Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/VkcvdS0ucQNX-n1Pw7Qa_-VNF2k.roa
File: VkcvdS0ucQNX-n1Pw7Qa_-VNF2k.roa (raw, json)
Hash identifier: vZ/qPvmWs8TiYFRxvbiFPxegCbEHrcoInYhas9akAyE=
Subject key identifier: 56:47:2F:75:2D:2E:71:03:57:FA:7D:4F:C3:B4:1A:FF:E5:4D:17:69
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 11C973B4
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/VkcvdS0ucQNX-n1Pw7Qa_-VNF2k.roa
Signing time: Thu 07 Apr 2022 11:51:55 +0000
ROA not before: Thu 07 Apr 2022 11:51:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38999
IP address blocks: 185.127.183.0/24 maxlen: 24
185.127.183.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298415028 (0x11c973b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Apr 7 11:51:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56472f752d2e710357fa7d4fc3b41affe54d1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:9c:01:6f:d9:0c:de:25:db:09:0e:5c:03:
c3:d2:09:2f:49:4c:ed:ed:e2:32:73:77:a2:d3:32:
bd:f3:76:eb:8a:7e:ba:24:fa:e1:d4:72:34:ec:b4:
65:67:0d:59:71:53:50:31:80:97:a3:8c:23:a8:00:
79:59:89:9e:80:c1:05:1f:82:79:f7:ad:77:ed:b8:
f3:41:07:f0:27:0f:8e:7d:82:fd:99:c1:df:c3:4b:
ae:84:fd:b2:48:83:44:ee:7a:06:49:9c:a3:32:25:
b3:6a:cb:3b:a6:50:88:9d:64:2d:76:e3:f3:91:65:
73:ca:b5:f5:99:ba:8a:1e:7e:d3:f8:8c:5e:56:a3:
50:a7:66:10:15:23:80:51:53:9b:cb:de:e2:4f:fa:
64:e3:63:de:f1:12:92:0a:76:3f:7a:ee:8b:20:c3:
80:59:36:e5:64:2f:08:34:d9:7c:12:51:1e:f4:e0:
eb:0c:de:65:7b:e9:38:fe:07:42:44:23:46:43:e5:
85:4d:d4:e9:39:b0:c6:c4:ec:23:63:ba:33:ee:d4:
8c:61:49:e4:9b:9f:6b:c0:b1:d8:8e:55:77:4f:eb:
9e:c8:10:ad:ec:64:58:13:0e:bc:49:d8:20:06:bc:
36:15:79:ba:51:7f:b6:e2:b4:84:3a:86:21:e9:b4:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:2F:75:2D:2E:71:03:57:FA:7D:4F:C3:B4:1A:FF:E5:4D:17:69
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/VkcvdS0ucQNX-n1Pw7Qa_-VNF2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:12:38:fa:e9:2a:b9:85:d4:01:0c:08:f1:3d:02:ec:c8:32:
a4:e5:6b:21:b9:cb:47:34:80:37:0d:5c:b2:fc:b6:51:61:10:
c0:1d:f8:6b:56:3f:39:eb:7f:43:a2:b7:ff:95:02:cf:20:57:
3a:1c:48:aa:21:88:f1:75:e9:ad:9d:6f:6e:a1:4a:6e:e9:28:
84:5f:37:9e:bd:59:b5:9d:e4:60:98:4a:46:95:8b:30:64:12:
6c:24:9c:dd:e1:9b:8c:82:14:1c:b0:31:c2:8b:d5:05:98:34:
7d:7a:84:b7:47:d1:39:81:a3:40:5a:4e:ee:71:39:1c:46:23:
e6:0d:12:76:75:cb:a3:ca:0e:3b:79:4f:68:c9:51:d9:51:35:
74:28:ce:25:e0:1c:6f:6c:94:c2:0e:2c:65:69:5a:f9:63:b3:
02:5f:1d:94:ec:ff:f2:80:b3:69:aa:29:d3:ea:c6:91:1b:af:
73:ef:12:67:c0:e4:a5:3c:a9:83:25:c8:f7:d9:13:90:17:33:
44:1b:5e:bd:38:eb:c0:5f:45:d0:cc:f6:7e:28:da:e9:b4:2e:
d6:8b:dc:ea:34:31:fc:e4:46:b6:3b:00:78:47:c9:aa:62:66:
95:7e:b5:48:12:79:73:4f:50:59:af:99:b7:d3:bf:d9:98:34:
25:96:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:53 2023 by rpki-client on console-fra.rpki-client.org