Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VHUvpgt9iaTqAtXdexk-z_Xkrz0.roa
File: VHUvpgt9iaTqAtXdexk-z_Xkrz0.roa (raw, json)
Hash identifier: WQQyVhSylPycrDGG1hFBl1R7SBzapDXXpuJmh0cGauw=
Subject key identifier: 54:75:2F:A6:0B:7D:89:A4:EA:02:D5:DD:7B:19:3E:CF:F5:E4:AF:3D
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A64B642631BA80760B5925D35CE872F
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VHUvpgt9iaTqAtXdexk-z_Xkrz0.roa
Signing time: Wed 20 Jul 2022 06:56:24 +0000
ROA not before: Wed 20 Jul 2022 06:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39879
IP address blocks: 212.183.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:64:b6:42:63:1b:a8:07:60:b5:92:5d:35:ce:87:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 06:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54752fa60b7d89a4ea02d5dd7b193ecff5e4af3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:dd:7e:c1:ba:85:8a:1e:c5:b0:ec:bd:ba:
84:cf:7e:06:b7:96:d2:b0:7c:08:9e:60:41:b0:d4:
f8:7a:59:8f:54:80:3b:3f:94:e3:f5:6a:07:1e:f4:
b7:6c:cb:5d:e7:c9:0d:10:1e:e4:10:00:f2:08:08:
a8:71:d8:0e:ac:fb:c5:8c:19:e1:a2:a7:49:eb:34:
32:18:28:af:fd:ba:65:3d:cb:7b:ea:1f:51:fd:d8:
76:e2:a1:7a:25:b5:70:03:4c:4c:29:83:01:8b:43:
c9:20:d8:ae:e0:df:39:e4:58:34:f2:30:8e:b3:bd:
f1:f2:e5:a3:fe:50:50:51:34:e8:cf:36:07:48:0f:
cd:50:c0:8f:60:cf:29:08:ad:b4:ca:fb:43:3d:0a:
8e:6b:61:d5:3d:cd:61:23:bf:91:01:3d:cd:13:e2:
c5:11:16:09:81:38:80:94:91:61:07:d0:e4:d4:3a:
7c:e2:92:1a:f7:29:dd:0f:75:dd:cf:c5:d3:84:8a:
35:b8:b2:78:54:23:90:42:f0:ff:44:5d:95:41:c1:
c5:41:d6:75:c1:43:fc:d2:92:73:71:1b:f0:d8:80:
fe:e8:cf:a9:4c:ce:8f:e2:7b:13:e8:df:47:a4:05:
c2:7c:cb:94:6e:c3:55:85:d4:c7:db:c3:c4:50:ad:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:2F:A6:0B:7D:89:A4:EA:02:D5:DD:7B:19:3E:CF:F5:E4:AF:3D
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VHUvpgt9iaTqAtXdexk-z_Xkrz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.22.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ac:a4:b8:83:16:f5:51:84:6d:67:5f:b6:46:d1:c4:7e:57:
73:ee:28:cb:0e:22:ad:d1:38:af:82:13:40:38:b7:51:f0:12:
e1:d7:03:3a:ac:83:29:d5:c0:b2:91:0c:f1:16:57:e5:6c:f0:
e7:6b:b4:d6:4c:0b:87:86:87:22:69:9c:d8:de:3a:a0:51:16:
30:a2:b1:1f:7b:bd:0a:94:7c:b4:62:97:86:25:36:a2:c7:04:
d0:a6:e0:c6:57:9e:cf:30:99:f4:3c:47:f1:5d:78:8d:23:2e:
01:68:ca:41:8d:fa:22:2e:48:b8:29:ff:50:fe:ea:4f:5e:b7:
6b:d9:a2:83:0b:75:28:47:14:a8:cd:41:a5:3c:a2:f4:81:05:
60:bf:4b:18:ae:e2:e4:a7:dd:48:3a:4f:a6:98:72:87:40:34:
9a:e4:50:3b:e6:f6:51:ed:59:43:e4:0d:65:fd:8e:d0:51:99:
ac:0b:0c:d7:7c:c3:e7:e7:01:b2:73:d3:47:a7:ae:f0:a4:35:
83:62:5e:ba:58:34:2d:c9:f4:62:ed:4c:a0:d6:e3:79:cf:7f:
2f:a7:20:3a:7e:08:32:d2:ee:6d:71:fc:44:86:ff:de:ac:4a:
54:e4:0d:62:07:da:4b:8c:33:6f:99:f8:69:9f:32:f2:72:8a:
5c:b7:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org