6:7e:5f:47:6b:e9:c3:
f3:ce:84:bc:39:a1:26:e3:08:db:e5:e3:a4:c4:c9:b7:83:87:
a1:a2:7d:16:e1:f1:31:7b:c5:25:8c:3a:f3:14:24:8c:95:db:
b5:1d:83:e4:e1:40:f1:c7:73:9f:d0:bb:e2:f9:84:f8:10:53:
ae:78:4e:28:24:95:1c:00:59:25:48:9c:95:99:26:c0:00:6e:
d3:e1:1f:d8:64:ef:d8:af:d1:72:9c:e2:e1:af:fa:11:64:c6:
b0:a5:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org