Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/vrukmbbE-olbcpfBGsM9w5lfaws.roa
File: vrukmbbE-olbcpfBGsM9w5lfaws.roa (raw, json)
Hash identifier: qixJdWftf0BHnkUf5wCmxR5wTJtJdFpgilrMisteTuI=
Subject key identifier: BE:BB:A4:99:B6:C4:FA:89:5B:72:97:C1:1A:C3:3D:C3:99:5F:6B:0B
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 018349D0D7600F75D6A97B7DE8C088DD726C
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/vrukmbbE-olbcpfBGsM9w5lfaws.roa
Signing time: Sat 17 Sep 2022 04:59:26 +0000
ROA not before: Sat 17 Sep 2022 04:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60651
IP address blocks: 194.38.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:49:d0:d7:60:0f:75:d6:a9:7b:7d:e8:c0:88:dd:72:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Sep 17 04:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebba499b6c4fa895b7297c11ac33dc3995f6b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:24:ed:c3:81:37:c3:d3:d7:a8:d7:67:ac:
88:40:73:ef:97:f2:af:80:3e:05:17:6e:1a:d9:38:
d6:d2:d3:be:2f:88:51:de:b3:d5:2c:d6:70:9e:aa:
c4:a4:f1:03:f1:6e:1d:46:77:d2:09:1f:e4:91:c4:
e8:c6:93:cb:1b:48:e6:fe:1b:7e:38:a6:7a:24:25:
71:70:a3:24:31:21:1b:7d:5e:73:f6:55:8c:65:50:
c6:0e:2d:20:9a:b4:0c:f4:f7:46:91:96:92:ab:18:
ad:c2:47:53:2f:64:eb:a2:27:94:04:20:cc:89:f7:
10:5c:87:0c:ca:0c:41:87:6f:0a:e1:03:88:ca:bb:
b9:56:03:e0:1f:4b:37:89:5b:be:6a:ad:ed:e1:e7:
51:5d:87:93:54:d3:ce:54:a7:ae:ec:40:ee:1b:d7:
a5:33:86:2d:6a:b6:e5:75:ff:e0:70:5e:cd:b6:e4:
9e:a2:ff:e0:09:47:ca:22:c4:d1:7d:6c:be:ee:64:
2a:91:35:68:65:7b:56:e1:f8:d6:4e:ee:c7:b4:2c:
cd:77:1f:96:ac:1e:bf:d7:f0:db:8b:c3:c1:5c:fa:
e2:4e:da:13:9b:fc:8e:ff:96:e7:fd:e6:87:67:5b:
bc:78:28:02:ef:8d:b0:1e:ce:88:e1:2b:3a:a0:f2:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:A4:99:B6:C4:FA:89:5B:72:97:C1:1A:C3:3D:C3:99:5F:6B:0B
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/vrukmbbE-olbcpfBGsM9w5lfaws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ad:55:16:ac:48:a8:c7:15:8e:12:3b:c5:13:1e:a9:fb:0b:
c0:7f:e9:76:ee:1c:7f:05:0e:60:8b:b0:84:f6:37:d6:f6:12:
8f:07:5c:c0:c4:4e:6d:c4:a0:a0:4e:22:51:2f:fd:98:8e:c3:
4e:ef:ec:09:a6:2e:61:0e:b0:8a:c5:18:d5:cb:5e:c1:0f:67:
fe:83:8c:1e:49:a4:73:4c:a5:16:00:77:4d:2f:31:4c:f4:30:
a9:6a:2e:10:b4:36:29:85:59:08:d1:70:0e:b0:cd:02:6b:69:
cd:a0:45:9b:46:9a:46:72:e6:df:b2:05:d8:92:42:58:96:7f:
6c:1e:c7:6b:b3:35:cf:12:03:9c:52:f0:2d:68:3f:66:eb:3b:
51:96:3b:8f:bf:d3:d9:ec:41:6d:68:da:2d:aa:86:f7:88:c1:
d7:75:e5:c1:20:31:61:8d:ba:45:28:35:85:38:d5:e3:8c:19:
7f:f0:16:6f:83:ba:65:76:85:07:38:6f:66:e9:a3:e3:7e:fd:
3c:c2:65:35:27:2c:69:5e:02:f7:82:fd:b5:d6:21:74:80:f1:
49:b5:61:6f:cd:52:71:7b:ab:bf:a9:e1:23:12:9b:02:5d:5c:
0c:4c:fa:9e:4a:8a:d0:55:8c:8a:dd:a6:4b:a4:0c:92:53:ea:
c8:bf:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org