Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/vsReurBhsLc0Cr7oHVIeJBE0_mU.roa
File: vsReurBhsLc0Cr7oHVIeJBE0_mU.roa (raw, json)
Hash identifier: TY5avleyQ57cERp3jzT14rfGKHhaTxC5nmT/q0ALqwI=
Subject key identifier: BE:C4:5E:BA:B0:61:B0:B7:34:0A:BE:E8:1D:52:1E:24:11:34:FE:65
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0436066F
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/vsReurBhsLc0Cr7oHVIeJBE0_mU.roa
Signing time: Tue 08 Mar 2022 01:48:25 +0000
ROA not before: Tue 08 Mar 2022 01:48:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210578
IP address blocks: 193.218.190.0/24 maxlen: 24
94.158.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70649455 (0x436066f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Mar 8 01:48:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bec45ebab061b0b7340abee81d521e241134fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:4d:b5:a7:b4:83:5f:ee:2d:4f:7b:eb:f6:
8f:d8:0f:39:57:98:2e:cf:68:08:67:80:86:00:4a:
e8:98:2c:8a:51:24:a6:f8:d3:37:8c:25:0c:d2:ac:
bb:33:fb:d7:e5:fb:f7:94:20:1b:14:aa:f3:59:1e:
a3:61:44:c4:f4:68:bc:9f:cb:35:a8:7e:bf:1c:cc:
63:2f:e9:a5:d4:a8:4f:36:40:84:db:4a:9a:7e:a3:
ae:c7:d8:18:24:7b:88:83:82:21:29:b4:69:64:4c:
c9:63:83:92:d3:d1:e8:85:bc:f6:f6:02:45:31:f5:
d6:7b:e5:cf:30:20:30:5d:a0:4b:36:fd:0b:1b:3f:
d5:2b:f4:1e:94:8a:99:2b:ae:31:30:f7:85:ec:c1:
a7:53:5b:a8:58:24:72:28:5a:a7:24:0b:b9:33:6f:
fc:41:f1:74:48:d7:77:ce:2d:b2:eb:09:2d:eb:5e:
3c:98:d6:39:23:d4:55:cf:66:f2:3c:4c:ec:64:45:
b2:37:3c:f4:04:86:56:bf:9a:27:90:2e:f9:0d:6d:
15:a8:62:ac:ea:bc:35:e6:8b:66:38:79:b9:3c:96:
ff:c2:71:90:e6:93:e7:dd:a5:db:25:33:0b:a7:ee:
5e:a8:ae:ed:a5:45:d9:b1:88:57:53:0d:07:68:96:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:5E:BA:B0:61:B0:B7:34:0A:BE:E8:1D:52:1E:24:11:34:FE:65
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/vsReurBhsLc0Cr7oHVIeJBE0_mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.219.0/24
193.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
14:17:f2:3f:4f:aa:12:f4:96:56:2d:fe:31:87:7f:77:dc:c3:
46:26:2e:b6:07:c2:b6:bb:6b:54:0e:df:5b:39:b7:77:cb:bb:
2c:12:a5:1e:63:eb:b1:3b:86:2f:9e:b9:46:83:f7:8c:a2:aa:
ee:e9:7f:5e:ad:a8:20:1d:2e:fe:55:28:b8:08:fc:18:82:f5:
ba:66:df:07:a1:f4:59:de:94:d9:67:e0:cd:7f:67:de:29:0f:
09:f5:ad:73:a0:31:0f:2c:12:3a:fc:e7:78:17:b2:1d:3a:d5:
cb:06:1f:28:ef:6d:58:c1:bd:14:57:8b:29:8e:da:3f:d8:df:
12:37:7a:86:d6:20:8e:04:35:32:4f:2a:ca:92:e5:1c:40:17:
59:4d:a6:cc:b0:66:77:3b:ff:60:98:d9:8f:f3:d1:02:ff:d2:
d3:d7:7b:56:f6:5d:53:dc:ff:7b:de:2b:ed:d4:da:22:e7:41:
1d:0a:69:43:16:82:14:bd:29:ea:73:96:12:66:12:71:e4:23:
2e:84:d9:46:dd:28:70:75:25:97:c1:ef:4f:79:50:d8:2b:cd:
fa:ad:7c:f7:da:5e:92:6e:b2:bd:da:c2:9d:6a:64:0f:a0:63:
51:a2:ff:9a:2e:ad:74:de:c7:4e:12:9f:54:86:17:dd:7d:50:
ec:ce:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-ams.rpki-client.org