Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/VvW0Y4DE-ZjZCps5sYRHe-5oviA.roa
File: VvW0Y4DE-ZjZCps5sYRHe-5oviA.roa (raw, json)
Hash identifier: /HBEG+mZLYzF5Ypvv1hylQixdukfL0qEhup6BXNJ2UE=
Subject key identifier: 56:F5:B4:63:80:C4:F9:98:D9:0A:9B:39:B1:84:47:7B:EE:68:BE:20
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 012D69
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/VvW0Y4DE-ZjZCps5sYRHe-5oviA.roa
Signing time: Thu 21 Apr 2022 15:27:23 +0000
ROA not before: Thu 21 Apr 2022 15:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50078
IP address blocks: 193.104.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77161 (0x12d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Apr 21 15:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56f5b46380c4f998d90a9b39b184477bee68be20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:55:2c:e0:e9:72:25:02:ac:ff:9b:1c:f0:
8e:03:ac:3b:70:58:ae:cc:25:65:79:2e:b0:c8:59:
61:ef:3d:80:12:ab:c3:3e:e7:59:19:8b:f5:f6:b9:
0a:00:ba:53:6a:b7:8c:2c:30:4b:03:ba:15:31:fa:
56:f8:44:b9:dc:f1:e0:bf:61:54:12:a7:2a:e4:c4:
cd:e5:c6:bd:76:e6:aa:30:cb:db:df:4d:a8:12:e1:
b9:55:19:19:28:46:ff:2b:36:e6:85:3c:3e:a2:14:
72:b9:76:47:a4:2f:86:eb:13:59:3c:5a:ea:d2:bf:
2a:b3:ad:2a:81:c7:0e:a7:97:f1:3a:9b:65:97:c8:
46:84:9c:b4:0f:2c:b6:d5:6c:07:9b:8c:57:0a:eb:
e0:fe:22:f8:bd:9d:f9:97:b1:87:64:fb:d8:75:ac:
a2:a3:40:6e:d6:fd:96:92:39:db:5b:e4:d6:20:7a:
15:9c:be:e4:62:e3:a5:f4:f9:f9:24:c3:3b:a5:15:
05:0a:e9:f1:b7:ad:bb:cf:bb:ee:ba:b5:2e:6d:73:
aa:ab:81:16:58:89:09:42:00:6e:d9:0f:da:43:ca:
e3:a6:db:dd:53:88:e4:d4:f5:c9:13:2b:a7:c8:85:
06:d6:82:ec:f6:37:7d:ab:cf:30:1c:cd:cf:b9:da:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:B4:63:80:C4:F9:98:D9:0A:9B:39:B1:84:47:7B:EE:68:BE:20
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/VvW0Y4DE-ZjZCps5sYRHe-5oviA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8d:63:9d:1c:f3:f7:6a:37:f9:d3:b0:28:ca:82:b3:5d:75:
6b:c8:37:0c:d7:28:54:11:e7:9b:43:4e:d2:ad:20:b0:91:53:
96:b8:f5:14:60:35:69:2b:9f:0d:fa:43:2e:80:eb:3f:0b:29:
b0:be:16:43:82:c8:53:a3:a0:7e:3e:bc:b5:1d:f7:68:4f:f1:
98:9d:fe:23:f7:4b:f8:a7:3f:4e:43:2d:4a:83:8b:2e:fd:40:
2a:b6:d0:1d:85:80:ed:5e:64:ab:90:a3:f6:77:a9:2d:60:e3:
40:80:6e:fa:21:bf:c4:e7:f2:b4:ab:ca:2b:eb:41:33:8b:91:
6c:72:33:ae:bb:c7:5f:22:fa:17:78:ae:e8:9d:0a:c2:38:71:
63:12:64:c7:eb:83:f0:88:86:32:8d:8f:d6:66:87:71:2f:dd:
9e:99:73:1d:4f:43:20:ca:4b:75:b4:57:02:02:38:78:3e:cf:
e7:68:1b:23:d5:fa:c5:a7:97:4d:18:09:33:07:0e:cb:58:a3:
d1:0e:93:62:2b:45:97:db:7d:8d:57:b9:7f:92:eb:f5:7d:52:
92:c1:e3:76:0c:5e:be:ae:2e:3d:c3:28:be:99:2f:27:5e:fc:
a3:40:8a:b1:c0:05:39:c2:88:c8:0b:71:d8:2e:ad:8b:6e:87:
2f:3b:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:57 2024 by rpki-client on console-ams.rpki-client.org