Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/vPffSkMODpGoXN3AbwvjllxHyY0.roa
File: vPffSkMODpGoXN3AbwvjllxHyY0.roa (raw, json)
Hash identifier: xFWRaxYj7Yw6Pg2kYbDOJ5fVbFM33KTO4jG/PZmyQJo=
Subject key identifier: BC:F7:DF:4A:43:0E:0E:91:A8:5C:DD:C0:6F:0B:E3:96:5C:47:C9:8D
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 360706A3
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/vPffSkMODpGoXN3AbwvjllxHyY0.roa
Signing time: Sat 01 Jan 2022 05:53:37 +0000
ROA not before: Sat 01 Jan 2022 05:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33182
IP address blocks: 185.7.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906430115 (0x360706a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 05:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcf7df4a430e0e91a85cddc06f0be3965c47c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:70:87:b0:6b:fb:89:5a:a0:cd:52:f4:21:
0d:e8:f8:11:49:d3:bb:d5:0c:7c:6a:19:6b:e8:bd:
b5:f0:ae:e3:9c:5d:6f:f2:94:cf:2b:25:0e:4e:7d:
95:70:3e:b1:24:91:4e:28:7e:65:ed:21:3d:ce:66:
eb:1e:cc:17:98:e0:e8:b6:92:61:a3:f1:46:7e:1b:
ec:41:cc:42:2e:b5:6f:ea:81:6a:f1:3e:aa:8a:82:
25:2c:28:b6:f6:fd:3e:82:fc:9c:be:bc:4d:6b:39:
9b:c3:99:2f:bd:35:5b:60:e1:ab:0e:fb:70:d0:7b:
86:cc:e2:dd:da:d6:af:c9:29:57:7f:c0:c9:aa:8c:
5c:5f:30:68:fe:b5:9f:8f:7b:50:8c:a7:b0:18:da:
9c:b7:80:35:45:e7:c3:5a:bb:b8:a0:97:58:7a:c6:
d9:72:d8:28:d8:1c:fd:ca:95:04:f3:07:81:7a:da:
0f:d3:a8:a3:45:b4:9d:df:75:43:37:54:5c:43:38:
a2:ff:25:c2:75:75:f8:18:5e:10:0b:5c:a0:1d:6d:
62:dd:14:d8:b9:dd:82:bb:b5:9d:28:ed:9f:b1:02:
d2:2e:b3:2a:b9:dd:93:8f:b0:f7:4b:72:44:23:01:
a1:b1:cd:c0:c9:a6:b5:d1:1f:2f:45:5c:64:32:a9:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:DF:4A:43:0E:0E:91:A8:5C:DD:C0:6F:0B:E3:96:5C:47:C9:8D
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/vPffSkMODpGoXN3AbwvjllxHyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:99:21:13:ad:85:59:94:4d:84:68:a4:30:6c:31:b4:35:d9:
ba:b9:9b:23:0b:29:b2:05:f4:f4:6e:3b:df:3f:19:ff:44:68:
05:13:c2:08:52:25:04:0d:ea:0b:59:57:b4:d2:dd:ef:b4:44:
ed:31:6f:23:c0:b9:d7:f6:d3:69:f7:7f:5c:16:08:6e:50:bb:
8f:9a:02:d1:fa:c3:63:c8:43:63:52:bf:67:91:30:ac:ed:5f:
23:c3:69:fd:ec:4f:7a:c1:93:b6:c3:23:f5:12:39:a1:40:52:
c2:7e:0f:58:03:e5:a8:18:ee:cf:20:e8:34:10:20:70:cb:47:
c8:93:8c:b9:3e:3f:a0:97:bc:0c:40:f3:c5:67:71:7d:ba:36:
61:17:e7:21:4c:3e:1e:49:a8:e8:c5:50:82:10:ec:03:95:95:
39:42:63:bd:57:31:37:dc:5c:29:5b:85:f4:ab:5f:0f:09:82:
92:35:57:48:8f:0e:63:b7:1e:63:9c:1b:ba:53:55:7c:6b:90:
d4:5d:17:c1:b0:5e:41:73:96:1d:77:fb:bc:8e:b4:cd:2b:98:
5d:be:0c:4e:14:02:0f:03:5b:5a:ac:27:35:99:ee:4c:76:6f:
9d:51:b3:47:4c:b1:d1:ff:c1:63:22:84:52:68:58:76:84:27:
b7:1c:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org