Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/VkQdNMU_0FZKr2mmOaNtFi-yyQE.roa
File: VkQdNMU_0FZKr2mmOaNtFi-yyQE.roa (raw, json)
Hash identifier: w+sMfEc/8pxo0nLyaeh6Ms+i22ADvG/3DmMLu4729YM=
Subject key identifier: 56:44:1D:34:C5:3F:D0:56:4A:AF:69:A6:39:A3:6D:16:2F:B2:C9:01
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018291D305EDC62659EB23B7D60D546B8BF5
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/VkQdNMU_0FZKr2mmOaNtFi-yyQE.roa
Signing time: Fri 12 Aug 2022 11:31:41 +0000
ROA not before: Fri 12 Aug 2022 11:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 195.242.243.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
93.114.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:d3:05:ed:c6:26:59:eb:23:b7:d6:0d:54:6b:8b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 12 11:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56441d34c53fd0564aaf69a639a36d162fb2c901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:2e:79:6a:ce:c3:28:cc:ab:0b:fb:bf:f5:
17:5f:11:61:85:83:a0:c3:bb:62:7f:44:f5:83:3b:
6c:f4:11:b8:b9:18:5e:65:c1:c4:50:d0:6b:a3:33:
c0:4d:fc:ff:52:56:2f:1a:23:b8:99:29:f5:e1:70:
d6:7e:2e:81:c5:78:1f:34:d6:24:52:d8:db:68:ca:
06:4f:6b:17:77:eb:57:f8:e9:fa:80:6c:c6:00:ad:
2e:25:6c:3c:91:36:bd:42:22:2c:2a:df:83:3d:1d:
4b:02:e1:65:a3:0f:39:07:88:15:6e:72:c9:33:63:
6c:18:53:21:d1:5e:80:2b:21:6d:26:9d:2a:49:90:
6a:5d:1b:68:a8:86:e7:a6:f8:b0:5c:67:6e:34:2a:
31:ad:26:87:31:d3:ae:45:f9:63:07:8f:93:e9:56:
9f:6f:38:4e:83:07:41:6c:5d:30:f0:d4:27:ce:86:
01:80:78:cc:2c:2c:a4:a5:4a:c4:3e:a8:81:fa:d9:
57:35:e2:dd:c6:34:f0:e9:a5:e1:60:73:ba:6a:21:
69:a1:04:1f:bd:cd:d0:c9:7e:38:01:8b:a5:e4:2c:
2f:31:f6:2d:3d:c1:de:5d:8d:b7:4a:ec:bb:d9:d3:
95:43:75:1b:c1:94:2a:75:e1:dc:48:1a:f9:8a:79:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:1D:34:C5:3F:D0:56:4A:AF:69:A6:39:A3:6D:16:2F:B2:C9:01
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/VkQdNMU_0FZKr2mmOaNtFi-yyQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
93.114.63.0/24
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9b:10:4d:f7:6f:3d:14:dd:42:d7:85:36:cb:42:39:3c:67:
44:6a:8e:1a:77:3b:17:9a:29:b9:eb:93:c4:e2:c9:26:5d:74:
8b:9f:18:f5:94:05:1b:6f:7a:8c:b4:25:20:f9:6e:b3:8e:75:
5b:97:ce:65:eb:66:06:65:78:62:0c:99:9a:b7:a0:da:37:36:
33:86:7c:53:43:26:60:3e:28:93:99:0a:8d:ca:da:bf:d7:36:
6a:ed:4d:90:27:ae:c9:5a:9e:6d:14:77:a7:1e:e0:02:07:87:
31:0f:24:2a:63:54:c7:bf:7c:cc:4a:66:47:4a:66:b9:d5:71:
d0:ae:86:28:20:7a:a5:85:ce:15:36:d7:c5:27:a1:38:4e:ec:
80:8b:1e:cb:c5:dd:28:58:34:dd:2f:e7:25:e1:3b:fc:07:86:
48:8e:6a:17:16:8d:88:2d:a6:3f:c2:da:5b:ff:c2:16:54:2d:
46:7e:74:53:17:1b:b2:5a:33:0f:df:e9:c0:bf:ae:d6:f0:1b:
ec:51:26:f0:bc:0d:b2:ff:83:ed:c5:99:8e:6a:3d:0f:b4:00:
a2:45:a1:4d:cc:3f:98:f3:29:7d:99:a0:47:f1:bb:91:d5:02:
55:ea:ff:3f:fc:57:21:70:9d:f1:69:27:97:86:69:08:90:91:
3b:fa:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net