Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/2XNVa-ZPLgMb-BZWOZRM20SfzF4.roa
File: 2XNVa-ZPLgMb-BZWOZRM20SfzF4.roa (raw, json)
Hash identifier: S5XAC10TPkgaJbHPG9JTvFiPl/h6Abbgm3SkpZ3PVIc=
Subject key identifier: D9:73:55:6B:E6:4F:2E:03:1B:F8:16:56:39:94:4C:DB:44:9F:CC:5E
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 35A5ED00
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/2XNVa-ZPLgMb-BZWOZRM20SfzF4.roa
Signing time: Sat 01 Jan 2022 08:54:57 +0000
ROA not before: Sat 01 Jan 2022 08:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58139
IP address blocks: 188.93.241.224/29 maxlen: 29
91.219.182.0/24 maxlen: 24
91.219.180.0/24 maxlen: 24
91.219.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900066560 (0x35a5ed00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 08:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d973556be64f2e031bf8165639944cdb449fcc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:c8:c7:9e:2b:53:21:71:ad:70:5a:36:d6:
1f:b6:f1:5e:f6:f9:c0:7a:c0:2c:38:25:05:83:b9:
b0:1c:1d:76:ea:23:98:4a:64:38:34:24:b1:f3:c3:
b3:e0:2f:d6:31:f7:fc:6a:cf:e6:43:fd:6f:69:44:
99:3c:b1:95:90:d1:9c:2c:71:0c:4c:ec:4a:78:f5:
40:94:f5:46:e4:c4:37:5c:8f:85:76:3f:15:6c:91:
2d:53:e8:66:cd:55:3a:b5:77:21:0e:1d:11:f7:e2:
92:87:00:d2:4d:8b:5b:fb:41:a3:46:f8:07:38:03:
da:36:08:98:cd:8c:e9:fe:ff:3b:f7:90:51:8a:7e:
ad:3f:a4:52:f6:76:24:4c:1b:d7:10:c5:e8:c6:58:
44:f9:38:f1:cd:d8:0b:ff:16:4d:19:9e:be:c6:9d:
6a:91:0b:aa:e9:e0:e4:30:bb:83:3a:a6:27:c8:bb:
27:42:2a:9c:be:18:fd:db:24:7a:e5:5f:0f:0a:6e:
65:31:fd:6e:6c:e6:ce:6e:eb:07:ac:98:5f:d9:25:
98:6f:d0:2a:3e:56:50:b2:a4:0f:0a:3b:bc:ad:ee:
05:b7:c7:c0:37:e6:41:dd:36:96:ec:e5:ba:ea:c1:
5e:f3:71:91:b7:8d:5e:8d:0d:f2:6b:95:c1:f3:ac:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:55:6B:E6:4F:2E:03:1B:F8:16:56:39:94:4C:DB:44:9F:CC:5E
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/2XNVa-ZPLgMb-BZWOZRM20SfzF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.180.0-91.219.182.255
188.93.241.224/29
Signature Algorithm: sha256WithRSAEncryption
76:38:e9:18:f0:9c:d2:09:fb:51:db:b2:0c:2b:04:14:ac:43:
55:8d:62:37:e4:99:40:aa:55:2a:7b:9e:e0:43:d9:8f:71:4a:
36:4a:86:1e:6a:7f:cf:98:9c:d7:cc:63:9d:d8:de:82:3a:95:
b5:6f:71:f3:07:21:64:66:bf:c1:e5:66:5f:71:d3:ac:05:35:
07:9e:a3:ed:8e:9d:f1:49:c7:3e:70:78:c6:5f:7e:61:62:ae:
77:e5:de:ed:04:00:72:bf:fb:b1:c8:c1:c7:20:d8:15:c0:be:
57:2a:bb:11:4d:26:4a:b9:ab:9a:0d:1a:66:f4:39:f9:b7:8d:
14:eb:59:96:df:73:d1:e1:df:d4:33:e5:bf:76:8a:ad:a9:e3:
7b:aa:29:0d:8f:fa:8a:78:78:82:d6:80:6e:c7:49:2d:bf:28:
8e:8e:4d:e8:c5:db:9d:69:cf:d7:f4:22:c1:f5:67:e3:7b:ae:
12:02:42:db:11:67:0e:3b:6a:5b:28:d6:e5:47:60:8a:2a:c5:
c6:3b:b1:88:86:95:05:0b:d5:45:bb:bc:89:73:34:ed:86:13:
f2:0e:e9:6d:46:0c:f2:72:bc:df:4e:c8:97:4c:3c:4a:29:71:
6f:71:0c:3f:be:c8:a6:6f:10:fe:3c:7e:ec:7a:94:5e:37:56:
2f:cc:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:40 2024 by rpki-client on console-ams.rpki-client.org