Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/vipfME4Ujf844duwdD3rTihlrSo.roa
File: vipfME4Ujf844duwdD3rTihlrSo.roa (raw, json)
Hash identifier: GTMaYl42FrHGpUPcI5r709XpIgLMU80bAchKMiz3iIM=
Subject key identifier: BE:2A:5F:30:4E:14:8D:FF:38:E1:DB:B0:74:3D:EB:4E:28:65:AD:2A
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 3518E950
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/vipfME4Ujf844duwdD3rTihlrSo.roa
Signing time: Tue 19 Apr 2022 07:00:42 +0000
ROA not before: Tue 19 Apr 2022 07:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 89.108.128.0/24 maxlen: 24
89.108.129.0/24 maxlen: 24
89.108.154.0/24 maxlen: 24
89.108.176.0/22 maxlen: 22
89.108.176.0/24 maxlen: 24
212.101.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890825040 (0x3518e950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Apr 19 07:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be2a5f304e148dff38e1dbb0743deb4e2865ad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:1d:2e:bc:69:38:27:64:50:81:36:f8:06:
07:2e:c3:ad:96:e9:e2:18:5c:ae:11:75:fa:17:b3:
6b:f1:4e:b5:37:cb:ca:54:34:2e:8a:2f:d8:b1:e6:
1e:d1:1b:31:31:38:95:bd:db:7f:a1:01:0d:66:f7:
ef:a4:f0:71:a6:e6:fa:d6:75:b2:ec:b3:97:bb:bd:
10:4d:b9:61:dd:94:a1:ed:c1:8c:2d:af:a2:e2:06:
f8:4c:5f:7b:ea:f7:a4:15:e6:59:bc:1d:d7:f7:81:
75:6b:69:04:7d:93:79:a0:cb:82:9e:c0:24:a9:8f:
57:3e:79:77:fe:c1:01:a5:84:92:54:33:99:21:d8:
53:64:d4:9f:4f:d4:ae:c2:5d:e2:56:a4:a6:4e:63:
8a:1b:d3:3d:d7:3d:27:b9:c0:ba:3e:fe:a9:18:80:
5e:02:03:43:ad:ed:a3:07:3a:c4:c4:10:4f:6d:4c:
52:f8:69:5b:19:85:d7:c8:5f:37:24:0c:a3:a0:f6:
dc:9d:9d:1d:7a:c3:62:06:cf:59:1a:ae:38:c9:f7:
4b:3f:15:c8:b1:19:5c:67:0f:0a:e9:6e:0e:32:bf:
ea:fa:94:86:09:dd:1f:c3:fc:d2:57:46:cc:69:d0:
b1:59:f5:a8:a6:3e:55:54:d9:c3:24:4d:08:9c:0a:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:5F:30:4E:14:8D:FF:38:E1:DB:B0:74:3D:EB:4E:28:65:AD:2A
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/vipfME4Ujf844duwdD3rTihlrSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.128.0/23
89.108.154.0/24
89.108.176.0/22
212.101.249.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c3:6c:17:b5:0d:95:71:02:64:5b:eb:25:80:b7:4d:d5:61:
a5:9a:64:37:0b:28:e4:2d:fa:a5:d7:3f:3b:37:97:06:a3:9c:
f8:65:17:67:ec:f1:6e:c1:cf:c8:6a:92:a0:59:66:8a:68:c2:
78:42:cf:7c:a6:61:44:35:af:9f:a5:0e:34:33:d3:fc:90:5d:
f5:c4:67:53:0b:79:65:29:b7:c6:16:a0:fa:28:7d:d9:b3:be:
cb:8b:84:2c:c1:57:a3:5e:42:b4:6b:b7:d4:07:55:88:42:cf:
1d:58:fc:4c:15:f1:95:d9:e8:b7:d6:dd:7f:3e:b2:0f:91:d4:
9d:b8:1f:9f:a9:ca:62:09:ea:4b:2a:dc:37:88:7e:fc:a7:98:
94:cc:09:27:76:e6:86:ba:65:25:de:58:fa:8a:61:18:25:e7:
07:7f:bf:5d:5e:36:b6:7f:7f:54:76:1a:c4:dd:85:6c:47:70:
8a:f3:b2:b3:50:01:c1:ed:c8:e0:a8:e2:ea:10:c3:b0:23:bb:
7c:4e:7f:ec:2e:c2:74:ee:0e:7c:e0:52:5e:30:d4:24:9f:21:
b5:aa:84:cc:8c:42:c6:1c:d0:79:e5:39:11:99:5d:ba:76:b2:
6f:18:dc:e0:fa:1a:32:fe:80:76:12:37:cd:25:2d:c9:a2:4e:
39:a7:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org