Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/VAf20qGuOUSG8VFXeabPCr2a7xQ.roa
File: VAf20qGuOUSG8VFXeabPCr2a7xQ.roa (raw, json)
Hash identifier: jLJcez9kbK0y3GyiFyeIE7JxdEe3McJRFY4lmA1X9UY=
Subject key identifier: 54:07:F6:D2:A1:AE:39:44:86:F1:51:57:79:A6:CF:0A:BD:9A:EF:14
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 0FEACDFF
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/VAf20qGuOUSG8VFXeabPCr2a7xQ.roa
Signing time: Sat 01 Jan 2022 13:07:20 +0000
ROA not before: Sat 01 Jan 2022 13:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64478
IP address blocks: 185.162.246.0/24 maxlen: 24
185.162.245.0/24 maxlen: 24
185.162.244.0/24 maxlen: 24
185.162.247.0/24 maxlen: 24
2a0a:800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267046399 (0xfeacdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jan 1 13:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5407f6d2a1ae394486f1515779a6cf0abd9aef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:3c:6a:9d:e8:90:c4:17:de:a2:48:99:d6:
fb:c9:88:43:4c:49:ee:cb:b8:5a:c9:a3:f7:79:6d:
ea:8c:84:f8:79:e4:16:51:97:e5:3a:d8:2b:ac:0f:
14:30:06:2b:36:87:be:5a:2c:a0:b0:b4:c5:0a:9e:
31:47:9b:cc:20:33:4e:36:cb:9f:a9:68:74:f4:57:
7b:25:89:7f:08:72:64:c6:91:b9:05:b2:5c:e4:cc:
ff:2d:03:c4:1c:fe:77:07:82:d9:08:f3:b6:d8:75:
40:3e:fb:e9:a5:7c:3f:ba:b8:e2:12:a9:6a:b4:98:
49:b1:1c:d1:99:d1:bf:23:e8:72:56:c7:2d:36:9e:
b4:ae:00:03:c2:57:e3:fd:dc:ab:cf:c7:73:f0:3c:
c2:2d:70:05:72:5b:93:5e:44:4d:7e:d6:3a:1d:24:
fb:79:ec:10:dc:8e:67:42:d5:93:21:79:19:aa:1e:
2b:57:73:26:36:87:85:b4:c8:e4:2c:6f:93:87:db:
2e:43:c8:f5:25:75:0a:b8:a3:00:49:82:36:52:cd:
75:ae:e3:15:ac:76:de:22:c7:eb:07:1b:a4:be:76:
36:6c:b1:7f:a8:c0:3f:63:7b:bf:74:e8:2e:82:3d:
cb:d0:2c:c0:35:8b:18:9c:ae:6e:d3:d7:ed:0d:98:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:F6:D2:A1:AE:39:44:86:F1:51:57:79:A6:CF:0A:BD:9A:EF:14
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/VAf20qGuOUSG8VFXeabPCr2a7xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.244.0/22
IPv6:
2a0a:800::/29
Signature Algorithm: sha256WithRSAEncryption
4a:99:23:6e:c6:4c:92:55:1e:15:f4:46:0a:ec:58:67:87:4a:
ef:28:9d:be:0c:76:00:23:76:d4:0c:15:38:1c:16:81:e7:79:
87:c2:c9:05:64:5c:67:0c:53:b4:df:3b:ea:a1:be:91:ad:b3:
69:c4:d0:77:cb:7e:b4:41:d8:ff:41:5d:a4:e9:f1:a8:45:71:
b6:fd:51:4f:c5:f6:f4:d1:dd:94:92:30:4d:bf:1c:db:66:cb:
58:ac:9a:5d:e2:f1:5a:8c:2a:eb:0c:64:96:37:99:57:ea:ec:
2e:f4:03:26:7e:86:fe:c4:bc:14:0a:8a:23:5f:cb:b9:bf:3f:
c5:41:92:4d:75:29:06:14:24:8a:5b:1a:32:38:1f:96:82:82:
86:40:a4:2a:37:31:93:7a:fe:ce:89:f1:fb:b4:c2:c0:6b:7c:
cf:55:ca:e6:33:ee:ad:17:33:0f:61:57:13:e5:f8:8c:f3:65:
34:11:ff:d9:a1:74:66:8e:d1:c7:22:b1:36:42:e9:1a:ca:0f:
6c:25:c6:c8:e2:0d:53:de:87:84:04:0c:a0:6c:9e:61:30:47:
b7:81:1a:ea:38:83:bf:a3:3d:86:6c:3f:26:17:a9:b8:7d:bf:
19:59:68:c1:b6:cf:02:a4:ac:6d:1b:96:23:f9:f2:58:57:58:
a4:a4:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:45 2024 by rpki-client on console-ams.rpki-client.org