Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/VoG8ZI6INWHSuDgzdAP082-PJR4.roa
File: VoG8ZI6INWHSuDgzdAP082-PJR4.roa (raw, json)
Hash identifier: rXEMARTYEWrLLzJu16vNItuqygewPcHHILCfZezh1Ck=
Subject key identifier: 56:81:BC:64:8E:88:35:61:D2:B8:38:33:74:03:F4:F3:6F:8F:25:1E
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 0B3DF677
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/VoG8ZI6INWHSuDgzdAP082-PJR4.roa
Signing time: Sat 01 Jan 2022 08:59:16 +0000
ROA not before: Sat 01 Jan 2022 08:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.172.0/24 maxlen: 24
2001:7f8:f5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188610167 (0xb3df677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jan 1 08:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5681bc648e883561d2b838337403f4f36f8f251e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:5b:b2:12:d6:32:4f:42:35:11:d6:1e:1c:
0b:3e:ae:44:a1:d9:28:51:17:a8:1d:d2:ed:87:f9:
1e:c5:ad:46:0d:5e:5e:b2:3e:cc:6a:87:b5:4b:a6:
f8:1d:7d:50:6e:e2:8a:1a:4c:74:ca:66:38:f9:7f:
18:ed:e8:9a:5a:5c:48:7b:ae:66:a8:d9:57:08:d5:
bf:e8:26:ea:2e:9d:ad:4e:4c:54:96:df:a1:62:b7:
03:4f:8e:69:58:b7:d6:80:07:f8:3b:d0:64:d1:ec:
27:83:85:60:32:24:b8:04:33:ab:e5:f1:ec:9b:16:
18:49:14:36:eb:ec:c2:38:e9:e6:49:57:6a:37:c1:
d8:ef:bb:7b:36:d8:b5:7c:f9:e5:82:8b:b9:92:fb:
d9:ad:4e:14:d4:c5:a5:9a:ef:10:ef:92:29:df:27:
50:ff:9e:e3:3b:ce:51:c5:47:c8:a5:98:a1:22:b8:
16:a7:36:4b:b6:8f:28:80:e9:6c:19:65:de:a6:bf:
4c:40:12:d5:a0:ac:f7:20:7f:7b:20:b1:59:3f:00:
ed:33:c2:5d:65:12:39:c1:11:42:86:57:e7:60:27:
b7:ad:4d:6f:f9:40:1d:4b:92:99:84:ed:99:3e:d2:
70:cc:7f:1b:46:cb:c0:f4:65:fe:04:87:6e:0f:68:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:BC:64:8E:88:35:61:D2:B8:38:33:74:03:F4:F3:6F:8F:25:1E
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/VoG8ZI6INWHSuDgzdAP082-PJR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.172.0/24
IPv6:
2001:7f8:f5::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f6:53:f9:64:da:12:50:fc:f0:53:b9:7e:08:53:f5:99:f0:
5c:58:de:56:0e:c7:67:77:a3:27:2b:95:51:2a:f4:65:04:a6:
71:51:fe:00:bb:3b:57:bc:e6:d8:55:60:5b:36:d0:4c:f1:64:
67:b4:72:93:dd:fe:eb:cc:74:c3:ae:29:b6:16:25:36:23:8b:
bd:77:42:20:a8:ff:4f:c2:53:d6:84:76:a6:4f:68:e7:91:4b:
6a:a3:61:ee:a8:4b:f3:57:e2:3d:b8:93:2b:38:8b:b2:98:41:
8d:fc:55:a4:65:7d:2f:bd:f9:0b:88:39:6f:58:72:67:ac:3a:
ce:c2:2b:20:0e:e3:73:78:5b:1b:73:ee:f1:85:40:85:da:7a:
45:e3:02:6d:7c:86:c9:5c:d7:3c:fc:d3:4d:93:16:a6:95:c1:
fd:bf:0a:a9:73:6a:0e:13:ce:06:e2:11:ac:56:08:80:3c:67:
00:70:04:23:d1:f0:b4:7b:bd:6a:7c:1b:ed:6e:7b:7b:f2:d0:
94:b4:fa:09:eb:81:9f:8f:bb:b0:c2:64:46:b5:82:0d:fc:62:
68:1d:78:50:fe:f3:1b:d5:d8:49:58:54:3e:89:f4:eb:6f:04:
89:03:ad:9c:01:8d:b3:5f:e3:34:78:92:a0:bb:b6:b8:5b:89:
76:36:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:30 2024 by rpki-client on console-fra.rpki-client.org