Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/vm39fGLc6AfrvUSLvNZUqslcKi0.roa
File: vm39fGLc6AfrvUSLvNZUqslcKi0.roa (raw, json)
Hash identifier: +lLkredpoUdbfb2XE+Q6ltkl50FbeSWD8Mk1Tiyk/OA=
Subject key identifier: BE:6D:FD:7C:62:DC:E8:07:EB:BD:44:8B:BC:D6:54:AA:C9:5C:2A:2D
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 01828E574B0EE3017164B468BF1170DE64FF
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/vm39fGLc6AfrvUSLvNZUqslcKi0.roa
Signing time: Thu 11 Aug 2022 19:17:41 +0000
ROA not before: Thu 11 Aug 2022 19:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211181
IP address blocks: 79.132.194.0/24 maxlen: 24
2a10:fa41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:57:4b:0e:e3:01:71:64:b4:68:bf:11:70:de:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Aug 11 19:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be6dfd7c62dce807ebbd448bbcd654aac95c2a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:dc:81:22:8d:a2:70:c2:b6:7b:62:08:82:
44:7b:b9:37:60:c8:15:cf:0d:9e:f2:32:ac:8f:d1:
33:fc:78:ab:4a:6c:b9:3e:1c:b3:11:76:1c:37:ff:
1d:8b:0a:9d:4f:a1:67:cc:c8:72:05:3b:e7:ff:b9:
21:bd:87:a9:19:b8:cd:9d:e1:c7:e2:76:e3:86:88:
cd:53:fb:cb:a6:c1:de:87:20:e3:b3:1b:69:47:5a:
aa:8f:d2:28:4a:9c:01:aa:e5:35:6d:cb:18:e2:b0:
f1:c7:ea:38:55:a7:da:87:ec:2d:d4:04:c5:59:c8:
ec:35:d2:ec:a8:8c:7d:bc:e6:71:d1:a4:35:7a:cf:
51:04:32:09:db:5b:60:4b:a4:4e:b1:51:60:c9:fa:
b5:a2:7e:9d:74:14:47:43:85:6c:af:24:1e:98:93:
45:7c:84:b5:98:f5:92:8c:fa:f8:b5:b4:63:0f:50:
ef:cb:6f:4c:35:ba:f0:f8:6f:87:cf:0b:ec:76:7b:
78:81:5d:1c:6d:75:68:27:3e:6b:fd:52:18:fc:98:
a3:0f:da:32:65:1a:87:dd:16:a7:e1:20:a8:18:02:
83:52:05:4b:8d:e4:09:cd:2c:24:39:a8:2e:b9:0e:
3b:e3:03:fd:12:9d:c9:87:41:70:84:e2:8d:16:57:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:FD:7C:62:DC:E8:07:EB:BD:44:8B:BC:D6:54:AA:C9:5C:2A:2D
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/vm39fGLc6AfrvUSLvNZUqslcKi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.194.0/24
IPv6:
2a10:fa41::/32
Signature Algorithm: sha256WithRSAEncryption
74:59:39:89:d7:4f:8f:f1:66:cf:d0:66:47:52:b5:fd:2e:38:
64:e3:16:d9:aa:5c:db:66:ab:65:58:6f:c4:33:84:17:e4:73:
e8:d8:9f:65:19:a4:97:80:30:71:d6:93:fb:34:cc:e1:07:ab:
df:95:fb:fa:28:77:7f:21:dc:0b:df:c0:6c:8c:48:24:a0:f0:
05:f1:da:38:f0:83:f4:03:7a:3e:7d:72:9b:c7:be:3b:02:b3:
31:4d:76:31:d0:c1:35:75:8f:b3:17:e6:82:f0:83:3f:05:86:
bf:1c:a9:b6:45:51:57:20:7d:cf:ec:27:07:94:44:52:91:80:
5c:a9:10:86:66:f2:42:10:93:41:ad:d8:98:aa:f3:f1:01:61:
3b:97:76:ba:5b:cf:cd:36:36:e9:4a:c6:1d:7e:fa:56:dd:0a:
bf:63:5f:95:fe:6a:37:54:f2:ac:5e:88:54:5a:90:e8:51:7a:
e0:f2:67:15:82:7f:31:44:85:c6:f7:66:e3:92:b0:09:c5:f2:
8f:73:3c:90:55:70:7c:56:d5:3d:72:eb:0b:b6:62:a5:ae:56:
41:18:79:2b:58:cb:ec:d8:15:df:40:f3:c8:9e:c8:a3:b9:3c:
03:0a:e0:a7:eb:af:19:b8:f8:28:95:03:ae:be:8d:df:a4:6c:
e1:8a:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:08 2024 by rpki-client on console-fra.rpki-client.org