Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/vz-EbM8-r8_noGC37GQ6lSs1Fw8.roa
File: vz-EbM8-r8_noGC37GQ6lSs1Fw8.roa (raw, json)
Hash identifier: rgaRmz6P+ZjZdo5D+JHdAl6ipRC16VCKVG8IdBb/eeg=
Subject key identifier: BF:3F:84:6C:CF:3E:AF:CF:E7:A0:60:B7:EC:64:3A:95:2B:35:17:0F
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0639D81F
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/vz-EbM8-r8_noGC37GQ6lSs1Fw8.roa
Signing time: Sat 01 Jan 2022 11:59:38 +0000
ROA not before: Sat 01 Jan 2022 11:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41954
IP address blocks: 185.142.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104454175 (0x639d81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 11:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf3f846ccf3eafcfe7a060b7ec643a952b35170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:97:ef:f2:b2:07:bb:6c:b0:b8:64:0a:75:
ea:ac:ad:90:c0:76:f2:91:27:3f:4f:4a:a3:f8:4b:
b7:14:40:71:96:0a:7a:fe:05:f2:8f:80:5e:d1:25:
ee:2d:4a:08:86:31:9e:ba:d1:8a:8c:49:df:bd:82:
38:13:b4:fd:83:dd:44:d5:4b:ba:75:ee:df:b9:8c:
d1:b0:f0:45:4d:80:db:73:a2:ba:89:19:e7:29:05:
6a:b0:4d:06:7d:0d:83:85:64:2f:bf:20:0b:e2:d0:
0d:c9:97:1b:2f:fd:de:a8:df:00:45:9d:c5:c3:da:
a0:29:13:0d:99:a2:fd:c3:ce:a0:aa:0b:e0:92:59:
08:3a:44:b5:5a:ef:98:d4:23:27:13:f6:8a:0f:c0:
9a:56:9b:88:50:44:d6:bb:fd:08:d9:48:28:5b:0c:
96:c0:0b:50:8f:09:46:84:d5:81:d3:ba:b3:4e:d3:
9e:67:70:d9:df:0b:b5:86:f6:8d:b9:f9:3c:dc:3e:
fd:bf:7b:23:14:80:66:99:4e:43:bd:e5:a3:c0:e3:
ec:e3:08:9b:63:d8:c3:4a:2b:45:27:d9:83:03:5d:
77:21:40:29:e2:39:b8:3a:79:b7:cc:f2:aa:58:9c:
ae:bf:21:7c:18:b6:8e:12:6d:fd:6e:bd:d5:47:d3:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:84:6C:CF:3E:AF:CF:E7:A0:60:B7:EC:64:3A:95:2B:35:17:0F
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/vz-EbM8-r8_noGC37GQ6lSs1Fw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.218.0/24
Signature Algorithm: sha256WithRSAEncryption
57:be:81:73:48:3a:bc:61:dd:ed:ee:89:d4:d7:fd:00:93:0c:
d9:b7:30:71:c7:3b:05:86:07:69:9b:e3:d5:41:6e:d8:08:58:
3c:55:57:87:16:eb:53:06:40:41:a8:26:60:11:d8:0e:86:30:
60:f4:3e:2f:82:30:bf:31:3b:69:7e:f0:70:bd:0e:25:b6:2b:
a8:5c:89:1e:3c:ce:e7:ca:fd:06:31:b0:5b:df:7d:6a:df:4f:
7a:0a:2e:4f:36:2c:26:ef:20:bb:6c:8b:2f:2a:f8:bc:82:e5:
65:71:f4:84:af:f1:c3:fe:92:44:dc:03:f1:3b:dd:9d:35:7f:
6d:4a:96:6a:32:5c:72:d2:ec:98:7c:0e:d5:a7:bc:13:f0:30:
9a:7c:12:7c:da:6c:18:50:5e:ec:a7:b1:4b:e4:23:58:c3:8f:
f2:70:34:a6:be:e1:c4:52:af:f5:70:a8:14:40:25:f0:a5:85:
b6:38:97:6c:e8:ca:bc:ec:49:21:b4:c3:68:18:01:4b:6e:7c:
f3:cb:67:35:8d:49:e6:bb:bf:ed:3c:76:b3:72:61:fc:74:7c:
e8:b0:d8:5c:00:87:78:a8:c0:89:03:66:ce:44:99:77:aa:ba:
d6:31:dd:b4:d1:88:c9:33:45:90:56:f0:86:71:8a:33:41:25:
46:8e:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:50 2023 by rpki-client on console-ams.rpki-client.org