Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/Vls4IPWweYATkJqO51oiU-E-UCg.roa
File: Vls4IPWweYATkJqO51oiU-E-UCg.roa (raw, json)
Hash identifier: JgrsUWs3T5yBKZz1TtBlLvEqAr+nBgVK8plOQ3zbNhc=
Subject key identifier: 56:5B:38:20:F5:B0:79:80:13:90:9A:8E:E7:5A:22:53:E1:3E:50:28
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 6C1B
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/Vls4IPWweYATkJqO51oiU-E-UCg.roa
Signing time: Tue 26 Apr 2022 15:19:40 +0000
ROA not before: Tue 26 Apr 2022 15:19:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.9.44.0/24 maxlen: 24
194.9.45.0/24 maxlen: 24
2001:678:e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27675 (0x6c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Apr 26 15:19:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=565b3820f5b0798013909a8ee75a2253e13e5028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:9d:2a:f9:ad:d6:2a:d9:05:5f:87:ce:74:
ec:32:65:de:99:94:ac:14:3c:41:bb:fd:66:c3:00:
97:74:a3:de:42:01:e7:36:a4:07:1b:b2:e9:a4:cf:
eb:de:9b:d5:fd:2c:ae:7f:fa:58:fe:9a:e1:9d:f4:
0c:90:af:90:24:b2:58:bf:89:35:59:f1:b1:86:1d:
b0:25:45:72:e5:5d:87:35:75:39:18:79:be:31:a8:
cf:8f:d6:26:3c:24:75:8c:03:e7:f1:fb:5c:26:ea:
fb:97:9f:7c:fd:e1:26:1f:d2:41:ad:d6:04:c6:33:
36:93:53:11:c9:42:d2:84:ec:9b:e2:cf:85:1b:18:
ee:68:27:48:5d:f6:38:ed:3d:40:3d:fd:7f:10:2c:
16:c2:f6:fe:cf:23:38:16:6c:5a:40:37:1a:2d:e5:
ee:f2:4f:e6:9a:27:39:20:93:6f:d1:14:f4:10:5d:
a5:44:54:98:f0:96:73:ae:98:ad:f7:57:00:a1:9f:
a6:61:20:0d:44:52:8e:25:f1:6d:cd:d8:5f:ae:3b:
d7:7d:09:35:a1:62:97:52:69:b8:76:e1:94:f7:4b:
bc:f8:c8:7d:77:ee:36:9f:22:74:38:79:3e:f2:86:
6b:46:8d:11:03:c8:e6:2a:07:21:2f:48:ed:7e:59:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:38:20:F5:B0:79:80:13:90:9A:8E:E7:5A:22:53:E1:3E:50:28
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/Vls4IPWweYATkJqO51oiU-E-UCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.44.0/23
IPv6:
2001:678:e0::/48
Signature Algorithm: sha256WithRSAEncryption
75:41:b9:ae:b3:6f:01:38:41:53:38:07:37:e1:f0:b9:1e:4b:
22:da:6c:87:39:68:c8:71:b0:a5:8f:c9:6e:c0:ca:3e:1b:8e:
f6:07:00:dc:0e:4f:64:30:df:97:8d:9c:32:29:5b:a2:0e:ef:
50:f5:61:8a:0c:1f:ce:6b:56:de:67:22:8a:7e:7b:65:1a:c6:
21:43:88:90:65:15:eb:37:24:ea:db:da:67:f2:1d:7a:d8:1b:
16:f5:df:fa:49:07:ba:2c:5d:cb:b7:52:55:9c:d5:67:31:66:
f1:79:03:c0:e6:a3:ad:1e:ad:2e:a1:e8:79:de:d1:d1:eb:18:
34:72:58:99:8a:30:f7:52:24:66:43:66:b6:0f:b2:a7:19:f0:
64:6a:a0:5d:1b:7e:17:99:a6:1c:c2:f9:9f:6d:37:88:e0:b2:
a2:95:91:02:eb:65:2c:86:36:82:d3:4c:8f:53:69:d4:e2:f7:
50:58:c5:1a:c6:ea:4d:70:5a:a1:41:98:2e:c9:5e:30:83:73:
f1:51:6c:10:99:5c:3a:6c:64:7b:a5:c7:3d:55:36:ba:27:70:
7d:6b:db:b0:02:2b:30:ae:99:db:fa:92:c0:8b:de:75:41:e6:
68:5b:41:db:99:bc:b1:71:ad:63:90:08:73:51:55:86:65:6a:
d9:d7:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:03 2024 by rpki-client on console-fra.rpki-client.org