Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/vppDM3veLmxlUE3e5oCmKX9nZDM.roa
File: vppDM3veLmxlUE3e5oCmKX9nZDM.roa (raw, json)
Hash identifier: Ss6duc+8uhzu5EoliI99W8dTn7DhV/ZKhpno/V7ekck=
Subject key identifier: BE:9A:43:33:7B:DE:2E:6C:65:50:4D:DE:E6:80:A6:29:7F:67:64:33
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 03797FF5
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/vppDM3veLmxlUE3e5oCmKX9nZDM.roa
Signing time: Sat 01 Jan 2022 15:01:30 +0000
ROA not before: Sat 01 Jan 2022 15:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196860
IP address blocks: 193.107.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58294261 (0x3797ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jan 1 15:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be9a43337bde2e6c65504ddee680a6297f676433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:03:a9:e8:2c:10:83:cb:14:22:76:28:a0:
72:58:18:ba:28:29:8e:37:92:0f:1b:8f:32:19:0b:
74:05:d0:46:88:16:4b:b2:14:4d:b6:fe:8c:0b:74:
1a:6a:0e:9c:e1:5f:d0:1f:f8:50:9e:63:64:be:0e:
3e:6f:76:d0:f0:c9:e7:d8:b4:3f:07:fc:b6:e6:b4:
0b:cf:fa:97:77:ee:1b:15:d2:96:28:64:fc:e4:11:
1a:9c:52:81:82:8b:70:2c:f0:ab:06:48:8f:6e:28:
ef:81:11:b2:0d:09:a1:57:01:1b:d5:25:55:93:79:
58:0a:ff:0d:50:11:5c:4c:e5:7f:01:66:bf:2b:26:
75:0c:6b:34:69:f7:87:3a:97:5d:aa:1d:ac:13:12:
5d:85:bb:ba:2d:eb:68:15:9b:62:e3:68:c1:b4:aa:
dd:14:fc:ca:30:7a:09:91:85:77:e2:f1:77:12:e3:
e7:18:c0:c4:1e:45:aa:5d:66:9d:6d:1a:b7:68:00:
93:90:28:96:32:3f:45:f6:23:a6:28:8a:0a:8b:43:
d1:d3:f4:c7:e9:2d:06:20:b7:5c:b6:8c:a8:f4:a6:
45:9c:e5:d6:8e:b1:ae:0d:52:67:d7:bd:2e:f7:24:
16:c2:1f:4c:b4:42:d2:41:12:93:7c:89:75:90:c0:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:43:33:7B:DE:2E:6C:65:50:4D:DE:E6:80:A6:29:7F:67:64:33
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/vppDM3veLmxlUE3e5oCmKX9nZDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.203.0/24
Signature Algorithm: sha256WithRSAEncryption
23:94:bc:f9:bb:cf:74:bb:6d:78:28:8b:ac:92:f8:08:fa:09:
49:7a:cb:12:00:a4:b6:e5:04:01:97:90:af:5c:fa:1f:16:e5:
86:b9:15:e4:30:a8:af:bc:63:64:ca:6e:a7:2e:ec:28:b6:a1:
c2:02:ef:96:95:39:b8:cd:f6:1e:41:3b:0b:7d:ca:d5:ac:cf:
c6:66:58:f8:a8:69:d4:b2:28:43:aa:01:c1:6a:27:ab:26:1c:
de:53:f0:c7:92:93:fb:49:9c:96:4e:7e:87:a0:30:a6:25:cf:
12:51:8f:eb:c7:9a:2a:d8:2f:23:69:5f:c9:61:f2:a0:5b:36:
c6:be:84:bc:69:96:4d:de:32:5e:cd:de:d4:7d:1c:08:fa:a0:
3b:4f:ea:66:16:68:72:1e:8c:cc:f7:90:e7:79:09:4b:0f:dc:
a4:dc:b7:f8:b1:81:cc:ff:b3:d1:16:41:d5:ae:bf:0c:b9:10:
56:1f:3d:ce:e5:2a:c9:0a:81:a5:45:2c:1f:15:e8:0a:c8:08:
89:b8:9f:3a:6c:d9:a7:c5:7a:23:ea:5d:78:1b:8f:38:5a:26:
7c:39:09:f1:71:d3:4f:5b:d9:48:dd:97:9b:c8:74:de:40:8a:
f7:ea:f0:c0:d1:0b:59:07:d2:b8:61:42:04:5c:41:93:16:c8:
e5:dc:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:17 2024 by rpki-client on console-ams.rpki-client.org