Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/V3VvReR-FgMoP8-nOhhjRuiP-cs.roa
File: V3VvReR-FgMoP8-nOhhjRuiP-cs.roa (raw, json)
Hash identifier: i051pODGvh4Sz9Ao1lyYEyNXB33mbIqtH2dKL6NYmYY=
Subject key identifier: 57:75:6F:45:E4:7E:16:03:28:3F:CF:A7:3A:18:63:46:E8:8F:F9:CB
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 158874B1
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/V3VvReR-FgMoP8-nOhhjRuiP-cs.roa
Signing time: Sat 01 Jan 2022 01:53:49 +0000
ROA not before: Sat 01 Jan 2022 01:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42000
IP address blocks: 91.103.160.0/21 maxlen: 21
185.160.20.0/22 maxlen: 22
94.124.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361264305 (0x158874b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 1 01:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57756f45e47e1603283fcfa73a186346e88ff9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:cf:d0:8b:ed:57:0b:01:a0:3a:17:84:32:
65:8e:d8:e5:aa:f3:d5:2e:eb:44:31:13:ad:4e:1c:
03:28:ad:05:52:d8:45:60:ee:7d:43:fe:0c:12:6d:
bc:78:65:22:a4:9c:31:68:de:61:a3:4b:b0:81:b5:
a1:70:24:75:b5:b7:c9:26:5e:2b:87:4a:36:5a:3a:
2b:30:86:d8:31:83:97:15:11:66:1a:ac:9d:1c:d9:
91:1c:66:8a:9d:6a:cd:9b:b7:76:85:96:c6:5c:97:
b2:06:c8:d0:d8:d2:3b:9a:c4:2f:f4:41:a8:e8:e2:
09:3f:48:4b:6e:d9:9b:42:cf:c0:14:82:11:e7:80:
f3:6f:89:12:39:00:ae:7e:5d:e0:84:b5:f3:45:2b:
bb:17:f1:3b:31:fe:d9:28:a1:49:a7:41:47:70:0d:
bd:0c:2b:e2:9f:08:07:ac:64:4f:a1:37:b6:1d:9c:
dd:cf:a3:fc:b0:84:d5:09:77:7b:bc:a9:2a:94:2b:
ca:f6:cc:8d:34:cc:6e:37:16:96:8e:de:02:78:10:
5c:bc:1b:7c:93:f1:e1:0a:9d:d8:0d:3e:f3:ab:4f:
77:dd:13:fc:ee:f4:da:6f:9a:e7:d2:34:d7:a0:86:
82:93:cb:df:d2:0a:39:3b:6e:0e:0f:e7:7b:82:e7:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:6F:45:E4:7E:16:03:28:3F:CF:A7:3A:18:63:46:E8:8F:F9:CB
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/V3VvReR-FgMoP8-nOhhjRuiP-cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.160.0/21
94.124.104.0/21
185.160.20.0/22
Signature Algorithm: sha256WithRSAEncryption
77:b3:9f:91:0f:b8:f8:83:78:b7:70:a2:be:f1:6a:37:ba:a2:
39:2a:79:3b:ef:aa:bc:c2:e7:83:83:0b:2d:48:a4:00:a7:78:
ef:ea:3f:d1:da:de:f0:ef:22:5d:fb:8b:17:4c:d6:f1:46:8a:
75:cf:ed:ae:b2:ca:23:fd:28:b1:45:2a:02:ff:a0:64:6b:45:
b8:74:33:d9:a5:52:4d:6f:0e:99:fd:50:6e:04:ed:88:ba:58:
21:18:5e:8b:8e:4f:4f:03:e7:fc:50:53:9c:9f:0a:84:2d:bc:
10:58:8a:28:ad:df:35:7f:a3:8c:4f:ee:d1:29:1c:b4:7e:6d:
1c:f8:c9:a9:7f:e4:5d:9c:9b:e5:eb:84:b0:3c:80:a8:58:ff:
93:09:34:cf:c7:f0:09:95:3b:83:37:98:68:72:26:df:b3:eb:
9a:cf:15:91:17:a8:a3:73:dc:09:c4:f7:ae:e7:74:e6:ae:41:
f8:11:3f:23:59:df:db:62:3f:09:0c:39:fb:59:4d:55:72:fe:
97:5f:af:c0:64:6b:af:b6:83:7c:53:ec:ad:31:f9:72:4b:fc:
95:0a:4c:fd:66:0a:22:14:97:49:bf:26:8b:92:12:0a:2d:9e:
65:46:28:ac:18:ca:a1:16:76:09:cb:08:a7:01:e7:f6:d3:97:
2a:83:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-fra.rpki-client.org