Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/VA3lopgMul-VAVEtjDaMdrQJyIY.roa
File: VA3lopgMul-VAVEtjDaMdrQJyIY.roa (raw, json)
Hash identifier: 2TVM0RTFcNtvvUaBZzsQEC/Eeux/J/lsA+tIzhWBGKQ=
Subject key identifier: 54:0D:E5:A2:98:0C:BA:5F:95:01:51:2D:8C:36:8C:76:B4:09:C8:86
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 018446F40E187E593B4A150607B8F0D663B4
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/VA3lopgMul-VAVEtjDaMdrQJyIY.roa
Signing time: Sat 05 Nov 2022 08:41:50 +0000
ROA not before: Sat 05 Nov 2022 08:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201653
IP address blocks: 185.73.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:f4:0e:18:7e:59:3b:4a:15:06:07:b8:f0:d6:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Nov 5 08:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=540de5a2980cba5f9501512d8c368c76b409c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:ca:e5:33:dc:d5:a0:87:25:ba:c9:df:70:
56:35:db:a0:39:89:dd:97:f8:02:19:cc:e5:98:1c:
fe:0b:a8:c4:e9:46:8a:f9:8f:15:00:10:a6:0b:80:
50:0c:e0:74:fb:1b:a2:68:8c:ba:9d:7e:3b:20:61:
2e:f2:2b:62:37:49:e4:94:85:46:b2:25:de:ba:79:
39:c1:6b:67:04:d2:af:ad:8c:1d:0e:19:03:57:47:
25:27:f1:9e:1f:d7:b4:9f:5a:86:86:8f:d4:d2:3d:
8a:da:25:67:65:5f:31:6c:e5:be:bb:3b:3e:c1:d0:
27:af:15:0a:29:3a:28:d1:0b:d2:bb:5d:ea:9e:fc:
35:dc:83:66:33:f3:96:d8:72:82:d0:e7:e8:0d:f0:
e5:89:23:81:e5:1e:d9:d2:5a:0f:c1:45:7d:49:ce:
dc:4d:a5:80:76:71:a4:08:b5:02:63:8e:d4:7f:e4:
e0:6a:76:40:ca:1e:10:72:b8:18:32:21:87:74:8d:
02:17:62:0e:ef:47:0d:b8:19:01:60:32:4b:7c:42:
32:1f:e3:60:f7:03:83:d3:5a:70:b6:25:a8:0b:d5:
4f:a6:72:76:69:d2:91:55:03:6e:de:1f:30:80:e0:
83:90:c1:62:c5:cb:9b:44:22:7c:17:46:7b:08:4b:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:E5:A2:98:0C:BA:5F:95:01:51:2D:8C:36:8C:76:B4:09:C8:86
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/VA3lopgMul-VAVEtjDaMdrQJyIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:77:9d:3c:e6:b0:3d:e5:c2:ac:b5:1c:8e:27:fc:1e:ee:9f:
d1:28:85:82:c4:b4:f9:5a:45:de:7f:19:02:be:ea:97:89:70:
10:4c:fb:56:28:61:5f:ff:f6:23:39:26:3c:cb:58:e8:03:56:
92:3d:31:af:be:a9:93:69:1b:5f:1c:27:ed:6d:61:01:0f:78:
00:ad:fc:c2:90:8a:81:e1:1e:3b:b9:85:61:b2:36:67:91:a6:
4a:b1:ea:bb:66:e8:58:c7:ae:5c:d4:9b:1e:69:d5:cd:2d:78:
20:27:dc:04:11:e8:7a:15:40:b7:20:10:67:6a:d5:7a:ae:3e:
70:19:c4:2f:40:27:f2:fe:3d:2a:28:8c:c9:5a:e4:24:4d:09:
34:9a:fc:b6:c5:f6:74:bf:a0:5a:2b:b3:8a:ad:40:cd:15:20:
30:07:c8:ac:55:4b:3c:1e:60:e5:2b:3a:c4:16:08:78:34:33:
ee:7f:e0:d2:b4:4d:f4:5d:ad:a6:48:1d:e8:74:16:d3:4c:da:
bf:58:d4:4c:75:45:3c:ae:ff:e6:c4:7a:82:b9:8d:48:bd:6f:
a2:28:9b:62:71:23:f5:3f:6f:b5:04:ed:1e:d2:cc:2f:4c:8b:
aa:95:bd:a3:33:b8:6f:eb:ed:b1:45:a7:25:86:46:da:99:87:
fc:78:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:15 2023 by rpki-client on console.sobornost.net