Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/VdRGbTFJjNgREFmkkxmBl32hEwI.roa
File: VdRGbTFJjNgREFmkkxmBl32hEwI.roa (raw, json)
Hash identifier: NLSZyGG/nJ/9UTJUSOksqlk+lWWk1iGwFvpqB9xfP8k=
Subject key identifier: 55:D4:46:6D:31:49:8C:D8:11:10:59:A4:93:19:81:97:7D:A1:13:02
Certificate issuer: /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial: 012FD400
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/VdRGbTFJjNgREFmkkxmBl32hEwI.roa
Signing time: Sat 01 Jan 2022 06:54:05 +0000
ROA not before: Sat 01 Jan 2022 06:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48329
IP address blocks: 91.194.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19911680 (0x12fd400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Validity
Not Before: Jan 1 06:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55d4466d31498cd8111059a4931981977da11302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:60:e5:fd:30:11:bc:94:7d:0e:4a:ab:93:
00:e1:6c:3a:3d:d9:36:e5:76:6a:fc:86:21:2c:62:
4a:cd:20:35:5d:58:ff:f6:32:18:7f:de:44:2f:48:
6c:58:08:c6:7b:c0:cb:c3:ea:c5:f3:6e:b0:c1:66:
60:e2:5e:ce:c4:38:7f:d2:66:5b:0d:cc:ec:ad:40:
50:61:f4:be:64:31:8f:5f:de:69:fa:47:0a:64:9a:
c9:25:ba:41:61:36:55:c0:3e:07:e7:fa:66:f5:6a:
be:a3:58:10:4d:ef:19:a8:dd:23:8d:0d:79:c5:16:
13:5d:47:dc:44:75:aa:39:cd:39:25:85:16:f2:56:
ee:f2:56:39:f2:e3:b2:1f:fa:c0:5d:92:96:81:fb:
d7:bc:1a:75:ea:d3:16:12:b8:f2:07:9c:5c:96:41:
27:8e:ac:3b:2e:9c:a8:a6:df:f7:90:f9:57:14:f5:
e1:5a:2a:ce:b3:41:1e:bd:89:91:c1:2f:00:3a:58:
81:40:97:4e:3b:0a:2f:b5:3d:fe:dc:cf:4f:ec:b6:
42:e0:6e:17:0e:6d:db:a7:92:9d:93:1e:19:65:7f:
15:8d:9d:3f:b8:e3:c1:d3:9f:de:5e:43:57:62:b1:
a5:74:f0:44:fe:56:57:95:4c:14:e8:54:50:01:23:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D4:46:6D:31:49:8C:D8:11:10:59:A4:93:19:81:97:7D:A1:13:02
X509v3 Authority Key Identifier:
keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/VdRGbTFJjNgREFmkkxmBl32hEwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.200.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f7:51:f9:c1:e2:ba:b9:29:f9:03:5b:5c:cc:dd:ec:a4:02:
f9:e0:89:a3:88:f9:89:8c:04:0a:8f:34:cc:db:e6:78:fd:7b:
a8:51:ad:ed:18:9b:60:83:cf:06:de:ac:49:f2:63:1e:03:0c:
64:7b:af:b7:88:cd:72:8d:d3:23:c3:f4:19:5d:4e:40:7c:76:
e2:84:6d:f2:d3:81:20:67:c4:54:65:cb:da:d7:6a:28:88:bd:
3e:c2:71:ca:8f:d0:4a:23:7b:8e:93:91:86:5c:65:f2:f0:dd:
88:3d:f8:af:54:d0:2a:82:c5:b3:41:0c:d9:e3:db:13:3f:7a:
76:ee:8a:34:ba:09:2b:73:57:65:3e:59:f6:1b:fe:ba:d6:d6:
a4:a1:69:c5:61:41:e1:98:8f:a8:74:7d:76:e5:13:28:d9:d1:
06:a3:58:5a:07:1c:fd:32:a5:25:45:c8:42:84:28:5f:a4:4b:
06:c5:ed:07:dd:b1:18:ab:eb:17:aa:9a:a0:6e:4c:bd:58:74:
55:3f:50:cb:26:f3:13:f3:bc:da:7e:2d:a7:95:a3:62:18:58:
e8:75:d0:7e:b0:7c:58:ed:95:01:3a:a1:31:04:86:af:34:00:
28:2d:34:ff:82:b5:30:ef:fd:44:c8:f8:f6:df:36:cf:a7:41:
22:38:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:32 2024 by rpki-client on console-ams.rpki-client.org