Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/u1VWmRv0lqQHv0Y01ZHDNBB2_w8.roa
File: u1VWmRv0lqQHv0Y01ZHDNBB2_w8.roa (raw, json)
Hash identifier: fp/ayZZDsQ7QCvBTKSBicX8oOOQ24vav3DO/1FSyN9g=
Subject key identifier: BB:55:56:99:1B:F4:96:A4:07:BF:46:34:D5:91:C3:34:10:76:FF:0F
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 06E8DC0B
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/u1VWmRv0lqQHv0Y01ZHDNBB2_w8.roa
Signing time: Sat 01 Jan 2022 14:55:01 +0000
ROA not before: Sat 01 Jan 2022 14:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 194.156.190.0/23 maxlen: 24
194.156.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115923979 (0x6e8dc0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jan 1 14:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb5556991bf496a407bf4634d591c3341076ff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:60:2e:6f:9e:b9:e1:c8:93:6c:fd:06:48:
db:82:dd:6a:73:1a:e1:b5:8c:37:1f:01:20:e6:ed:
d7:fa:98:94:29:db:30:99:8e:46:ab:2a:cc:32:e5:
df:93:fd:91:69:ca:0a:c1:35:ef:bd:f0:bf:cb:55:
d2:36:79:8a:30:47:2f:6a:05:58:70:aa:e7:20:75:
01:08:bd:2d:23:18:a3:86:ea:cb:4e:78:6b:08:fe:
9a:62:c2:2d:a7:f2:2b:b1:ab:6d:57:cd:73:89:71:
40:e2:11:18:f8:de:90:35:cf:78:4f:16:c8:e0:94:
1e:bf:3e:d8:14:c7:d7:77:08:5e:44:c4:1a:9c:d6:
ba:f7:d1:be:59:38:79:1e:f1:64:de:c9:9a:a1:b8:
d0:dc:a0:3d:25:a6:9e:6d:ea:99:2f:3e:74:e4:8c:
ea:89:0e:74:81:f0:c0:75:be:2c:d2:5d:ea:c6:e9:
f7:53:15:3b:bb:36:3e:63:b9:dc:9d:fb:7a:0d:5c:
b9:f1:29:39:f1:97:da:e1:d5:18:63:82:b5:4a:8a:
42:3a:83:cf:6d:32:18:8f:36:81:dd:78:22:dc:57:
ce:be:f2:5c:31:79:6c:a2:fb:50:b1:f8:a2:ae:2a:
fc:e6:72:37:87:22:2f:42:2b:cc:2d:2e:63:ef:21:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:56:99:1B:F4:96:A4:07:BF:46:34:D5:91:C3:34:10:76:FF:0F
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/u1VWmRv0lqQHv0Y01ZHDNBB2_w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.190.0/23
194.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
86:90:99:2d:03:50:e0:be:ab:d1:08:07:08:14:2a:00:3e:70:
68:1c:27:5f:bb:95:e6:39:15:42:24:17:cd:10:98:f0:10:a3:
ee:8f:12:14:40:10:ae:d1:c8:83:3e:b9:64:34:d7:42:62:08:
97:55:06:1f:5b:a2:22:0f:ab:8f:ce:aa:ea:3d:c7:3f:03:5a:
87:15:da:f5:91:04:43:0b:f4:22:4e:33:81:2a:c0:93:3f:8c:
99:15:71:13:43:5c:b3:ad:d5:a8:bd:a8:26:0f:35:b0:8b:82:
cb:76:00:aa:90:9f:0a:60:cb:2c:f3:9d:73:1e:e1:b3:6e:1d:
18:c9:cd:89:4d:bc:61:74:88:ae:aa:4d:e4:bb:53:30:20:ca:
db:2f:09:ef:33:c9:82:c1:30:da:ad:c8:c0:b6:a6:0c:df:42:
e3:3d:e9:c7:59:b9:87:c2:f3:62:d9:cd:c6:01:2c:53:f3:be:
5a:34:26:a0:5c:90:96:78:78:24:3d:ec:5b:42:15:e3:a5:3f:
23:7b:85:f1:5e:2f:7f:1e:70:2c:0b:55:dc:08:1d:c1:49:c4:
d3:36:dc:df:38:d7:f4:27:1e:3a:3a:c7:26:c8:9c:75:ee:50:
a3:c3:d6:45:17:20:ea:67:43:c5:43:56:15:67:dc:fe:9e:f3:
38:2c:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org