Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/vCiHaBEzLJ3AKI3uzgttA1MtfUQ.roa
File: vCiHaBEzLJ3AKI3uzgttA1MtfUQ.roa (raw, json)
Hash identifier: Ue3fcM6XRsCjWwCFr0vDxQXUY9yzuMRFwm0o0i4WjMM=
Subject key identifier: BC:28:87:68:11:33:2C:9D:C0:28:8D:EE:CE:0B:6D:03:53:2D:7D:44
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 0183D5A61D1C4450EBCFD99C381CEA84441D
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/vCiHaBEzLJ3AKI3uzgttA1MtfUQ.roa
Signing time: Fri 14 Oct 2022 08:39:36 +0000
ROA not before: Fri 14 Oct 2022 08:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205714
IP address blocks: 86.32.0.0/15 maxlen: 15
2a10:5700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:a6:1d:1c:44:50:eb:cf:d9:9c:38:1c:ea:84:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Oct 14 08:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc28876811332c9dc0288deece0b6d03532d7d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:a6:34:77:f2:73:69:86:5c:39:67:ed:0b:
9d:dd:f5:17:ab:08:1c:90:a9:b9:bb:fe:fc:f3:1e:
d5:b6:23:28:cd:68:6d:b0:81:01:5c:c8:0d:52:7a:
47:0c:bb:a1:86:ed:9c:40:d8:44:57:91:23:a7:a7:
80:f1:7f:95:a3:ba:9d:06:ac:75:28:51:8f:97:0f:
a1:b4:ea:be:12:a4:34:3f:81:b5:c7:ed:68:75:7e:
d2:32:f4:3f:aa:d4:a2:dd:26:41:d9:25:6d:f9:ac:
64:fd:91:0d:d9:80:30:a1:62:2f:cd:44:53:90:ec:
86:ac:27:b4:7d:fc:c9:28:38:7f:56:0b:cf:db:79:
95:4b:96:36:d8:d7:c6:4b:c2:8e:81:b0:85:0e:f5:
50:80:05:a7:cd:37:c4:85:5f:22:8f:0a:2c:3c:78:
cd:6b:13:46:2c:2a:0f:d4:c8:7e:63:82:10:c7:ce:
84:1c:2e:54:1f:f5:93:dc:a9:20:73:ff:5c:ef:51:
62:08:81:77:f9:3b:7a:85:ab:82:56:09:11:15:80:
3a:9d:76:0e:88:3d:51:83:2f:01:78:4b:77:6d:a6:
2a:af:70:49:ac:25:79:ea:71:81:85:c7:85:b1:97:
c0:3c:eb:9a:0f:28:df:9c:40:fe:0a:db:7f:36:96:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:87:68:11:33:2C:9D:C0:28:8D:EE:CE:0B:6D:03:53:2D:7D:44
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/vCiHaBEzLJ3AKI3uzgttA1MtfUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.32.0.0/15
IPv6:
2a10:5700::/29
Signature Algorithm: sha256WithRSAEncryption
89:83:55:c8:94:26:d6:22:b2:99:c0:a6:03:f1:29:ac:c1:fd:
92:a2:4b:0f:bd:06:6a:f3:70:a9:b1:43:08:10:f3:23:a2:2e:
5b:ac:87:09:99:27:e5:3f:68:04:76:58:20:3b:ac:a5:50:e1:
a9:2e:44:a5:5f:11:ef:e9:35:5e:4d:3a:55:56:91:b2:04:e9:
c1:71:8c:ca:5c:83:24:6e:dd:69:e4:d7:cf:eb:c1:bc:98:ab:
c1:b1:3a:a4:d2:7b:29:a2:b1:85:81:11:f4:3d:c9:83:65:bc:
63:b2:bf:6f:08:bc:11:6d:c2:45:ea:85:d0:d3:bb:e7:1e:bc:
61:82:e9:af:36:79:b7:5c:72:0e:09:98:f2:e3:33:c8:89:aa:
6a:59:6d:16:ef:f0:dd:2b:51:13:ed:1a:f6:00:46:22:27:a0:
9a:0c:5c:78:19:26:96:20:a4:8e:87:83:42:7c:d3:38:84:fe:
72:2f:3d:1a:f8:de:54:58:65:10:78:d0:5b:1a:2e:db:c3:eb:
21:37:07:28:73:f4:3c:fd:25:8c:5d:60:ff:9d:0f:ac:87:44:
98:0d:5f:dd:da:0f:36:21:07:56:b9:a9:84:2b:af:be:e9:f1:
c6:21:15:8e:a7:7b:aa:f6:11:c3:47:b6:ef:d4:52:d8:cb:9e:
f4:6c:eb:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:24 2024 by rpki-client on console-ams.rpki-client.org