Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/VfUMBpEhlbm1BUFWEOixHdoO3Gs.roa
File: VfUMBpEhlbm1BUFWEOixHdoO3Gs.roa (raw, json)
Hash identifier: XDgTZfobMnCw/V+Rc6fp1KOY00oX3l/i3faHiWV2ylQ=
Subject key identifier: 55:F5:0C:06:91:21:95:B9:B5:05:41:56:10:E8:B1:1D:DA:0E:DC:6B
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 02E820
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/VfUMBpEhlbm1BUFWEOixHdoO3Gs.roa
Signing time: Thu 07 Apr 2022 18:07:41 +0000
ROA not before: Thu 07 Apr 2022 18:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.35.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190496 (0x2e820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Apr 7 18:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55f50c06912195b9b505415610e8b11dda0edc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:5c:0d:37:4c:8e:93:a9:f3:2e:5b:71:3b:
f2:0a:e2:ea:6a:5c:a3:60:d3:03:e8:86:89:46:d8:
8c:2f:50:b9:92:26:74:33:69:a2:02:17:f3:16:5f:
84:b7:d3:4e:24:41:e9:99:a7:13:2d:f4:f9:31:83:
4b:c2:42:7f:9e:db:73:41:14:10:b3:ef:9e:91:5b:
00:24:5e:03:c0:9e:73:0d:f1:48:e2:5c:d5:2e:85:
74:b0:71:0d:e5:95:ad:ce:db:82:96:86:a6:17:3d:
17:16:93:ae:07:b8:b6:7b:35:b1:30:2a:da:f4:3d:
f2:7d:55:03:9c:02:41:7a:8c:96:45:8a:00:bd:73:
39:09:a6:27:07:ea:fb:ae:51:68:95:50:f1:d7:47:
de:03:bf:8d:f4:ee:4d:7f:17:59:42:f0:7a:87:d4:
8f:8c:6d:84:62:b3:a0:ef:f2:52:e9:e7:d6:2e:c6:
3a:7b:42:8b:1b:61:69:f3:10:43:12:d3:93:b2:c8:
53:bd:7d:6c:67:76:bd:aa:e2:e1:62:53:48:c4:fe:
c1:f8:76:58:ee:99:40:8d:5d:b4:15:e9:d0:aa:a4:
94:45:c2:33:91:18:7b:23:12:17:0c:f3:b0:f3:fc:
07:9b:79:f8:dc:74:07:20:2d:3c:c7:8d:a3:05:b0:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:0C:06:91:21:95:B9:B5:05:41:56:10:E8:B1:1D:DA:0E:DC:6B
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/VfUMBpEhlbm1BUFWEOixHdoO3Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b6:f3:3b:ea:b1:3d:87:d4:c8:60:c8:e4:de:74:f7:19:0b:
49:97:b0:7c:6b:cf:90:e1:19:37:6e:30:42:05:b4:31:25:e8:
c1:e4:94:f8:64:c5:c9:15:f2:ad:45:95:03:c1:04:77:1d:41:
c1:d2:e1:d3:00:91:ea:60:16:57:e3:3c:6d:42:cd:ea:d2:74:
16:bf:4e:e1:b5:e8:1d:ae:3c:f2:f1:47:c6:b8:4b:b1:a9:45:
d5:0e:55:c2:eb:3f:d5:c0:4a:1a:ed:59:67:f4:29:76:3e:6f:
68:48:3f:c2:d7:6a:0c:fb:b1:78:61:00:c4:41:60:63:bf:85:
05:c0:bf:17:85:f5:ec:16:7f:72:f0:12:9f:73:8b:5a:db:46:
8c:c8:64:ea:90:f4:be:5a:ac:14:9d:00:ca:95:35:17:58:76:
cf:83:c4:c7:84:36:c2:9f:ee:c1:43:64:8f:9d:10:98:84:ee:
16:49:45:e5:5a:d0:2b:14:00:80:9f:4a:20:79:5d:f0:12:19:
88:c9:e9:68:05:62:df:3f:32:76:dd:e0:8b:f5:38:0b:d6:ce:
57:f7:22:b7:38:83:92:e3:68:43:f3:a4:60:e4:d2:4d:36:0b:
89:10:f5:f0:c2:eb:f2:fa:58:70:4e:29:24:69:bd:6f:46:22:
41:2a:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:26 2023 by rpki-client on console-fra.rpki-client.org