Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/0U76YNiS7HeXmeQr0uBqndHpYao.roa
File: 0U76YNiS7HeXmeQr0uBqndHpYao.roa (raw, json)
Hash identifier: FArb5wkeulOdLncuotm3Cz8KvtQ1s3XTP4DIFYspMvY=
Subject key identifier: D1:4E:FA:60:D8:92:EC:77:97:99:E4:2B:D2:E0:6A:9D:D1:E9:61:AA
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 107EAEC8
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/0U76YNiS7HeXmeQr0uBqndHpYao.roa
Signing time: Sun 10 Apr 2022 07:19:19 +0000
ROA not before: Sun 10 Apr 2022 07:19:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35196
IP address blocks: 194.226.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276737736 (0x107eaec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Apr 10 07:19:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d14efa60d892ec779799e42bd2e06a9dd1e961aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:8f:26:1f:19:59:41:ce:6c:9d:e7:49:f1:
54:8d:07:e5:b5:c5:f8:72:15:a9:17:14:e6:f7:7a:
34:a5:36:69:f2:d3:4d:4f:8b:c0:4c:b2:d5:b7:c4:
83:95:5f:aa:c2:92:68:16:e1:aa:76:ad:43:6e:64:
34:7f:bc:1f:dd:8b:1f:b4:bc:cb:07:b1:3a:c7:57:
42:26:ee:1f:16:11:08:95:52:33:7a:11:7a:93:e6:
23:f8:8a:fe:ab:b0:ba:30:14:a6:56:f3:24:d4:cb:
0e:7c:e1:85:0e:fd:bb:d3:55:b1:9d:ff:dc:a2:3e:
29:80:c5:61:da:42:00:01:16:57:00:81:20:d2:72:
11:fd:e5:0d:b7:96:cd:8e:6f:2c:f0:9a:55:55:1f:
ed:ca:6e:de:dc:e2:09:59:c5:f8:8b:7a:6c:2b:0f:
2e:ed:ae:b3:b5:30:e3:1f:a8:a2:23:b9:83:e2:b2:
42:6f:b8:4b:85:48:da:7f:79:77:24:30:8b:63:72:
1d:03:14:67:80:12:7d:5a:b0:ec:9c:1b:60:dc:ff:
9b:54:0f:fe:d5:6f:f3:63:6e:23:56:81:88:b5:f4:
ca:d1:7e:93:0a:74:32:7e:bc:34:b9:03:66:45:4d:
2b:1a:ed:f6:67:fc:f3:79:f9:31:c3:96:38:75:90:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:FA:60:D8:92:EC:77:97:99:E4:2B:D2:E0:6A:9D:D1:E9:61:AA
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/0U76YNiS7HeXmeQr0uBqndHpYao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a0:1b:7c:ac:c8:7f:65:16:32:2a:2e:59:23:62:2e:24:80:
fa:3a:e3:9f:5b:0f:81:87:df:9a:50:64:30:5a:e2:f8:29:1c:
0d:82:31:77:eb:ff:23:15:0c:ce:8c:b1:1a:0d:d0:6b:9a:32:
6d:cc:19:09:ec:d1:a1:a4:e1:6b:5f:8a:d9:cb:f6:7b:9e:32:
5a:0d:b8:f7:5a:4a:d5:8b:e8:7e:f9:ef:fe:d0:2b:c5:d3:50:
e9:66:03:93:ba:79:f8:64:63:77:b2:94:60:d1:9e:f5:77:59:
a9:5b:d6:85:a6:21:44:80:a0:65:c8:b4:d8:90:72:37:a8:af:
25:87:94:30:9d:a7:27:77:7a:b2:c9:f2:ac:e7:22:c4:6c:4a:
9e:91:27:28:6b:b8:b8:83:a7:dd:37:bc:0c:d4:2a:87:20:08:
40:00:70:eb:80:ce:6e:0e:83:32:26:96:46:bf:27:3e:83:16:
8c:c3:f4:b5:09:3c:1b:95:a5:62:de:23:f2:92:9f:96:a9:29:
26:4c:1e:d4:4e:74:8e:28:73:34:b0:d5:08:91:63:b7:c5:96:
ee:eb:32:c0:7f:2a:d5:6e:16:68:3d:5c:08:5f:a7:e0:cb:d5:
b9:73:87:bd:7a:b7:a6:54:ff:b7:b7:cf:78:c5:0b:63:ef:c1:
45:35:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org