Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VNH5AnntvRb8nG13i1QnuXBvUzc.roa
File: VNH5AnntvRb8nG13i1QnuXBvUzc.roa (raw, json)
Hash identifier: eE/L0sNbC6i/96EcywUCcWZlBfh+42gYnqt4NM6L6tc=
Subject key identifier: 54:D1:F9:02:79:ED:BD:16:FC:9C:6D:77:8B:54:27:B9:70:6F:53:37
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 075FAFD0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VNH5AnntvRb8nG13i1QnuXBvUzc.roa
Signing time: Wed 30 Mar 2022 08:48:20 +0000
ROA not before: Wed 30 Mar 2022 08:48:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 185.206.250.0/24 maxlen: 24
185.194.31.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123711440 (0x75fafd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 30 08:48:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54d1f90279edbd16fc9c6d778b5427b9706f5337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:19:42:2b:d0:f8:8f:48:92:61:e7:1c:27:
6e:91:a5:c4:59:0b:26:43:68:e0:eb:95:e9:07:e3:
5e:b2:f9:17:49:5e:20:10:26:4e:8b:68:40:d1:8b:
4f:29:d3:b9:01:8c:59:97:a8:91:ee:66:22:6e:69:
45:65:93:e8:40:97:64:90:cf:ae:f3:08:77:61:ae:
2e:82:9d:12:34:6a:4b:50:fc:8d:53:4f:a4:9b:68:
b1:07:77:f0:cd:4b:2c:af:0f:e3:19:11:6b:79:b0:
0c:c2:41:e7:31:e5:6d:fe:4e:78:e4:2d:6d:8a:e4:
d0:af:e3:07:3d:6e:b8:17:03:b0:6f:41:69:0f:91:
d4:11:0c:d5:38:5f:84:ca:37:b1:5e:f4:d3:4c:fb:
26:cf:5c:29:31:c9:20:2b:99:87:e6:e7:6f:5e:3c:
f0:e7:bd:31:eb:f1:b0:ad:1e:9e:04:17:c3:0a:51:
78:4c:b2:b1:64:63:16:fa:0a:fb:38:12:06:20:69:
c3:5d:cb:56:9b:dd:03:ca:92:d7:a1:25:b8:55:dc:
46:97:8f:0c:22:38:c5:2d:11:d2:aa:2b:a1:0a:3d:
93:e7:b0:6f:cc:4b:79:65:0a:1b:2a:c1:d0:6c:15:
f9:8d:b1:6f:b5:33:c5:69:a1:43:05:e5:fa:ae:6c:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:F9:02:79:ED:BD:16:FC:9C:6D:77:8B:54:27:B9:70:6F:53:37
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VNH5AnntvRb8nG13i1QnuXBvUzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.31.0/24
185.206.250.0/24
185.225.0.0/23
Signature Algorithm: sha256WithRSAEncryption
79:37:62:c5:35:9f:07:2e:41:0d:4e:a1:f9:b8:4f:0d:cb:2b:
fe:e5:00:9f:89:a3:1d:a0:9b:ef:18:be:0d:3d:cb:63:96:de:
07:23:d8:5d:10:64:48:9f:e9:e0:b5:5a:cc:74:bb:62:8a:17:
55:51:7b:15:2d:38:f9:f4:08:9e:2e:e1:c1:2f:ab:f1:49:f3:
68:fc:92:bf:8f:20:a2:97:fd:5f:e4:78:c5:f7:10:0e:ff:41:
67:96:2f:46:d0:72:b0:73:91:80:55:70:c7:b3:a4:ce:bb:9b:
ce:b0:2e:76:18:a0:50:06:ce:ca:c0:25:19:e0:1f:d8:41:40:
cf:cc:c8:c9:8a:a4:8e:f7:37:da:f1:04:06:63:bb:d4:f7:7e:
de:16:6f:c6:20:d8:24:c4:81:b5:26:c2:94:73:bc:34:6a:e7:
45:57:3d:53:8b:66:0e:70:3e:2b:85:6a:91:e8:92:8f:66:20:
c7:0e:ec:19:2a:1e:e5:11:7b:cd:76:52:07:21:cc:dd:18:d6:
6b:4a:9a:e4:22:4c:cd:ab:fc:2a:32:59:2f:85:43:84:5a:a3:
57:34:c1:6c:e1:85:88:81:f8:2a:2b:6a:a0:cb:58:57:57:c5:
41:55:2b:63:74:58:10:7c:7e:ae:81:4f:9a:14:91:cd:77:02:
82:07:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org