Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/VyPOc_YWNgPXtIx8d7xvHduVbH4.roa
File: VyPOc_YWNgPXtIx8d7xvHduVbH4.roa (raw, json)
Hash identifier: iWU/FXzMlRJv9GwPPMQp8SvD6uPEL5Ebiz9WybJccvc=
Subject key identifier: 57:23:CE:73:F6:16:36:03:D7:B4:8C:7C:77:BC:6F:1D:DB:95:6C:7E
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 0182F52694892CC4A45A5ED85361F3055A17
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/VyPOc_YWNgPXtIx8d7xvHduVbH4.roa
Signing time: Wed 31 Aug 2022 18:25:22 +0000
ROA not before: Wed 31 Aug 2022 18:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 185.156.186.0/24 maxlen: 24
185.156.184.0/24 maxlen: 24
185.156.185.0/24 maxlen: 24
185.156.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:26:94:89:2c:c4:a4:5a:5e:d8:53:61:f3:05:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Aug 31 18:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5723ce73f6163603d7b48c7c77bc6f1ddb956c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:64:81:cd:a3:69:c6:4e:cc:e3:cf:83:0f:
42:cc:26:cc:b1:3f:f7:6e:b1:33:af:75:a4:72:ab:
84:c2:7a:b2:85:89:f4:49:f9:13:9d:7d:30:4b:63:
0b:e1:a0:5f:34:96:ea:13:cd:bd:39:66:4d:31:c6:
5f:66:6a:4c:6b:ee:0a:80:27:07:54:d0:5a:13:2d:
2c:66:ba:04:62:f5:d4:46:e1:cf:c2:f7:3e:b4:ac:
53:fa:84:98:7d:ba:d3:f9:d0:f3:fc:3d:f8:2f:e9:
7d:da:d8:77:a7:64:60:2d:7b:fe:f0:8b:ab:c6:5d:
0b:2b:78:96:55:72:3b:a1:a6:c9:d6:7f:b5:53:31:
50:e0:a9:ed:52:34:4c:e8:81:92:86:c9:67:a7:8b:
52:12:14:60:2f:fd:48:18:54:1b:34:da:87:e3:a0:
2e:a3:df:ec:4b:4c:25:50:51:94:50:8b:5f:6c:a9:
df:71:d6:0e:a7:36:4c:eb:f5:4a:a1:ec:a5:d2:e4:
56:3e:1f:a2:4d:95:d6:76:8e:25:5b:5e:96:e2:f1:
5f:6b:21:b0:04:0c:28:8a:e1:ff:75:64:43:3d:70:
d6:19:73:80:95:1b:15:c3:90:77:0f:7a:59:6e:d2:
d6:d2:97:04:a9:ac:7c:5f:38:4b:1f:63:f6:ba:34:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:CE:73:F6:16:36:03:D7:B4:8C:7C:77:BC:6F:1D:DB:95:6C:7E
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/VyPOc_YWNgPXtIx8d7xvHduVbH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
47:1b:a0:25:0e:6b:51:54:54:69:f7:47:7b:b4:5f:14:4a:0e:
fe:3f:3b:30:76:ef:fc:9e:fa:10:d2:96:b4:1a:3f:7f:0a:42:
27:68:ab:df:6a:dc:3a:19:34:5b:7c:7e:d5:30:2c:83:73:f9:
7b:d6:4b:b5:ad:8d:b8:8b:46:49:7c:8d:d1:75:8d:f7:71:b7:
d3:20:74:21:a9:26:53:64:a9:82:30:1f:6c:2a:d9:38:c5:3c:
7a:72:52:f5:f4:9c:e5:7e:8c:6b:da:b2:3d:f5:39:5b:f8:25:
2c:81:28:ec:97:b9:aa:c2:18:e4:54:4b:8d:52:44:0d:6a:26:
00:72:43:4e:eb:08:07:c3:f3:db:71:c1:56:28:1e:fa:db:51:
b9:82:0e:62:b9:43:22:7b:38:fc:e2:2a:5e:70:a3:cb:16:19:
5d:57:85:59:f5:66:83:7c:02:a9:cf:42:6d:8b:35:bc:87:a5:
1f:34:51:8b:df:e5:28:c0:6a:06:95:42:31:fd:ae:ea:3f:62:
e7:e5:2f:cc:7a:22:4a:cb:5a:5a:11:d8:5f:2c:8f:78:ec:ab:
a8:13:a5:9d:6f:0b:be:7e:7e:67:8d:b8:74:5e:94:be:ca:6a:
c6:a6:35:46:eb:df:ea:ec:67:c2:80:0a:46:ec:4e:bf:d2:1d:
db:6b:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org