Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/__vz9lBNtt_qYo75PxlowwuNDOc.roa
File: __vz9lBNtt_qYo75PxlowwuNDOc.roa (raw, json)
Hash identifier: NNbWrEzlRDFQnVLyTGmMEXosajabAcQ9FbNz9+fyS8Q=
Subject key identifier: FF:FB:F3:F6:50:4D:B6:DF:EA:62:8E:F9:3F:19:68:C3:0B:8D:0C:E7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018511789DD0C20A32E0FDC6F48C43B8B27C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/__vz9lBNtt_qYo75PxlowwuNDOc.roa
Signing time: Wed 14 Dec 2022 16:29:55 +0000
ROA not before: Wed 14 Dec 2022 16:29:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 194.5.66.0/24 maxlen: 24
45.147.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:78:9d:d0:c2:0a:32:e0:fd:c6:f4:8c:43:b8:b2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 14 16:29:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fffbf3f6504db6dfea628ef93f1968c30b8d0ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:6d:6b:be:fa:a0:02:35:dc:ea:50:95:fb:
92:3b:18:37:eb:0a:6d:8f:27:fd:97:40:f5:2c:b0:
57:f0:09:d4:dd:7d:4e:b9:fa:31:fe:79:74:5f:98:
ed:4b:5d:be:89:c9:fd:7b:5b:e2:51:a2:52:15:a4:
36:a4:a1:1b:15:3a:04:7d:c6:80:6e:14:95:b3:fa:
19:24:f1:0b:cc:48:c6:f7:75:ec:6a:9b:2f:ec:d6:
bf:ae:d5:08:15:07:ef:0c:57:86:34:4f:35:bd:62:
21:ff:f6:0a:4f:a8:02:b4:53:46:fd:64:09:ec:2c:
17:17:c5:18:6b:2a:fe:1d:40:97:a6:fa:19:43:7d:
a1:38:3b:b5:0d:5b:31:31:cc:46:75:f5:22:cd:ad:
51:7e:12:2f:8a:6b:48:fd:56:74:ae:16:0c:d9:ca:
c6:d7:4d:fd:d2:f5:c5:e0:10:13:1b:02:e2:1f:96:
10:98:df:ab:65:ff:e7:c3:37:6a:87:bd:5b:3d:86:
98:14:76:ff:72:40:dd:36:10:74:68:4e:90:07:a5:
f0:ba:8f:4f:1f:16:3e:5d:33:c8:5c:22:29:82:00:
82:c6:e0:14:e1:f5:b0:c3:ae:3c:9a:6f:75:16:26:
a3:9a:d1:47:57:9d:31:6b:d3:cf:79:aa:4a:57:50:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:F3:F6:50:4D:B6:DF:EA:62:8E:F9:3F:19:68:C3:0B:8D:0C:E7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/__vz9lBNtt_qYo75PxlowwuNDOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.225.0/24
194.5.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:91:3c:16:35:43:eb:64:54:f4:fb:09:7b:27:56:4b:e0:b8:
05:d2:4c:82:ea:0b:81:6a:90:13:81:22:3e:86:01:03:82:71:
f8:a2:33:48:e7:51:9b:87:12:c6:73:3a:49:1e:dc:22:55:67:
f5:30:47:8c:89:23:33:b8:67:10:88:b1:0f:40:c1:90:0e:9a:
31:b6:5c:30:8e:98:20:3c:4b:ae:ff:30:a2:88:55:86:d1:d8:
aa:27:09:3d:ca:fd:dc:97:c7:52:f9:e1:1c:c5:3e:4e:3a:89:
38:bf:fb:76:93:71:7a:f7:73:36:e6:1d:25:07:d0:1a:cd:a1:
d0:7e:27:36:cd:5d:3f:bb:66:76:79:7d:19:c7:1c:85:b6:a3:
69:8d:4c:04:24:97:a3:f5:12:1a:8b:35:cd:fd:96:e8:9a:b9:
bf:7c:83:03:28:69:57:97:de:12:0d:26:09:a5:36:e0:45:dd:
8b:ba:bd:71:37:31:f5:ab:fe:bf:17:2f:03:e6:da:1c:24:39:
2e:e2:a8:62:b8:7b:01:bf:14:56:d4:78:7f:a5:1c:cb:7e:af:
1d:30:47:c2:f6:1f:b9:39:7e:2a:b0:b5:7a:bb:1c:8e:9d:04:
f4:41:26:8c:33:d0:d2:ab:8e:da:cd:a6:fa:68:e7:73:f6:29:
ec:2c:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org