Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/vu_OipcN_ym5krAXCEkW0SRvFBQ.roa
File: vu_OipcN_ym5krAXCEkW0SRvFBQ.roa (raw, json)
Hash identifier: XqBZDxbFTWToRshV+kvVwaA3109UWyldZv07UTOBHMc=
Subject key identifier: BE:EF:CE:8A:97:0D:FF:29:B9:92:B0:17:08:49:16:D1:24:6F:14:14
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01822C5684B2B6AB2CA32BE8C45C922EBAD6
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/vu_OipcN_ym5krAXCEkW0SRvFBQ.roa
Signing time: Sat 23 Jul 2022 18:34:03 +0000
ROA not before: Sat 23 Jul 2022 18:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 91.226.225.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2c:56:84:b2:b6:ab:2c:a3:2b:e8:c4:5c:92:2e:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jul 23 18:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beefce8a970dff29b992b017084916d1246f1414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:2b:55:fc:e8:78:a2:d7:40:53:78:83:40:
c2:b6:35:c4:dc:cd:68:b0:e5:30:6b:6c:da:16:00:
38:e7:db:fe:4f:57:69:9c:25:42:aa:ec:85:c7:db:
47:93:75:93:a2:07:d7:8f:4e:f3:51:7e:35:62:3d:
d5:74:04:0a:a5:57:8e:a5:ac:69:0a:81:b5:de:0b:
00:f8:c4:bb:7c:3d:91:77:1b:27:a1:8a:a5:1d:90:
08:87:42:bd:f6:1f:37:a4:8d:13:9f:fc:1d:d2:63:
86:81:d6:78:b4:5b:c6:19:19:c7:ad:4a:54:e2:25:
6d:48:24:d9:c7:bc:73:82:19:3b:d8:7e:15:8e:15:
43:9a:b0:ed:4e:0e:33:7f:07:4c:53:40:5f:24:21:
2d:e0:19:33:2a:78:f7:5b:9f:4a:c2:de:f7:79:df:
6a:87:92:26:3c:19:53:03:9e:60:c1:61:c2:f3:16:
12:28:93:28:99:88:5e:fa:43:b7:72:37:31:5a:e4:
c7:fa:ff:ac:31:5e:f2:d6:9a:ce:ed:13:82:d9:57:
d5:bd:7d:cd:d9:54:5a:7d:cb:82:a5:bf:56:70:81:
ef:6b:0a:12:02:4c:de:fa:12:4d:c9:79:3e:6c:31:
97:5e:33:4f:18:2c:75:36:ae:a7:f0:06:a9:28:f1:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:CE:8A:97:0D:FF:29:B9:92:B0:17:08:49:16:D1:24:6F:14:14
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/vu_OipcN_ym5krAXCEkW0SRvFBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.2.0/24
91.226.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a6:a8:12:69:7c:72:39:1c:35:c8:bb:6b:93:c2:f0:5a:cc:
b0:46:d4:a1:16:da:c9:bc:76:57:0a:48:a5:a2:9e:55:f6:89:
cc:f0:af:19:13:f6:0b:85:27:49:0f:ef:87:b4:5c:ab:92:5b:
92:f4:1a:f0:eb:c0:b9:a7:6d:51:e5:fb:df:d2:7e:af:f5:33:
a4:f6:fb:a8:12:03:be:2f:f0:d1:0d:a0:82:24:72:22:9b:3f:
a7:2c:5e:3e:f7:e3:c5:f6:11:d8:4a:96:e5:0d:00:83:11:5d:
8d:14:f5:48:41:b4:17:66:f5:90:77:09:d8:60:c6:ff:c6:29:
67:ef:d7:da:93:18:82:6a:44:d0:7b:c4:47:a4:0f:dc:92:4e:
51:e5:c7:30:b6:e8:bf:28:c8:8c:b8:4b:44:2b:fa:0c:b6:c1:
cc:ce:06:a4:94:fd:d4:42:87:06:0b:6e:04:ed:eb:14:2e:1c:
8a:5c:8a:03:b1:fc:60:9c:10:df:81:a9:c2:18:13:53:c6:5e:
61:25:85:31:84:30:8c:e7:01:4a:91:01:28:93:ea:79:ea:63:
c0:76:a7:bd:ad:04:eb:82:9b:c5:bb:16:6e:25:6c:61:4b:95:
58:45:4e:9b:c4:65:80:2e:db:8e:71:42:ef:a6:16:08:be:79:
c6:49:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org