Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vxSuASu4A3rXRcaNuQxtlZ-nBBQ.roa
File: vxSuASu4A3rXRcaNuQxtlZ-nBBQ.roa (raw, json)
Hash identifier: l52IEqWg+yC0cPwkjbHN/fX8minqk2/OgMXCynRwUdc=
Subject key identifier: BF:14:AE:01:2B:B8:03:7A:D7:45:C6:8D:B9:0C:6D:95:9F:A7:04:14
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01848586599426EED998728C6F890329AE1F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vxSuASu4A3rXRcaNuQxtlZ-nBBQ.roa
Signing time: Thu 17 Nov 2022 12:18:05 +0000
ROA not before: Thu 17 Nov 2022 12:18:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:86:59:94:26:ee:d9:98:72:8c:6f:89:03:29:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Nov 17 12:18:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf14ae012bb8037ad745c68db90c6d959fa70414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:03:0a:c7:e0:df:0b:98:00:d8:59:28:a2:
14:70:a8:87:ab:be:b1:8d:5f:e0:ae:e3:d3:44:14:
c0:89:93:1c:e9:de:5e:0a:98:f2:3d:d2:1e:ac:9d:
ca:04:41:b1:12:7f:e7:64:d5:f3:39:d7:f0:30:ca:
c8:42:03:3f:b2:2e:8d:8f:01:04:c7:07:95:7b:93:
2f:e2:64:87:9e:eb:e7:00:2a:7a:18:76:74:c3:74:
16:e6:53:97:ca:67:96:7f:36:36:38:2a:45:3f:e3:
73:63:d9:2a:e5:8c:75:bd:a7:e4:a1:38:44:70:3a:
79:35:f3:f6:22:fa:bf:e0:15:1d:3f:80:52:33:9e:
2b:af:84:69:ee:30:3b:40:85:0a:05:ca:70:3a:24:
e9:d0:43:ab:47:b2:34:06:f8:89:8c:3e:15:7f:c1:
1a:9e:e5:c2:92:6d:6e:e7:be:13:eb:0f:4b:2e:34:
53:53:1e:81:1f:2e:47:6a:77:e1:e5:14:e7:63:bc:
6a:1d:ce:f5:2c:52:7f:5f:c2:d5:d8:0a:e1:06:9f:
a3:1f:a0:c3:12:60:34:b5:25:eb:37:cb:a7:47:0b:
a5:8a:72:12:55:67:0a:8c:28:91:d8:7a:fb:ce:d2:
42:3c:19:41:f3:bf:b6:8a:2d:bf:d8:5e:9b:e5:fa:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:AE:01:2B:B8:03:7A:D7:45:C6:8D:B9:0C:6D:95:9F:A7:04:14
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vxSuASu4A3rXRcaNuQxtlZ-nBBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.240.0/22
84.54.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:7b:04:2c:1e:e8:a7:75:71:43:f3:17:bc:e0:56:38:9b:e2:
67:57:91:38:9b:90:73:e7:73:41:29:38:42:2e:77:76:96:88:
95:ba:58:7f:c2:54:80:64:89:1d:af:e4:ec:bb:50:9d:de:01:
88:0f:ca:85:d0:a6:26:b9:16:4b:b6:fa:d1:14:dd:84:89:a6:
f2:df:6e:d2:c4:7d:f9:d3:01:15:19:3f:2f:0f:19:d9:f4:61:
6d:6c:71:d1:46:7a:2e:5f:d8:d5:9d:05:92:9b:96:ea:5b:aa:
ca:d0:fd:48:3d:70:37:e8:da:cf:7a:9b:e7:0c:91:c0:1c:09:
ee:8b:7c:6d:b9:69:a0:81:c3:c7:ad:34:59:09:94:2a:0e:7f:
52:55:02:32:73:6f:e9:b3:cb:51:e9:aa:0a:05:3d:51:76:9e:
fb:51:b0:00:73:1b:4a:01:70:37:1d:9f:92:51:74:05:1a:7f:
bf:cb:ea:4b:36:0b:d7:51:00:c9:5c:4c:87:ab:21:e8:f4:c1:
ea:d7:39:a3:29:d0:36:f5:2a:2b:e2:38:b5:17:32:87:57:7b:
fd:26:8a:cd:e9:53:58:cd:51:50:64:ef:17:f2:5e:e5:61:10:
38:89:ec:4c:cf:d3:dd:62:ca:6a:9b:7b:e9:3b:65:45:80:3b:
3d:ff:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org