Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/vrpFGaAmoXTVBmRjfptM_rgEJAs.roa
File: vrpFGaAmoXTVBmRjfptM_rgEJAs.roa (raw, json)
Hash identifier: kcYGUKtE5UmRsCCUUeUiVGZwTH7bs4biHlHrrEbyVgk=
Subject key identifier: BE:BA:45:19:A0:26:A1:74:D5:06:64:63:7E:9B:4C:FE:B8:04:24:0B
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 01835EFEF3FC8F2EC449E93A6D2B91B6AA2B
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/vrpFGaAmoXTVBmRjfptM_rgEJAs.roa
Signing time: Wed 21 Sep 2022 07:41:50 +0000
ROA not before: Wed 21 Sep 2022 07:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 193.109.184.0/21 maxlen: 24
185.162.183.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2a12:c1c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:fe:f3:fc:8f:2e:c4:49:e9:3a:6d:2b:91:b6:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Sep 21 07:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beba4519a026a174d50664637e9b4cfeb804240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:f4:31:04:55:91:52:68:af:19:97:f5:65:
20:7c:3c:ca:b9:c2:a7:3c:bb:03:7d:70:98:13:68:
0a:68:62:ab:5c:59:43:60:2d:6b:9a:91:ed:0e:00:
1a:3d:c1:d3:e4:1c:8c:1f:84:e1:06:06:95:99:5a:
c2:75:7e:46:2c:8f:64:fd:a1:05:7c:3a:6c:2c:82:
50:24:12:57:4d:36:c3:be:0a:f5:00:88:ee:27:ee:
4b:00:0e:97:93:a2:98:51:ff:60:1c:95:36:94:3b:
64:76:29:d3:76:c4:ed:5c:0d:cc:eb:d7:8b:aa:79:
68:4d:b1:8d:91:a5:b9:4e:9c:e0:dc:48:b3:0c:ee:
2c:13:4f:f8:19:bd:75:f9:83:5b:8e:d6:41:78:2c:
7a:35:96:d0:3f:95:56:5e:01:6b:15:44:aa:0e:ea:
0e:38:c0:0f:c6:73:ca:e9:87:03:34:70:cf:42:c7:
90:4f:17:e9:1e:75:a3:b9:a4:15:7f:1f:92:48:16:
43:35:f3:4e:97:31:20:1f:95:08:bf:3a:cd:d3:2c:
51:54:75:b4:5f:7f:75:7c:78:5f:dd:00:67:02:04:
54:0e:54:92:01:fa:ca:49:1f:e1:36:6b:25:11:ac:
fe:f1:50:2b:12:bb:b6:0a:3a:00:bd:ea:a6:53:38:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:45:19:A0:26:A1:74:D5:06:64:63:7E:9B:4C:FE:B8:04:24:0B
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/vrpFGaAmoXTVBmRjfptM_rgEJAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.183.0/24
193.109.184.0/21
IPv6:
2001:b18::/32
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:30:ce:57:fa:de:99:d4:ae:3b:93:83:12:57:75:31:a1:4b:
16:92:50:b8:e9:58:13:c4:82:28:16:e2:ad:e8:c2:e6:11:91:
6e:c4:3c:04:46:f9:1e:4d:ee:ca:2d:db:59:e5:63:62:85:29:
89:1b:83:b6:c5:ae:fd:0b:55:e9:35:8e:d6:40:e5:b2:5b:10:
7e:51:d0:a5:0b:5b:8b:e6:d3:1e:86:91:d8:eb:5f:4e:43:11:
3e:6b:1f:56:2b:aa:29:8a:f5:ce:aa:bd:6c:79:d2:6d:75:c8:
81:e6:57:27:9a:65:94:88:f0:ec:f7:82:1a:b3:85:64:35:04:
a7:5f:db:2a:2a:4b:fb:5f:14:6e:08:71:be:4e:99:48:bb:40:
b7:a3:a5:a3:c4:6f:7d:40:50:3a:7d:1d:89:92:1d:da:d3:ec:
96:af:07:87:2f:57:a3:90:c0:32:c4:f1:04:c9:0c:68:62:ef:
a5:b7:e1:7c:5d:7a:21:5f:27:74:2d:9f:f6:ed:c7:e9:4e:ee:
51:d3:82:ab:04:ca:00:1f:dd:aa:9f:c2:6f:f9:4e:ad:7c:39:
8a:b2:10:60:a5:91:ca:8a:2d:fd:52:bd:68:0e:ad:80:6d:2b:
23:92:6b:e1:ec:08:b2:97:1d:24:7a:05:06:8e:c1:4a:e6:ec:
75:8a:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net