Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VrWK3OMdDf33SlTzOB1W7Kz4obk.roa
File: VrWK3OMdDf33SlTzOB1W7Kz4obk.roa (raw, json)
Hash identifier: n7DNv7WP3iYJLl+BgC5XgTEwOYC+y+jktsgHvt7p0FY=
Subject key identifier: 56:B5:8A:DC:E3:1D:0D:FD:F7:4A:54:F3:38:1D:56:EC:AC:F8:A1:B9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07BB5C78
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VrWK3OMdDf33SlTzOB1W7Kz4obk.roa
Signing time: Mon 02 May 2022 09:40:45 +0000
ROA not before: Mon 02 May 2022 09:40:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 185.194.28.0/24 maxlen: 24
45.8.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129719416 (0x7bb5c78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 2 09:40:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56b58adce31d0dfdf74a54f3381d56ecacf8a1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:ce:65:7c:26:39:08:18:86:fb:66:ea:8f:
45:4f:a8:b7:08:e6:f9:bd:98:da:92:5d:40:4d:11:
4d:4b:64:77:e8:24:99:c9:f7:40:29:9a:c9:a2:3e:
18:1c:8c:40:3e:6e:54:dc:2e:72:71:ad:e2:1b:b6:
a9:4e:dc:a8:d9:11:54:ae:87:a0:2f:f1:4d:32:00:
44:c3:40:79:a3:46:a0:63:b1:f0:ca:37:35:39:29:
b2:79:2c:39:9d:96:59:99:f1:47:ba:7e:89:e1:0e:
25:cd:02:82:90:74:7b:e9:2a:a9:e5:7c:74:18:85:
f9:cf:81:c3:4d:3f:18:ab:c2:49:18:44:7c:e4:cf:
16:96:18:0c:cb:ef:13:6a:e8:e7:14:11:80:5a:ea:
cb:2a:e6:1c:1b:c4:de:47:95:4e:1e:db:f9:ee:c7:
10:91:10:1d:11:c6:c4:bd:fb:78:f9:97:ab:7f:27:
b2:7e:8b:ce:04:14:4a:57:be:68:21:81:a9:d0:fe:
fc:bf:b0:b8:02:3a:54:2a:e9:6d:19:68:5d:70:89:
53:bc:7a:43:9e:e8:57:23:70:de:be:e6:70:85:bb:
ed:82:ee:96:7a:bc:70:67:de:28:4e:df:d2:c3:f0:
39:b4:2a:f7:f2:e6:42:04:27:f8:e7:f5:2d:a8:81:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:8A:DC:E3:1D:0D:FD:F7:4A:54:F3:38:1D:56:EC:AC:F8:A1:B9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VrWK3OMdDf33SlTzOB1W7Kz4obk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/24
185.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a2:20:0b:aa:7d:a2:28:76:75:d4:50:1b:ea:2c:ab:08:47:
29:77:c5:bb:82:40:b9:fd:61:39:d8:8e:58:24:fa:56:87:12:
1e:7d:c9:a0:31:c6:76:07:7e:54:77:2b:5e:fd:ee:1c:41:b3:
95:d7:2a:5b:60:b5:a3:da:c2:d6:98:9c:99:9b:20:c7:ba:92:
e2:80:8e:5d:7d:08:50:2e:ab:39:f3:63:09:d3:8e:8f:e5:9e:
aa:cf:fe:6b:b3:23:53:85:de:74:b3:9a:b4:af:cd:86:ed:e9:
60:7d:74:0c:17:5d:9f:d8:e7:fd:be:c7:ae:13:84:8e:19:9d:
c3:5e:bb:7d:aa:e8:c2:b1:35:b7:bb:5f:52:4c:52:cb:8f:ca:
9e:25:53:5e:79:cd:7b:ff:6c:d9:78:01:1b:27:0d:96:6a:ab:
c0:2f:2e:2f:2f:c7:91:a5:e0:89:09:71:08:d7:ca:ab:92:88:
65:3d:48:bb:3a:69:38:9a:ae:53:49:66:28:2c:5c:b8:50:46:
89:e6:fe:aa:fa:3d:29:b6:f1:c3:4c:5f:7d:03:cf:26:7d:d9:
2d:78:b9:28:d1:69:da:d3:92:b0:43:82:c5:41:e4:7b:35:2a:
b7:81:b6:df:62:c4:7a:d5:7e:de:85:0a:d9:7f:0b:f8:bc:1a:
12:e6:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org