Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VGOaEnLBx_RrPyjlT7u7XosUi5E.roa
File: VGOaEnLBx_RrPyjlT7u7XosUi5E.roa (raw, json)
Hash identifier: kkxg2Z1+m6Oj6pA5YROc241IQ2rnUuadBaI40wjdr9Q=
Subject key identifier: 54:63:9A:12:72:C1:C7:F4:6B:3F:28:E5:4F:BB:BB:5E:8B:14:8B:91
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 04ADA802
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VGOaEnLBx_RrPyjlT7u7XosUi5E.roa
Signing time: Sat 01 Jan 2022 05:52:44 +0000
ROA not before: Sat 01 Jan 2022 05:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39122
IP address blocks: 185.94.44.0/24 maxlen: 24
185.94.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78489602 (0x4ada802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jan 1 05:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54639a1272c1c7f46b3f28e54fbbbb5e8b148b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:17:4f:18:35:4b:16:2f:88:f7:a5:18:6b:
8d:5d:86:92:a8:78:46:28:37:1b:0f:f5:9a:34:51:
51:3c:5d:17:00:4a:79:a3:b5:2d:25:38:7e:ca:bc:
b4:c4:27:d3:a6:95:dd:10:b4:8f:92:c5:d3:51:85:
e0:b3:bc:87:da:28:e2:cf:91:11:48:7a:b7:77:14:
2c:b4:2c:b7:71:1d:0e:1d:3d:34:9c:32:90:45:34:
fd:b3:20:52:82:da:94:07:44:d5:08:46:b6:87:f8:
ba:08:e9:43:68:8d:07:18:9d:9c:91:a2:4f:6c:b8:
8c:b2:2a:9b:d6:a5:e2:11:fd:e3:5d:2b:00:d8:03:
94:ac:e5:76:3f:d8:97:88:80:d5:4f:46:fa:50:cf:
01:56:12:d1:f1:1c:11:9a:6d:2d:35:46:9b:fe:4b:
6a:25:3b:88:eb:a9:3c:35:dd:e7:0d:5f:18:d0:de:
2d:c6:06:0b:d9:93:dd:ce:d5:b5:a6:c9:82:fa:53:
58:1e:68:8c:b8:55:58:d6:86:da:18:4e:2e:ce:98:
7c:fa:f5:64:92:b0:dd:9a:fc:55:97:e7:0b:19:57:
8c:72:4e:fb:bf:d3:90:1e:a8:35:63:45:fb:59:da:
da:fb:66:8b:dc:2e:8c:f1:c7:e0:ba:7c:a5:0b:c3:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:9A:12:72:C1:C7:F4:6B:3F:28:E5:4F:BB:BB:5E:8B:14:8B:91
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VGOaEnLBx_RrPyjlT7u7XosUi5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.44.0/23
Signature Algorithm: sha256WithRSAEncryption
49:4b:8b:90:ce:50:4f:85:76:20:cd:63:46:6a:45:6b:55:0f:
71:0a:76:56:27:65:0e:0d:7b:44:30:6f:56:38:6e:c1:c9:e2:
d7:c9:2f:94:c7:be:23:2b:ab:c2:4b:21:02:f7:b1:31:ed:1a:
6a:35:8b:2a:32:c0:c4:23:fa:0a:de:c1:3d:12:a1:19:6a:d2:
23:b3:21:f2:b5:f7:f9:7d:60:74:11:81:de:36:b2:65:99:2a:
63:53:32:20:39:6d:07:da:5d:38:f4:b9:3a:ad:ce:78:4e:42:
0e:e2:eb:76:41:d0:00:53:46:dc:57:e3:79:39:2c:69:40:f4:
6c:fc:bb:d4:c2:3c:02:61:af:ab:aa:e1:85:a3:23:fa:6d:50:
2e:c0:c3:90:a3:f6:80:1b:c3:a1:ec:00:6f:14:d7:59:8b:e5:
ef:7f:b0:2f:46:c3:83:75:f6:1f:1b:92:7e:70:5c:3b:3b:83:
e9:60:5e:ec:40:0a:50:79:a1:85:e1:9a:4d:98:88:88:1c:e9:
ce:c9:a7:28:ec:3e:34:47:3e:23:9f:96:20:ae:ae:48:b1:20:
86:ca:e6:69:d6:77:4c:a1:6b:61:72:ea:4a:2f:01:9d:85:db:
e4:ef:12:dd:32:e6:54:24:99:58:7e:00:1d:3b:20:21:38:36:
eb:12:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-fra.rpki-client.org