Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vjo_GHImjuHMlg83_dUipsbhFbM.roa
File: vjo_GHImjuHMlg83_dUipsbhFbM.roa (raw, json)
Hash identifier: SG1jUlyDylRdI2jZ1HbmVCHdIKrzUtYv5iAN1Tw/gbk=
Subject key identifier: BE:3A:3F:18:72:26:8E:E1:CC:96:0F:37:FD:D5:22:A6:C6:E1:15:B3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4265898E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vjo_GHImjuHMlg83_dUipsbhFbM.roa
Signing time: Sat 01 Jan 2022 14:03:07 +0000
ROA not before: Sat 01 Jan 2022 14:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39326
IP address blocks: 194.71.107.0/24 maxlen: 24
192.121.112.0/24 maxlen: 24
192.121.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113950606 (0x4265898e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be3a3f1872268ee1cc960f37fdd522a6c6e115b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:63:bf:71:4e:02:43:02:53:01:5d:9f:b1:
71:a5:67:0d:7f:59:d2:7c:20:31:75:dd:5a:e7:29:
ff:23:3f:e4:a1:f0:b7:6e:0f:09:b5:a4:55:16:93:
31:28:14:17:01:03:c1:a0:77:01:8d:cd:94:1e:0b:
54:82:e4:e5:73:51:9d:54:28:99:f2:1f:ec:4c:82:
ec:4c:90:f3:29:82:11:fe:c5:d1:32:71:0c:bb:81:
8e:10:a4:85:61:e0:cb:2d:d6:13:f5:75:fc:89:e0:
79:6c:13:89:b3:94:a8:b2:af:45:fa:7d:e1:a7:fe:
b9:94:02:80:f0:85:f5:c7:cc:71:d8:7e:86:96:9f:
90:6e:17:d7:1d:a7:b8:65:00:ce:11:72:9b:49:14:
b3:99:c8:77:45:5b:79:66:88:e8:70:7a:e1:fe:70:
56:ba:56:de:35:95:17:48:c6:a3:1b:64:1a:51:4e:
13:2f:cd:89:c9:4f:5e:6e:9b:6f:5d:92:c2:c6:74:
a6:27:36:15:16:b0:09:b6:60:34:82:b2:64:55:d2:
6c:cd:d8:9e:3f:a9:c5:ee:d7:73:2c:ad:98:8b:b8:
e1:ea:f3:3a:49:31:64:99:a7:26:7f:6d:be:c1:31:
1b:fb:fc:1d:ad:b6:0d:d2:05:1f:3b:6a:0b:62:62:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:3F:18:72:26:8E:E1:CC:96:0F:37:FD:D5:22:A6:C6:E1:15:B3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vjo_GHImjuHMlg83_dUipsbhFbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.112.0/23
194.71.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ee:fd:a5:6c:c0:22:84:43:57:8c:bb:49:b8:fe:4b:11:f3:
70:84:5a:87:e4:c0:18:12:f1:26:c9:1b:24:ca:87:e3:f6:bb:
49:f1:ee:3b:68:4e:d3:b0:21:5b:a9:fd:9f:fb:cd:4e:b6:d4:
88:c6:13:24:26:18:81:61:d4:02:7c:2b:e4:12:98:04:8e:14:
c8:5a:00:53:f5:1f:d7:c8:17:11:d1:8c:59:40:e5:3d:21:77:
15:8e:4e:81:38:1c:b1:ea:76:e8:de:e0:54:09:13:7d:a6:46:
c3:25:4e:4e:01:dc:7a:f0:60:be:67:55:1b:d1:58:88:02:1c:
e9:bf:7e:e1:d8:dc:8a:32:12:0a:af:71:78:b9:60:48:e3:f1:
58:00:8e:fa:69:82:13:34:de:e4:9a:5e:75:b0:97:2c:e8:aa:
b9:d6:a9:0f:a8:2c:fb:12:a2:fe:47:ea:6f:b3:28:7e:73:98:
15:2b:9e:d0:36:83:61:49:ac:0c:74:d7:0c:e4:77:c9:1c:4f:
f5:b0:27:3d:ad:3c:16:75:bd:7e:88:cd:85:70:85:ab:38:b0:
47:3d:b4:9b:cb:81:5c:1b:3c:c1:68:b9:b9:db:64:dc:cf:31:
b4:07:cd:91:c0:2f:79:f5:59:30:da:09:28:58:df:00:d3:0f:
97:0d:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org