Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/vlrWeVRiiyF06rKeSWu12-rcON0.roa
File: vlrWeVRiiyF06rKeSWu12-rcON0.roa (raw, json)
Hash identifier: EtNNkZk2/FgoCq+Y0oM/le7QR2K7o7nQnS72PtVaAw4=
Subject key identifier: BE:5A:D6:79:54:62:8B:21:74:EA:B2:9E:49:6B:B5:DB:EA:DC:38:DD
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 11F8939C
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/vlrWeVRiiyF06rKeSWu12-rcON0.roa
Signing time: Sat 01 Jan 2022 16:10:26 +0000
ROA not before: Sat 01 Jan 2022 16:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13039
IP address blocks: 195.85.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301503388 (0x11f8939c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Jan 1 16:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be5ad67954628b2174eab29e496bb5dbeadc38dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:36:e5:c8:7d:53:e7:de:11:53:86:7b:db:
c0:63:53:13:31:56:14:43:01:ab:83:e8:9e:3d:a4:
a5:ac:c1:68:b0:cb:c6:c0:3d:1e:b7:23:76:2d:84:
7d:42:6b:87:eb:67:9f:3b:ce:58:6c:1d:f4:30:84:
cd:48:41:50:a1:7a:dd:9d:f1:c4:94:d4:f7:3e:b2:
e5:a4:ef:4f:ab:e0:7b:7f:a6:55:92:f2:da:3a:4a:
86:99:4c:6b:f3:af:b1:94:71:fb:a9:cc:91:27:52:
1b:45:55:ca:59:84:2c:22:5f:3a:5e:a8:95:f5:cc:
dd:7b:bd:69:08:ae:e2:8c:e1:f6:4b:ca:fc:7a:8e:
f3:c9:01:e7:e5:01:e7:a2:77:76:36:20:d9:6b:bc:
83:c5:12:95:65:7e:45:65:a1:5f:1e:3f:67:f4:51:
19:b8:6e:34:9c:bc:54:03:b1:a5:c0:40:43:da:b9:
cd:4c:d4:57:32:22:ce:53:15:72:8d:4c:25:3f:6a:
c5:09:60:ad:a1:84:77:5f:c8:0c:59:ef:99:69:02:
71:6d:b3:a0:ab:b9:d9:3f:55:ac:d4:57:f0:b1:78:
49:7a:1f:45:08:d4:0a:f8:05:f1:82:8b:5c:1b:22:
a9:68:e6:1b:84:71:3d:8b:98:7e:c5:0f:85:80:aa:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:D6:79:54:62:8B:21:74:EA:B2:9E:49:6B:B5:DB:EA:DC:38:DD
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/vlrWeVRiiyF06rKeSWu12-rcON0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fe:25:86:ed:1c:7e:96:82:63:ad:f6:18:24:a9:9f:86:df:
94:2f:b7:50:30:cc:fd:78:f5:2d:75:a3:c3:5f:6e:64:0c:e9:
8d:fd:05:db:a1:22:c6:82:22:89:84:3e:f0:9e:af:19:be:bb:
5d:d7:bc:eb:bb:e4:62:a8:20:f3:25:91:4f:66:bc:74:31:64:
9e:e7:47:65:2d:4d:1c:cc:9a:ba:74:9d:9a:13:d3:db:a5:3f:
b2:dd:40:ce:57:ba:7e:11:9e:02:52:a3:15:c9:5a:67:f0:2a:
61:b7:18:27:47:23:68:16:05:90:e1:dd:c6:be:c2:cc:10:7e:
2e:fa:05:6f:fa:1f:8d:8f:3a:c3:7f:ca:5f:d5:d9:7d:b5:78:
a7:f3:9e:9e:fd:f6:62:7a:e3:9a:86:9a:d7:79:76:bf:d1:05:
a1:1c:8e:79:c1:21:07:81:cc:eb:24:86:d8:a9:76:9e:9c:e5:
e2:b5:77:34:42:6f:1b:e5:37:0e:79:31:27:c2:4e:f1:2b:e5:
77:5b:bc:ff:b3:fc:49:45:c0:ef:1d:f6:09:4b:b1:e1:19:71:
14:c5:bc:91:69:f1:2f:43:d6:5a:75:de:8f:4a:0b:67:55:5c:
ad:33:36:8e:ad:58:65:9f:c3:24:6d:98:c9:6d:9a:da:f7:e8:
ad:47:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-fra.rpki-client.org