Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/vk1yQJl65uO3RqavvfEQdLkJy4Q.roa
File: vk1yQJl65uO3RqavvfEQdLkJy4Q.roa (raw, json)
Hash identifier: oJdZFZdsQJvXn6dqkuKxKsC4V0PxD9rPolO2zUd/Xhs=
Subject key identifier: BE:4D:72:40:99:7A:E6:E3:B7:46:A6:AF:BD:F1:10:74:B9:09:CB:84
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0BBB38D6
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/vk1yQJl65uO3RqavvfEQdLkJy4Q.roa
Signing time: Sat 01 Jan 2022 05:52:18 +0000
ROA not before: Sat 01 Jan 2022 05:52:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198583
IP address blocks: 185.153.245.0/24 maxlen: 24
185.153.246.0/24 maxlen: 24
185.153.247.0/24 maxlen: 24
37.148.242.0/24 maxlen: 24
37.148.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196819158 (0xbbb38d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 1 05:52:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be4d7240997ae6e3b746a6afbdf11074b909cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:13:af:cb:a7:d5:cc:64:ce:34:31:0e:43:
ae:29:45:8d:7d:b4:a7:79:59:be:c6:db:d9:03:5c:
6f:b2:ca:38:3f:98:51:88:63:ad:b0:45:47:4a:ff:
97:72:b3:68:c6:ee:b3:ff:f7:66:ce:57:ab:e3:7d:
12:c7:0d:59:49:9a:3b:e9:af:6b:af:e7:33:6c:1d:
d3:fd:17:a4:6c:c0:a9:09:92:01:d0:05:c1:a1:7a:
60:c2:9f:ab:3e:f5:49:f4:5e:8d:99:41:65:4c:f6:
5c:8a:d5:51:44:4d:f0:e4:28:15:80:dc:42:60:61:
16:f7:86:9c:db:c2:2e:85:cb:2c:69:19:94:38:42:
f6:a9:55:87:ee:1d:39:71:1d:4d:b9:fe:49:8f:be:
78:57:9e:6e:e7:3e:d6:6e:b8:34:8d:7a:ad:ad:a3:
a7:99:4d:ad:dd:4e:a3:2d:63:a8:40:50:b8:c9:ee:
41:d2:18:09:06:41:60:b5:5d:1b:69:b4:8f:55:15:
54:b8:0d:74:78:ef:b3:12:b7:c2:be:be:8d:28:d5:
66:8d:b3:4b:35:e5:56:19:78:41:1c:bc:cb:fd:ef:
6a:1c:b8:63:05:71:d1:8d:92:ae:82:55:00:40:16:
e5:66:17:b6:d1:0a:67:f7:24:de:cc:2a:74:f9:36:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:72:40:99:7A:E6:E3:B7:46:A6:AF:BD:F1:10:74:B9:09:CB:84
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/vk1yQJl65uO3RqavvfEQdLkJy4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.242.0/23
185.153.245.0-185.153.247.255
Signature Algorithm: sha256WithRSAEncryption
12:2c:34:d4:dc:8c:fd:1a:99:59:10:07:f4:ad:db:71:cb:2b:
8d:3b:3e:2f:a4:b8:8d:d3:a6:b7:6d:e3:80:b3:f8:bc:7e:a8:
c5:cd:59:82:45:74:46:4a:4b:a8:c2:56:67:f6:a0:1b:b3:5c:
12:09:2f:3c:ce:81:df:80:d3:d0:04:79:c9:7b:00:6e:75:da:
bd:5a:3d:e8:e1:9c:2f:e7:23:56:86:46:51:ff:95:e4:cd:0a:
4b:cb:ee:fc:38:c7:ac:45:ef:8c:6a:fd:dc:ed:ee:b4:5d:5b:
a6:7a:54:8d:e9:0d:a0:52:46:b3:6a:07:d7:1b:60:68:b8:a1:
b0:8a:d0:c1:f3:a6:c2:f6:11:1a:dd:d1:24:8e:7e:56:fe:ad:
79:20:21:93:4a:24:e6:81:24:17:a9:e8:00:6a:f9:0d:4b:10:
37:f3:82:18:0a:fe:96:b6:0a:5a:2a:22:2f:f7:72:98:3d:0a:
75:29:ff:9e:81:68:cc:13:45:6e:f2:c3:92:08:86:8a:c6:04:
a9:c8:7b:c9:e5:22:92:a3:77:a0:73:21:27:0f:5f:88:23:cc:
a4:c0:1f:b9:fe:34:f0:40:64:5a:9d:7d:fe:b4:04:b8:3f:56:
4e:2c:95:f0:ec:9b:8a:a0:5a:fd:26:fa:2f:95:c1:d7:a1:c4:
cf:4f:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:59 2023 by rpki-client on console-fra.rpki-client.org