Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/VCJOsE_v6eIar5IktZt5M2j_n6k.roa
File: VCJOsE_v6eIar5IktZt5M2j_n6k.roa (raw, json)
Hash identifier: hzwvxf5mQ2KCVTyVI7JjyKwfjkzfbwTGNxygIQHnGoE=
Subject key identifier: 54:22:4E:B0:4F:EF:E9:E2:1A:AF:92:24:B5:9B:79:33:68:FF:9F:A9
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 0184800E7D9A40E564B9BB594056B8CA8E0C
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/VCJOsE_v6eIar5IktZt5M2j_n6k.roa
Signing time: Wed 16 Nov 2022 10:49:04 +0000
ROA not before: Wed 16 Nov 2022 10:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43197
IP address blocks: 185.105.231.0/24 maxlen: 24
2a0b:6bc0::/48 maxlen: 48
2a0b:6bc0:1::/64 maxlen: 64
2a0b:6bc0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:0e:7d:9a:40:e5:64:b9:bb:59:40:56:b8:ca:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Nov 16 10:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54224eb04fefe9e21aaf9224b59b793368ff9fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:ec:16:fb:0d:48:3b:24:81:b6:8a:6c:07:
c0:27:42:ce:3a:c3:a1:4e:da:e6:87:ae:53:8a:2a:
35:a3:10:28:ea:29:33:f4:53:63:a9:2d:21:11:91:
e2:64:36:9a:91:21:8c:78:cc:af:a9:f7:67:24:a8:
40:ab:dc:25:98:55:68:07:db:a0:ad:f0:40:13:fc:
7c:c1:ae:ef:14:1d:66:53:06:b9:9c:31:ff:23:56:
76:89:24:38:2c:21:57:4f:06:9a:1c:11:86:69:c2:
f8:6d:7e:b0:0c:93:be:02:e4:62:d6:58:0d:02:90:
a8:69:2a:3e:c1:11:61:f0:7b:e2:dc:e9:75:5f:bf:
cb:a9:0e:82:35:32:4b:d2:9d:9a:de:17:3d:c7:a8:
34:8d:eb:dd:90:7f:74:be:91:79:89:99:7b:8a:ed:
c3:8b:10:3d:d0:01:86:c3:9a:ac:98:4b:2e:f3:22:
ac:54:02:f6:c7:fa:f3:36:57:28:12:d6:ab:1a:2e:
e3:d2:ca:07:7d:89:11:a3:e4:72:d1:be:5b:90:72:
3e:4d:ec:f6:30:73:07:9b:d6:df:fa:44:ff:92:5c:
c1:4c:5a:04:e1:b0:2c:e3:74:ad:5c:86:20:82:24:
b8:9a:ba:23:62:36:23:fc:6a:cf:e7:a6:5c:a1:f9:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:4E:B0:4F:EF:E9:E2:1A:AF:92:24:B5:9B:79:33:68:FF:9F:A9
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/VCJOsE_v6eIar5IktZt5M2j_n6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.231.0/24
IPv6:
2a0b:6bc0::/47
Signature Algorithm: sha256WithRSAEncryption
4a:6d:ee:ca:06:c7:92:5c:51:b1:52:7e:4c:e7:88:cc:f9:43:
97:e9:7e:04:6c:12:cd:4e:0c:6f:68:f1:0e:5a:32:4a:50:86:
5b:14:00:23:32:7f:c7:20:af:d6:14:88:93:3a:e8:29:79:06:
6d:0c:1f:fb:ca:b5:16:5c:e4:eb:b1:95:99:6d:4f:26:4a:96:
71:2a:f4:06:27:02:96:60:1c:3a:0f:56:d3:ad:a4:41:7f:89:
e1:60:a0:d3:00:21:ec:ab:db:b3:76:b1:df:9c:25:39:02:a1:
08:2b:33:83:df:87:4c:92:ad:46:74:35:6f:69:a6:11:07:1f:
7d:cf:c9:64:54:81:69:25:76:07:56:bf:e1:59:98:a9:65:64:
a0:4d:6e:a7:8c:b5:f9:b3:0c:27:d7:9c:3f:77:09:4f:b6:bf:
b2:dc:eb:d9:b4:bf:cc:3c:7a:33:dc:63:85:9b:3c:8d:02:e3:
2c:76:9d:4e:12:c1:3a:4e:54:a0:fc:e9:7b:cb:f1:4b:dd:24:
34:8e:0c:db:af:20:d0:34:8b:df:b3:6f:30:bd:31:73:60:d2:
1a:26:c3:f4:2e:ae:30:4c:92:2e:e3:84:21:20:0e:fc:a4:07:
3f:17:71:c1:c6:57:ca:12:03:8d:75:f4:f9:da:33:37:7e:ca:
a5:3b:8b:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSADn2aQOVkubtZQFa4yo4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTg4Y2E2NGM0NjcwYTZlYjU2YjQyYTUwYTEwNTg4YWQ5
NjQ3ZWUwHhcNMjIxMTE2MTA0OTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDIyNGViMDRmZWZlOWUyMWFhZjkyMjRiNTliNzkzMzY4ZmY5ZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkvsFvsNSDskgbaKbAfAJ0LOOsOh
Ttrmh65Tiio1oxAo6ikz9FNjqS0hEZHiZDaakSGMeMyvqfdnJKhAq9wlmFVoB9ug
rfBAE/x8wa7vFB1mUwa5nDH/I1Z2iSQ4LCFXTwaaHBGGacL4bX6wDJO+AuRi1lgN
ApCoaSo+wRFh8Hvi3Ol1X7/LqQ6CNTJL0p2a3hc9x6g0jevdkH90vpF5iZl7iu3D
ixA90AGGw5qsmEsu8yKsVAL2x/rzNlcoEtarGi7j0soHfYkRo+Ry0b5bkHI+Tez2
MHMHm9bf+kT/klzBTFoE4bAs43StXIYggiS4mrojYjYj/GrP56Zcofk7/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFQiTrBP7+niGq+SJLWbeTNo/5+pMB8GA1UdIwQY
MBaAFJEYjKZMRnCm61a0KlChBYitlkfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQt
MTQ3MTc3YjgzN2RlLzEvVkNKT3NFX3Y2ZUlhcjVJa3RadDVNMmpfbjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQtMTQ3MTc3YjgzN2Rl
LzEva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWnnMA8E
AgACMAkDBwEqC2vAAAAwDQYJKoZIhvcNAQELBQADggEBAEpt7soGx5JcUbFSfkzn
iMz5Q5fpfgRsEs1ODG9o8Q5aMkpQhlsUACMyf8cgr9YUiJM66Cl5Bm0MH/vKtRZc
5OuxlZltTyZKlnEq9AYnApZgHDoPVtOtpEF/ieFgoNMAIeyr27N2sd+cJTkCoQgr
M4Pfh0ySrUZ0NW9pphEHH33PyWRUgWkldgdWv+FZmKllZKBNbqeMtfmzDCfXnD93
CU+2v7Lc69m0v8w8ejPcY4WbPI0C4yx2nU4SwTpOVKD86XvL8UvdJDSODNuvINA0
i9+zbzC9MXNg0homw/QurjBMki7jhCEgDvykBz8XccHGV8oSA4119PnaMzd+yqU7
i8Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:25 2024 by rpki-client on console-fra.rpki-client.org