Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vrtiKy8xf_m6ZgvtZlLZkTbFepw.roa
File: vrtiKy8xf_m6ZgvtZlLZkTbFepw.roa (raw, json)
Hash identifier: nXGyOB2w4BunbQloVJeYlqMUbj4PW1+xgW17NVJ/bBg=
Subject key identifier: BE:BB:62:2B:2F:31:7F:F9:BA:66:0B:ED:66:52:D9:91:36:C5:7A:9C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 08157E4D
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vrtiKy8xf_m6ZgvtZlLZkTbFepw.roa
Signing time: Tue 03 May 2022 00:30:02 +0000
ROA not before: Tue 03 May 2022 00:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62119
IP address blocks: 194.147.97.0/24 maxlen: 24
194.147.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135626317 (0x8157e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: May 3 00:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebb622b2f317ff9ba660bed6652d99136c57a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:03:31:9d:68:be:25:80:90:37:e2:fa:70:
ec:f9:ab:8a:07:2f:aa:35:32:26:25:16:0f:02:2a:
0c:37:f5:0a:0b:c0:9c:7f:87:3d:60:fd:be:55:24:
7c:39:b1:c4:cf:8b:93:a8:c7:46:11:97:e8:3f:80:
29:a4:b3:f6:44:82:93:91:e3:7e:b3:20:92:c0:af:
17:10:d3:36:62:6a:c0:47:29:18:96:02:04:26:1a:
59:72:97:ce:95:a5:79:19:69:8a:c5:50:0f:07:c6:
eb:35:a8:4a:03:43:b1:ad:90:f0:2d:1d:be:87:8b:
f9:d4:2c:8d:be:d5:6e:a8:17:45:5e:05:e0:b3:1b:
4f:5e:56:e1:bf:12:69:bf:5c:a7:84:a6:09:73:2d:
8e:01:a3:3b:ee:c9:b5:c4:9e:99:f1:00:86:5b:c4:
1c:0d:50:3f:c7:1e:f4:b1:71:11:2b:c1:b3:64:9e:
33:2f:f3:4d:1f:d1:ce:dd:dc:4e:2b:11:30:db:19:
f4:92:65:50:79:8d:d1:8a:bb:97:45:69:07:93:f7:
c0:09:99:03:2d:7f:41:99:0a:55:cf:13:d1:82:9c:
b4:64:87:58:70:c6:31:0f:42:48:06:d9:53:b7:a5:
5e:9f:fa:0b:18:5e:72:92:42:62:e6:40:32:c5:d7:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:62:2B:2F:31:7F:F9:BA:66:0B:ED:66:52:D9:91:36:C5:7A:9C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vrtiKy8xf_m6ZgvtZlLZkTbFepw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.97.0/24
194.147.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fb:e9:82:15:8b:19:1d:f0:73:c7:1a:ec:1a:9a:4a:fa:fe:
bd:4b:c5:7a:3c:78:a0:1f:92:0b:b1:2f:77:0f:0e:e4:d2:21:
48:ec:e3:97:e7:b3:b5:a7:30:d2:1c:fd:af:d9:3b:28:e8:f4:
fe:d5:48:f4:0c:a6:7a:46:b1:f5:72:c8:c3:6d:0b:8a:be:b6:
e4:5d:61:c1:af:e7:51:d3:b8:70:22:10:23:59:95:02:cb:8c:
55:3d:39:44:4c:49:51:e6:52:ef:69:2f:15:ef:fc:7f:5f:6c:
c3:ab:28:46:e5:36:ff:c8:d6:e9:75:7f:4e:d8:79:70:93:61:
19:10:de:21:3c:96:71:99:c7:0e:7c:e8:92:3d:88:52:28:30:
20:9d:8f:3b:ef:ca:0c:dc:e1:27:b6:aa:2f:f4:d1:ed:b2:fc:
31:96:52:86:ec:b6:fe:53:a0:1f:23:f3:fa:b9:71:64:69:cf:
9e:db:35:7a:e9:e6:89:c5:18:7b:6c:6c:20:41:63:96:3f:46:
25:3f:91:ed:77:1f:e6:d1:37:ce:a8:2c:8c:80:af:9a:10:bd:
32:3d:78:7b:a8:6a:9e:e0:9d:a3:6d:78:1b:66:69:30:a9:76:
4d:a0:5c:d4:b8:be:d8:a3:d7:e9:e9:fc:21:86:43:a2:fb:03:
c2:7f:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:59 2023 by rpki-client on console-ams.rpki-client.org