Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vijU0dPpgVEaIZwpzyCjiMFY3XI.roa
File: vijU0dPpgVEaIZwpzyCjiMFY3XI.roa (raw, json)
Hash identifier: wFDvQPhhS5fTtKoI2QjNsYab7ubWZ/vllF3mREhje44=
Subject key identifier: BE:28:D4:D1:D3:E9:81:51:1A:21:9C:29:CF:20:A3:88:C1:58:DD:72
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01EF0AB1
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vijU0dPpgVEaIZwpzyCjiMFY3XI.roa
Signing time: Sat 01 Jan 2022 15:06:14 +0000
ROA not before: Sat 01 Jan 2022 15:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3170
IP address blocks: 193.8.173.0/24 maxlen: 24
147.189.141.0/24 maxlen: 24
45.14.112.0/24 maxlen: 24
2a0e:c80:1::/48 maxlen: 48
2a0e:c80:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32443057 (0x1ef0ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 15:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be28d4d1d3e981511a219c29cf20a388c158dd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:70:af:28:59:a0:76:da:98:07:6d:45:ed:
19:45:17:60:df:7d:56:be:2f:94:8a:00:b5:80:58:
9e:7a:a5:19:53:ef:9a:b0:d1:bb:b5:36:e1:3a:2c:
c8:aa:fa:82:0b:e4:e8:22:96:9a:83:d3:1c:61:e4:
26:93:97:a6:35:de:23:c0:c0:3c:9b:1f:d9:69:f6:
90:9d:36:bc:98:ac:dd:e1:e7:32:e6:74:70:47:4b:
a5:57:06:99:18:07:11:63:17:de:98:8a:a9:89:80:
2e:14:f7:36:e8:24:7e:58:f2:5e:a7:f1:cf:86:e3:
34:51:cf:87:a9:8c:b9:43:fa:c6:cd:25:0d:0c:c9:
af:1b:98:0a:cc:fb:67:bf:71:42:90:d3:b2:c4:64:
d3:30:a0:1a:93:c6:ae:27:60:d0:81:79:99:54:c9:
da:18:97:e0:37:9f:7d:23:b0:24:8e:f3:26:ca:ff:
cf:3c:f2:dc:62:3d:1f:d0:7c:06:6d:a8:0b:c8:34:
dc:47:e8:69:f1:5e:eb:9f:86:14:26:6c:5c:31:7c:
9b:60:ba:f7:e2:6f:e6:20:1a:98:32:ae:01:b3:64:
c5:30:3a:ec:2b:b4:99:a9:7b:96:c8:cd:c0:e2:26:
18:1d:34:93:cb:ed:d9:2d:18:20:82:cc:83:1e:51:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:D4:D1:D3:E9:81:51:1A:21:9C:29:CF:20:A3:88:C1:58:DD:72
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vijU0dPpgVEaIZwpzyCjiMFY3XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.112.0/24
147.189.141.0/24
193.8.173.0/24
IPv6:
2a0e:c80:1::-2a0e:c80:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:5b:16:84:f2:ca:43:7b:0c:4e:0c:b1:f6:f5:5b:16:2b:df:
48:47:45:30:12:46:9b:66:d6:7b:df:80:7b:52:a2:90:30:1f:
64:b6:8f:ee:84:8f:ed:b4:78:0b:27:a1:04:9e:f5:5a:d7:4d:
64:5b:4e:db:f6:f3:2d:ec:55:c9:e8:dc:17:67:93:a5:18:0e:
c6:13:b4:68:a4:3f:76:b4:e4:b2:c4:20:e9:76:7b:7f:6f:a6:
61:1a:d0:3f:88:fb:19:5b:fb:c2:37:eb:15:8f:59:82:9d:26:
b6:21:8b:3a:de:a4:a4:a4:58:64:cc:43:5f:a3:38:ba:32:6c:
8b:83:c2:75:b7:f4:7d:d0:b5:be:40:bc:1c:9e:29:04:74:2a:
b7:0b:72:af:3b:57:fb:e5:40:d7:80:fb:19:8f:0b:8f:40:13:
a1:0b:2e:ca:be:d9:93:06:12:20:b9:3f:f7:63:20:5f:66:66:
2d:74:b9:a4:cf:f3:d2:e4:b8:c6:ef:01:7a:4b:2c:ac:5a:b4:
c4:8a:eb:6b:c8:89:0d:b2:b5:e2:f2:74:71:93:06:1b:17:4c:
db:43:18:87:0d:5a:1e:ce:80:37:ac:db:ca:d1:9e:8b:7a:88:
d6:d7:95:0d:64:e1:8b:88:d5:de:5f:22:ca:68:f4:c8:71:bd:
2f:61:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:48 2023 by rpki-client on console-fra.rpki-client.org