Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/Vvqdk_qTnVzMgK9Sdnbi8N6qoSc.roa
File: Vvqdk_qTnVzMgK9Sdnbi8N6qoSc.roa (raw, json)
Hash identifier: QQVuBkbDSwVXsCGuOMpcxOj1NAHlJmetAtiURDe50jg=
Subject key identifier: 56:FA:9D:93:FA:93:9D:5C:CC:80:AF:52:76:76:E2:F0:DE:AA:A1:27
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 01835BDFB3AA049783B9BCF3963BB8EA6FF6
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/Vvqdk_qTnVzMgK9Sdnbi8N6qoSc.roa
Signing time: Tue 20 Sep 2022 17:08:50 +0000
ROA not before: Tue 20 Sep 2022 17:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213049
IP address blocks: 195.182.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:df:b3:aa:04:97:83:b9:bc:f3:96:3b:b8:ea:6f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Sep 20 17:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56fa9d93fa939d5ccc80af527676e2f0deaaa127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:df:dd:a1:03:0a:df:d2:0f:9b:14:e3:4d:
9d:7d:92:d0:57:f1:ef:b2:db:c4:d8:40:08:37:6b:
b4:cb:eb:55:1f:48:75:51:a4:81:b2:59:7c:64:4d:
ff:76:64:ac:64:15:e4:89:72:cb:2e:10:cd:4c:b2:
6c:dd:de:b0:b8:4b:ae:d3:93:b8:b5:df:f6:9d:e3:
e6:72:9c:78:26:17:e1:f6:c6:ad:f5:19:4e:af:35:
e7:5a:72:3b:4c:7d:b8:f6:44:1a:4f:4a:df:93:9c:
ca:ba:23:a2:8e:f9:ad:1a:67:2a:14:39:1c:df:73:
71:44:2e:48:cf:68:81:65:9d:91:79:00:2c:79:3c:
80:d0:02:cb:e0:3a:2c:08:d8:ec:2f:db:e5:d3:b6:
4a:04:98:53:d4:e7:09:54:64:55:24:50:42:08:47:
a3:53:cd:f8:c6:1f:78:96:16:06:83:b8:cd:5b:2e:
11:bc:c1:cf:6b:49:f6:b8:e6:c9:a4:f6:c3:2a:5c:
9b:cc:a6:74:06:06:a4:0f:44:16:05:34:a3:48:26:
9d:8d:e4:b2:a4:00:72:de:8f:1e:d7:15:43:49:5e:
fb:bd:c4:40:bc:3a:cd:f7:56:6d:10:2a:ee:ff:ab:
83:92:b3:87:65:ab:99:14:d5:20:c0:5c:eb:c0:e2:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:9D:93:FA:93:9D:5C:CC:80:AF:52:76:76:E2:F0:DE:AA:A1:27
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/Vvqdk_qTnVzMgK9Sdnbi8N6qoSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:8f:22:b2:07:1c:ea:ef:0f:eb:70:3b:31:df:85:5b:cf:a3:
7c:6a:d4:e6:86:f5:b0:b9:ba:12:15:80:b5:bf:87:cc:9b:4b:
8f:02:42:eb:4f:23:40:85:87:0c:36:e7:db:5e:6d:96:24:87:
72:7b:21:c6:5e:d5:f5:fe:e8:46:2e:bb:68:f2:41:39:d0:11:
4d:97:47:b5:78:78:1a:19:e7:41:b3:03:84:ed:88:42:ef:5f:
a1:25:b6:68:9e:18:f4:d3:1c:a7:ee:bf:70:55:6c:8e:2a:ab:
eb:0a:60:7e:d1:b3:66:0c:28:11:66:aa:81:57:1f:b7:ad:1d:
31:22:7d:0d:a4:06:82:4a:fa:93:06:39:a3:95:e1:40:1d:69:
4f:b3:e3:c2:6c:2a:b1:4f:a0:f4:f1:04:9b:c1:4d:46:88:5a:
65:54:8e:e9:b1:42:67:a2:7d:4f:ae:79:41:fa:83:2c:bc:67:
7f:4e:00:dc:a5:44:54:63:91:af:fb:7e:3a:21:86:24:f9:87:
17:df:ac:3a:ca:fe:9a:4d:fa:de:7c:68:ab:91:32:ce:36:7f:
0b:34:3d:07:a2:e6:8f:d1:44:6f:2b:a0:75:47:93:3b:a1:a0:
43:2d:01:f7:ee:aa:1b:b9:79:30:cd:49:a2:51:99:36:ce:c7:
12:28:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net