Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/vBvv5yK4HPAu8zcrA6g9TDjn6lY.roa
File: vBvv5yK4HPAu8zcrA6g9TDjn6lY.roa (raw, json)
Hash identifier: qxw/IUeYkCBzgxKxg266QIdMHjQtuytA3i/QTJuB0b0=
Subject key identifier: BC:1B:EF:E7:22:B8:1C:F0:2E:F3:37:2B:03:A8:3D:4C:38:E7:EA:56
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 07483625
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/vBvv5yK4HPAu8zcrA6g9TDjn6lY.roa
Signing time: Sat 01 Jan 2022 12:06:50 +0000
ROA not before: Sat 01 Jan 2022 12:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201964
IP address blocks: 31.187.84.0/22 maxlen: 22
185.55.84.0/22 maxlen: 22
2a02:4820::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122172965 (0x7483625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jan 1 12:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc1befe722b81cf02ef3372b03a83d4c38e7ea56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:af:b7:fe:4f:ba:12:04:06:81:cd:de:dd:
28:48:63:3a:91:9f:c8:22:08:7f:84:dc:a1:29:81:
d6:e4:df:3b:b2:7e:1c:c2:94:76:e8:27:7f:a5:91:
87:09:60:1d:78:45:9a:56:98:2c:00:2a:59:58:fc:
42:59:e4:fc:b8:5d:01:b4:3f:71:c9:16:bd:8c:51:
fb:50:bf:bb:40:3d:d6:04:44:9c:86:58:93:f6:25:
05:4f:34:c6:c9:1d:2f:1e:a2:33:b4:99:a3:51:44:
0c:5c:a8:37:a8:35:08:4e:1d:49:97:e6:b4:a8:e9:
91:de:d3:84:8e:a7:5f:6d:22:70:c4:5c:b2:22:d9:
7e:2f:47:7b:50:0b:7d:ad:83:e3:ce:82:71:8c:72:
72:29:c4:7e:e9:a8:8a:87:5b:5a:74:16:81:3a:74:
27:7a:5d:b5:cb:47:be:e7:9c:75:0c:54:5a:e0:61:
d7:5b:1d:dc:e3:99:5e:f8:29:cb:ef:74:78:d0:a4:
e5:da:7f:74:7f:35:78:8d:dc:3a:66:5c:46:47:a6:
7c:c0:ef:4c:43:dc:3f:06:da:5d:f7:65:81:bd:6e:
00:4c:d9:80:ec:56:8d:c0:b6:45:b5:13:0b:c6:56:
56:8f:b4:73:a9:07:04:b7:2f:e1:28:91:50:88:a5:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:EF:E7:22:B8:1C:F0:2E:F3:37:2B:03:A8:3D:4C:38:E7:EA:56
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/vBvv5yK4HPAu8zcrA6g9TDjn6lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.84.0/22
185.55.84.0/22
IPv6:
2a02:4820::/32
Signature Algorithm: sha256WithRSAEncryption
c1:a1:6f:ac:3c:b5:43:41:c7:4c:e8:04:07:a6:45:d4:59:f5:
d2:55:d0:59:64:ed:60:69:89:5b:2f:91:a3:bf:90:86:31:8e:
23:80:53:93:4a:a2:5c:83:1e:75:a0:38:d7:3a:1e:41:e1:0a:
b9:e5:5e:d8:72:a0:e1:0c:6a:2b:f8:18:2f:5e:86:00:dd:2a:
22:b9:4f:1d:0d:3e:60:7a:50:63:26:81:72:1d:0f:f1:60:57:
49:b1:8c:31:cd:d1:4c:73:ad:c4:cd:aa:07:a2:63:c6:d8:6a:
4e:aa:b1:0f:67:60:5c:e1:15:cd:2e:39:23:b7:72:ee:bb:2c:
c8:88:83:b0:c6:1a:e9:91:1e:a3:58:03:1f:01:56:ca:c1:45:
e0:4b:e8:ca:45:6d:ef:ab:8d:dd:0a:97:d6:49:dd:52:72:b3:
fe:9b:aa:df:02:d3:7f:5a:cc:4a:67:27:74:ba:a7:b8:c7:f4:
c8:59:a5:3b:2f:ec:a5:07:dd:d6:43:55:f1:0b:be:e9:72:37:
06:a0:d8:42:9c:4a:f6:bd:0a:c4:09:7d:50:e3:16:6b:8f:b8:
ce:b5:5b:9a:7c:26:55:92:f6:05:5d:72:7a:a3:ed:9b:09:2d:
65:d1:8b:90:d9:5a:39:bb:eb:22:a6:6a:e5:30:a9:91:67:d5:
15:97:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:43 2024 by rpki-client on console-ams.rpki-client.org