Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/VuS17RV8jm9w_nuBeGN0vhSS_os.roa
File: VuS17RV8jm9w_nuBeGN0vhSS_os.roa (raw, json)
Hash identifier: 9lANCFeJItoDY5hfMcORrUcupl7Tbs2jJSSU50l60KQ=
Subject key identifier: 56:E4:B5:ED:15:7C:8E:6F:70:FE:7B:81:78:63:74:BE:14:92:FE:8B
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 06517948
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/VuS17RV8jm9w_nuBeGN0vhSS_os.roa
Signing time: Tue 19 Apr 2022 14:01:32 +0000
ROA not before: Tue 19 Apr 2022 14:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25436
IP address blocks: 188.68.7.0/24 maxlen: 24
95.85.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106002760 (0x6517948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e4b5ed157c8e6f70fe7b81786374be1492fe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:dd:23:2f:dd:2c:d4:92:5a:97:ef:5a:f7:
42:e4:c2:ce:be:20:60:90:1d:dd:54:ff:2c:77:c2:
d1:86:61:53:a5:5e:85:36:fb:bf:97:73:ab:03:cb:
a2:0b:d7:17:5d:05:b0:c0:e0:75:88:95:b4:00:00:
17:4d:66:e0:36:8a:95:c5:f3:8d:6e:61:bf:b9:14:
12:b4:ed:07:a7:ee:bd:3f:b3:6f:c2:70:a5:3a:57:
15:59:b3:84:17:27:68:bc:e6:cf:98:9c:0a:22:24:
e0:2a:cd:32:ee:43:cc:ac:db:59:ff:45:24:bf:59:
6b:f5:70:94:11:c4:db:f8:88:35:45:c5:73:0f:7b:
30:0a:8d:72:93:06:79:ee:a4:3e:c8:05:5d:63:c8:
a6:a8:2e:45:98:f7:40:74:be:85:bc:bd:13:6f:ad:
13:ec:2b:d8:3e:b8:f4:e5:db:e2:e6:1d:93:35:0f:
b6:ae:ca:1f:d3:4f:cb:e5:d0:41:c4:d6:bd:dc:8c:
46:bd:7c:d5:82:d1:80:e1:bb:bd:32:a8:5d:ef:3e:
98:ad:2d:32:30:21:70:a4:bb:93:b5:12:bc:30:1a:
a7:72:8a:2d:c1:16:4c:b8:96:7c:7c:83:ac:11:cb:
9b:15:9f:b0:94:92:f9:9b:23:1e:cd:8f:12:97:43:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:B5:ED:15:7C:8E:6F:70:FE:7B:81:78:63:74:BE:14:92:FE:8B
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/VuS17RV8jm9w_nuBeGN0vhSS_os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.82.0/24
188.68.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b5:8a:48:77:26:c5:12:68:a8:eb:ad:e7:7f:48:ca:fc:2d:
04:1a:e9:d6:9a:0f:85:00:79:52:15:ce:58:7b:f3:1e:80:56:
b2:95:c2:0d:7c:93:eb:57:16:15:a5:94:8b:30:ca:25:0b:4e:
bc:f4:94:ef:0a:24:1c:14:8a:3f:44:4e:d8:69:1b:80:39:da:
2d:94:3e:ab:3b:f1:83:43:d3:33:11:d6:bf:a2:48:21:7d:76:
14:13:da:65:5b:05:4c:10:40:9a:e5:56:e0:53:92:be:4d:34:
a7:73:6e:26:f1:1c:cc:de:7d:e9:19:a9:3f:71:c7:56:b3:14:
92:5b:7c:75:c3:2e:b7:86:31:a5:4f:99:53:b5:6e:2e:54:a2:
6e:88:e4:ee:8e:1e:81:e8:18:d4:92:7e:6e:88:44:46:41:d4:
94:83:c7:22:94:6e:7d:a1:43:b6:84:fc:b8:3b:13:48:37:22:
24:57:d8:11:96:7a:58:92:21:61:f0:30:40:e8:03:7d:03:0b:
55:98:16:9a:d9:df:56:9f:72:f1:50:96:7c:2f:34:30:52:b8:
18:4d:77:a4:da:51:d5:c9:ce:4f:85:6e:0c:68:57:b8:02:4c:
76:c8:a2:ac:91:ba:15:8b:12:a1:f5:76:51:28:84:12:65:af:
d4:92:f5:df
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBlF5SDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MB4XDTIyMDQx
OTE0MDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZlNGI1ZWQxNTdj
OGU2ZjcwZmU3YjgxNzg2Mzc0YmUxNDkyZmU4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8A3SMv3SzUklqX71r3QuTCzr4gYJAd3VT/LHfC0YZhU6Ve
hTb7v5dzqwPLogvXF10FsMDgdYiVtAAAF01m4DaKlcXzjW5hv7kUErTtB6fuvT+z
b8JwpTpXFVmzhBcnaLzmz5icCiIk4CrNMu5DzKzbWf9FJL9Za/VwlBHE2/iINUXF
cw97MAqNcpMGee6kPsgFXWPIpqguRZj3QHS+hby9E2+tE+wr2D649OXb4uYdkzUP
tq7KH9NPy+XQQcTWvdyMRr181YLRgOG7vTKoXe8+mK0tMjAhcKS7k7USvDAap3KK
LcEWTLiWfHyDrBHLmxWfsJSS+ZsjHs2PEpdDq5ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRW5LXtFXyOb3D+e4F4Y3S+FJL+izAfBgNVHSMEGDAWgBSDOO9BssAQWpHM
u5yJM3+usSn/hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6anZRYkxBRUZxUnpMdWNpVE5fcnJFcF80US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8x
L1Z1UzE3UlY4am05d19udUJlR04wdmhTU19vcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZx
UnpMdWNpVE5fcnJFcF80US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF9VUgMEALxEBzANBgkqhkiG9w0B
AQsFAAOCAQEALrWKSHcmxRJoqOut539IyvwtBBrp1poPhQB5UhXOWHvzHoBWspXC
DXyT61cWFaWUizDKJQtOvPSU7wokHBSKP0RO2GkbgDnaLZQ+qzvxg0PTMxHWv6JI
IX12FBPaZVsFTBBAmuVW4FOSvk00p3NuJvEczN596RmpP3HHVrMUklt8dcMut4Yx
pU+ZU7VuLlSibojk7o4egegY1JJ+bohERkHUlIPHIpRufaFDtoT8uDsTSDciJFfY
EZZ6WJIhYfAwQOgDfQMLVZgWmtnfVp9y8VCWfC80MFK4GE13pNpR1cnOT4VuDGhX
uAJMdsiirJG6FYsSofV2USiEEmWv1JL13w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net