Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/vfH3TIqX12EMi79wcVDV-u4_6U8.roa
File: vfH3TIqX12EMi79wcVDV-u4_6U8.roa (raw, json)
Hash identifier: EO70yWe92kXreJUqJRwTJ6/x9/o1f6mpCpwS57+V5b4=
Subject key identifier: BD:F1:F7:4C:8A:97:D7:61:0C:8B:BF:70:71:50:D5:FA:EE:3F:E9:4F
Certificate issuer: /CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Certificate serial: B1358E
Authority key identifier: 3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/vfH3TIqX12EMi79wcVDV-u4_6U8.roa
Signing time: Sat 01 Jan 2022 00:55:27 +0000
ROA not before: Sat 01 Jan 2022 00:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 213.217.29.0/24 maxlen: 24
185.53.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11613582 (0xb1358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Validity
Not Before: Jan 1 00:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdf1f74c8a97d7610c8bbf707150d5faee3fe94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:a1:db:64:a5:4b:5e:fb:07:b7:45:28:cf:
e0:0b:0d:87:cd:6d:fd:17:95:c4:4b:2d:4d:8f:8b:
11:f1:a2:e4:bf:47:e3:73:fa:ce:78:6f:34:19:e4:
d4:13:58:6d:5f:18:94:5b:f5:1a:8e:ec:4d:5a:3c:
6d:9d:7e:89:a9:ce:13:90:21:9a:bc:60:51:db:c2:
93:99:01:19:14:91:87:22:7a:8f:db:03:35:8e:2e:
5c:83:c8:2f:cf:b0:bd:14:fa:fc:99:77:5e:c3:9c:
d0:a4:ff:01:07:fe:a4:82:0b:b1:eb:80:60:d8:95:
55:d8:94:39:54:86:19:16:35:51:e9:e7:d4:9b:a0:
13:d5:7c:3a:1f:fb:9d:96:d9:c5:8f:fc:1e:22:1a:
2e:91:c6:d4:2d:03:75:98:c1:9e:f3:89:6d:8b:92:
75:28:09:7e:8b:02:ce:b4:27:76:fe:62:b8:97:ca:
c0:a1:33:4f:51:3b:33:e6:97:6b:23:bc:c7:5d:7b:
25:15:d8:e3:70:81:e0:d4:f2:c0:9f:b7:aa:70:75:
0c:f6:9d:02:cf:35:f4:79:a6:01:e3:5d:b6:bf:c7:
2f:34:44:a5:ab:13:74:69:93:c0:cc:00:ba:7a:85:
8c:82:60:72:fe:54:d2:1f:d2:84:f0:ff:f3:aa:6c:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:F7:4C:8A:97:D7:61:0C:8B:BF:70:71:50:D5:FA:EE:3F:E9:4F
X509v3 Authority Key Identifier:
keyid:3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/vfH3TIqX12EMi79wcVDV-u4_6U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.33.0/24
213.217.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1e:3a:64:ee:07:d1:50:f1:23:24:18:b2:3b:90:e6:03:4c:
b6:c2:99:d1:2f:a0:96:f2:b2:1a:00:88:72:2a:d6:e8:95:b0:
20:4a:4e:82:e0:76:55:35:dc:60:da:51:2a:21:07:b8:9c:73:
70:95:49:52:c8:98:50:7b:ab:c2:78:28:81:c6:65:0c:58:d0:
d4:c3:b3:51:a3:38:bd:df:3a:a5:5e:23:34:98:cf:77:0d:29:
07:a7:3b:2f:5e:ba:ec:a9:b0:c2:7c:06:ac:e3:9c:6f:ee:7d:
19:91:58:84:df:9d:f2:54:70:c5:a8:c1:7b:f2:db:cf:0d:27:
71:23:6f:f9:0d:a9:4b:66:6b:e4:48:e1:e1:98:73:af:0f:a5:
13:72:00:28:22:19:20:52:bb:8c:9a:96:8b:fe:5f:28:86:c9:
6a:4b:c9:36:f6:26:0e:95:09:ba:30:70:af:6e:d0:25:7c:7f:
71:f0:76:26:b0:e6:b7:a8:91:90:25:f2:40:cd:9d:eb:68:ba:
8f:0d:be:75:57:d0:f9:d5:8b:da:24:0a:1b:f4:cb:a6:25:c8:
98:18:fd:b7:f8:ab:bb:09:28:b2:c4:17:0d:4e:1d:f1:fb:6f:
1d:ed:73:8d:35:c0:92:bf:12:bd:04:3f:c8:75:f7:b8:60:9d:
8a:d8:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org