Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/eu-CapVMnMkuz5dhOMKR5u82zig.roa
File: eu-CapVMnMkuz5dhOMKR5u82zig.roa (raw, json)
Hash identifier: vosO6mwWRJGcMWjz2/ZzXnEuhoaAZ5R7ajaYS1IIYBQ=
Subject key identifier: 7A:EF:82:6A:95:4C:9C:C9:2E:CF:97:61:38:C2:91:E6:EF:36:CE:28
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 10FCE8F1
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/eu-CapVMnMkuz5dhOMKR5u82zig.roa
Signing time: Sat 01 Jan 2022 11:04:22 +0000
ROA not before: Sat 01 Jan 2022 11:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38999
IP address blocks: 185.127.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285010161 (0x10fce8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 1 11:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aef826a954c9cc92ecf976138c291e6ef36ce28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:97:ac:01:67:60:33:72:aa:b3:9c:f2:74:
0f:ce:ba:b6:d8:2a:5f:a0:fc:56:c1:89:0e:a5:25:
d2:2e:c5:05:a1:b1:31:4b:01:7c:2d:66:9d:2a:44:
b9:e3:7a:e3:5a:67:45:17:41:62:83:fa:b1:41:0e:
10:df:97:05:7a:22:ee:c2:52:72:34:19:8a:60:6c:
2f:b9:1e:75:5d:6c:a0:0f:1c:2a:cb:a5:b5:77:b2:
6b:22:cb:86:a4:21:97:99:2f:a5:ef:14:0a:6f:60:
92:0e:79:4c:73:5d:d5:e5:29:47:30:ba:3f:71:33:
96:f9:47:c4:08:61:63:e7:31:fe:59:4b:ac:d6:e6:
45:94:81:19:64:77:ea:eb:ac:c1:7f:9c:3c:f9:38:
2a:7d:74:1b:d4:b9:bc:64:0b:80:a4:36:c6:1e:08:
ca:0d:b5:dd:d4:51:be:2d:38:61:53:7c:b3:63:35:
90:8f:9c:00:ce:37:68:19:de:1d:9f:10:f9:eb:65:
fa:e9:8e:63:99:56:d6:76:51:0f:11:af:25:95:fd:
0c:13:c7:77:d0:1c:f5:b9:9f:01:c1:af:fb:88:35:
07:bf:c6:75:a3:36:36:20:20:94:1e:03:11:a8:1c:
2d:fa:7c:70:e7:0f:7c:41:7e:38:84:08:89:0a:4c:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:82:6A:95:4C:9C:C9:2E:CF:97:61:38:C2:91:E6:EF:36:CE:28
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/eu-CapVMnMkuz5dhOMKR5u82zig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0b:01:92:08:b6:0b:79:b5:16:53:ba:25:ed:00:39:1c:8a:
76:81:18:b1:5c:bf:fe:57:30:f5:8c:c4:4a:7c:9d:c9:cb:8b:
25:e0:8a:87:65:22:02:d1:88:a6:87:34:5a:2b:c8:42:14:33:
28:18:8f:73:9a:5c:3d:a2:a1:74:35:94:12:c1:d7:40:9e:31:
3c:55:5b:5d:91:f5:a1:fa:c6:70:26:ee:d9:e6:7a:75:5b:71:
c5:00:10:03:5a:53:e1:de:1a:a1:24:e8:f7:ea:26:67:4f:79:
56:e9:74:1c:bd:1a:ee:d9:6f:b0:74:b5:72:a7:05:49:67:72:
8c:78:9a:22:76:4f:63:bb:42:47:4a:0d:e6:94:60:1a:16:23:
c6:59:dd:ef:9f:20:87:7c:b5:48:e5:0b:85:ef:34:00:91:ac:
85:26:a0:a4:ce:d5:7e:73:04:30:5a:ea:5b:6b:ec:29:ef:80:
ec:59:f4:46:7e:92:84:70:b7:76:e7:61:7b:47:1f:fc:a9:e3:
4d:94:f5:d8:4b:21:3e:04:86:0e:a1:52:f8:fb:e1:1a:23:c3:
fe:20:21:2c:94:cc:80:29:f4:91:57:3b:89:4d:bf:33:f6:50:
ac:a4:5f:86:7e:9f:0f:c9:81:4b:3b:91:2d:13:7b:0c:35:ef:
ba:2e:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org