Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/VBVHep4vYBQ84q7ytZjhAr3Y_BM.roa
File: VBVHep4vYBQ84q7ytZjhAr3Y_BM.roa (raw, json)
Hash identifier: mWT/2Embwj0AMXA5CYK2GnJQBvHwVaB9wmko2RcXUcM=
Subject key identifier: 54:15:47:7A:9E:2F:60:14:3C:E2:AE:F2:B5:98:E1:02:BD:D8:FC:13
Certificate issuer: /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial: 01841524D41126A2BD314D82F3C6A0A149FE
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/VBVHep4vYBQ84q7ytZjhAr3Y_BM.roa
Signing time: Wed 26 Oct 2022 16:34:05 +0000
ROA not before: Wed 26 Oct 2022 16:34:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:24:d4:11:26:a2:bd:31:4d:82:f3:c6:a0:a1:49:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Validity
Not Before: Oct 26 16:34:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5415477a9e2f60143ce2aef2b598e102bdd8fc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:ab:5a:e3:f0:a9:ea:57:b0:8b:4d:5d:70:
c1:a8:b6:ce:ba:90:1c:11:49:e5:2f:4a:58:88:a3:
55:ff:94:c9:c8:1c:d9:56:12:35:72:72:85:20:2b:
a6:d4:4c:47:f9:04:97:dc:81:25:a5:57:2d:2d:41:
29:b6:ec:c4:af:81:52:15:84:40:a9:67:53:cd:27:
84:d3:3f:df:44:33:bb:b1:77:a4:35:9b:97:a3:44:
5e:cb:74:ac:2a:65:90:4c:3f:a0:d6:9b:50:ad:f1:
62:88:6b:61:03:aa:a6:ba:10:68:1c:a4:d3:8b:86:
e7:75:46:41:e8:44:d7:23:ce:d1:8e:16:50:a7:c8:
7d:d8:ca:6d:5a:1b:d5:f8:b8:42:d0:40:e0:e6:f4:
4c:ab:25:fd:c3:89:66:d0:26:f6:2c:7d:e1:cd:76:
b4:db:bf:f0:a3:50:ce:91:c6:ad:44:84:c8:e2:2c:
19:90:15:cc:0c:7a:07:0e:32:ba:93:51:c0:bc:22:
fc:b1:c1:ee:cb:c9:5d:0f:5a:5d:22:7f:70:b9:ff:
81:a9:b7:72:a4:a7:6c:75:ef:b0:a3:4d:39:e4:20:
68:f8:64:7a:0f:ed:d2:a8:7a:b6:48:d0:2c:82:12:
4b:2a:fe:c6:d9:ca:b6:8d:fb:86:b2:fa:b1:29:ee:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:47:7A:9E:2F:60:14:3C:E2:AE:F2:B5:98:E1:02:BD:D8:FC:13
X509v3 Authority Key Identifier:
keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/VBVHep4vYBQ84q7ytZjhAr3Y_BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
71:19:3d:8f:0f:4b:2e:cf:b9:7d:e0:65:f1:0e:14:e6:71:1c:
0d:b9:78:ec:b6:cf:36:f3:cf:bd:39:dd:05:25:33:fc:8e:aa:
19:97:79:14:8b:8b:7b:a6:92:70:d0:71:f3:e5:33:b3:07:5f:
3d:73:42:ad:18:e0:70:b8:6a:ec:1e:6e:1c:83:55:93:d0:2c:
47:bd:e1:0c:c7:7a:25:12:92:f3:ea:40:10:54:3f:5d:a8:c7:
37:c7:38:cb:8d:f8:71:32:ed:a7:a8:38:f2:29:06:66:52:5e:
c2:d0:e9:81:0c:85:60:a5:f4:1b:54:e9:55:8c:19:89:69:5b:
6c:e3:f6:8f:be:0d:00:8c:88:75:a1:af:46:98:49:f3:9f:9e:
56:dd:07:81:36:49:c8:18:a4:5d:f8:17:bb:da:4c:28:37:6b:
75:0f:62:44:a2:96:66:6b:c0:90:01:da:cc:83:e8:bd:68:ba:
2a:3e:35:fd:aa:b4:46:36:69:93:be:07:7c:26:ed:0c:35:85:
fc:c3:1a:3d:4a:88:68:1b:c7:80:15:f0:34:d5:1b:58:19:5b:
6d:ab:67:78:56:96:98:6e:22:01:63:1f:af:9b:4b:12:e1:ee:
f4:67:7e:ba:a9:46:31:8d:7e:81:61:41:59:52:49:a6:f4:c0:
01:49:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-fra.rpki-client.org