Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/vtchOoGplaKgaXYE7QUPzai4xW0.roa
File: vtchOoGplaKgaXYE7QUPzai4xW0.roa (raw, json)
Hash identifier: Yzv2dpEn2zVpSOwrwiwhkJkQ3nrruMXWgGzOvO4fJVw=
Subject key identifier: BE:D7:21:3A:81:A9:95:A2:A0:69:76:04:ED:05:0F:CD:A8:B8:C5:6D
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 018460CAA481C27E5F20364A3B7375118112
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/vtchOoGplaKgaXYE7QUPzai4xW0.roa
Signing time: Thu 10 Nov 2022 09:06:43 +0000
ROA not before: Thu 10 Nov 2022 09:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 91.204.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:ca:a4:81:c2:7e:5f:20:36:4a:3b:73:75:11:81:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Nov 10 09:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bed7213a81a995a2a0697604ed050fcda8b8c56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:e1:bc:43:3c:95:c6:5f:72:0f:01:2b:bf:
51:59:25:e3:3a:66:08:c7:cb:26:9f:78:93:fe:09:
c6:b4:a1:d1:02:7c:cb:c6:33:7c:88:4a:c9:60:18:
f3:8e:78:0c:b1:b9:7e:42:10:db:78:aa:bd:9c:eb:
df:c7:eb:40:02:ee:e7:6b:bc:4e:c3:de:67:4f:3b:
a7:11:dd:d1:f5:83:8a:cf:b7:31:4b:63:50:e4:b7:
27:ee:b3:41:10:54:63:f5:40:9a:59:a7:90:aa:f7:
c0:95:c2:95:43:51:55:c1:64:e7:6e:63:3e:e3:db:
77:a7:3b:83:1a:0b:98:75:15:f5:b9:91:b5:9c:b3:
80:fd:b4:2b:14:19:a2:e6:6e:81:06:07:fd:5f:ac:
e6:04:45:d5:43:52:27:0e:96:af:90:36:3c:5c:77:
0f:38:96:6e:d0:4a:24:65:d6:54:b0:db:b9:45:75:
74:d6:50:4f:8b:c2:d0:bd:ee:ea:f5:f7:ae:54:c3:
92:f7:10:31:aa:54:27:73:62:91:89:43:7e:8f:38:
51:56:64:43:e0:78:61:fd:fb:b2:bb:7f:fb:41:d8:
59:de:e1:4e:ed:7f:02:e4:30:45:ca:c4:b6:d4:b9:
a0:72:be:33:75:0b:bf:e2:7b:7c:55:9e:6c:95:8f:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:21:3A:81:A9:95:A2:A0:69:76:04:ED:05:0F:CD:A8:B8:C5:6D
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/vtchOoGplaKgaXYE7QUPzai4xW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2e:7f:cd:22:b5:bb:48:4b:6d:df:e2:10:08:09:56:f3:c2:
fb:5b:a9:ac:4f:75:43:33:cb:98:4e:b0:db:2f:fd:0c:19:4d:
00:0d:28:4c:75:84:9e:9b:c1:66:28:f5:aa:e5:b4:ea:c5:47:
05:11:c3:4f:1a:02:97:c9:df:20:f1:be:48:c8:a9:ac:1e:db:
1c:49:f4:7b:21:ef:b9:a6:40:04:85:57:d7:d9:4b:92:44:1d:
bc:f0:3b:14:4b:05:2c:66:7c:89:72:d7:94:d0:b3:08:38:61:
08:ee:93:3d:64:0d:dc:33:9d:c9:f0:be:87:cd:9e:48:c3:0d:
5d:12:cf:11:b2:08:7c:0e:02:20:dc:5e:78:c4:ce:df:67:77:
6a:f1:b1:48:dd:77:88:31:29:7a:a3:e8:43:0f:9e:db:33:b1:
f7:63:ac:9d:00:76:d5:c8:a7:52:22:4d:16:5c:7c:49:df:ec:
52:ee:26:74:62:73:7f:30:e1:5a:6b:76:da:b3:b7:dc:58:ba:
60:7b:72:09:86:3c:27:7b:81:c0:de:77:86:ae:c5:1d:e6:50:
ce:9e:40:ab:49:b1:fc:0a:5e:c5:5c:63:68:63:8b:87:39:4b:
cc:d1:ce:35:16:9d:d1:c5:c9:cb:49:a3:03:4b:29:79:1f:33:
fe:19:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org