Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/VbIbYEC4tFLUjydQWA0CoUkYz3E.roa
File: VbIbYEC4tFLUjydQWA0CoUkYz3E.roa (raw, json)
Hash identifier: imAlpzahMVKZZ/oKFplPygVQ9ZDB3I/k+kxr/tJgt/4=
Subject key identifier: 55:B2:1B:60:40:B8:B4:52:D4:8F:27:50:58:0D:02:A1:49:18:CF:71
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 118A5830
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/VbIbYEC4tFLUjydQWA0CoUkYz3E.roa
Signing time: Sat 01 Jan 2022 15:00:12 +0000
ROA not before: Sat 01 Jan 2022 15:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56828
IP address blocks: 185.84.36.0/22 maxlen: 22
91.186.64.0/19 maxlen: 19
31.25.216.0/21 maxlen: 21
83.118.128.0/18 maxlen: 18
2a05:ec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294279216 (0x118a5830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Jan 1 15:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b21b6040b8b452d48f2750580d02a14918cf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:33:a1:27:14:80:76:b8:b8:dd:fb:9f:ba:
fd:fd:07:bb:de:08:a2:2e:38:f4:d6:e9:e9:c3:f3:
c6:18:22:8d:98:cb:a1:15:d9:c1:0b:e7:03:26:f9:
e3:d0:29:95:bd:d5:a3:89:42:e2:8b:19:3c:64:9b:
71:6c:6d:56:43:ac:bb:69:46:47:d6:0f:93:99:a6:
9b:0b:4b:b9:7d:d5:a3:08:e2:bc:ea:e5:08:45:ec:
b2:68:b8:a7:aa:92:99:a5:6a:c6:78:bb:79:e8:ee:
d2:ef:ec:3e:a7:f8:4c:ed:6d:63:82:9b:c4:84:9f:
00:d8:c9:97:dd:c2:73:f6:0b:27:93:49:7e:e5:87:
41:d7:29:af:cd:8a:2d:e5:8c:d3:9e:92:da:d5:4d:
8f:0c:a8:79:77:7b:b4:ff:ad:f6:7f:7d:5c:15:df:
6a:a1:53:e2:44:ec:50:bb:e0:6c:d2:57:cb:31:36:
6d:fc:b2:b0:6d:84:f0:44:0b:a9:83:7e:95:be:8c:
f8:60:75:19:52:10:b7:d5:83:df:a4:00:85:3a:72:
86:6e:55:f4:ad:47:f7:41:f4:8b:27:47:5f:df:e4:
38:22:91:84:40:b5:a6:ed:36:09:8b:8d:d6:8c:4e:
f5:ab:9e:d5:46:41:1b:20:52:05:2c:ad:00:2b:32:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:1B:60:40:B8:B4:52:D4:8F:27:50:58:0D:02:A1:49:18:CF:71
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/VbIbYEC4tFLUjydQWA0CoUkYz3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.216.0/21
83.118.128.0/18
91.186.64.0/19
185.84.36.0/22
IPv6:
2a05:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:db:63:1f:22:ab:6e:c6:4f:62:16:a8:05:f8:83:e0:fe:c6:
2e:17:7a:73:eb:9b:fe:df:8f:0d:df:9e:83:0e:cb:79:d8:ba:
f3:15:92:48:aa:45:8a:f1:e3:e9:2f:ea:ce:b0:77:52:89:54:
b5:b3:8a:48:e6:0c:59:69:9b:85:cf:0f:18:c6:d9:96:f9:28:
ff:bd:95:d1:d3:d0:3c:b3:de:39:04:ce:66:74:b4:72:d0:16:
93:df:7c:86:d3:af:fc:95:7c:a9:2d:03:41:82:ee:c5:27:82:
a5:13:4e:5e:31:a2:cc:f1:56:4c:a8:f7:53:5b:f0:87:5f:cb:
73:85:ac:64:78:06:49:44:fb:75:71:e3:55:6d:65:ad:20:77:
24:92:9c:9d:88:f8:ef:4d:32:bd:df:5e:55:05:e7:50:24:ac:
58:23:03:92:86:e5:53:d0:33:4f:65:cc:dd:e4:ec:f1:b9:18:
70:00:05:4e:74:25:51:4a:44:c6:f2:71:68:19:96:78:ea:92:
ad:d8:de:ff:72:3c:07:6e:3a:96:e2:63:5f:53:57:b5:ca:c0:
c9:68:64:2d:6a:e3:57:50:81:0e:a5:a7:cb:77:61:f8:93:1c:
41:14:20:c7:fd:75:e0:04:30:5e:28:f4:71:7d:e1:30:be:5e:
a3:3b:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:38 2023 by rpki-client on console-ams.rpki-client.org