Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa
File: lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa (raw, json)
Hash identifier: VXOYEPNYqnI+hbQs1E08iTNMBMQcfyNhguKTRFP4vI0=
Subject key identifier: 95:56:0F:96:68:B7:38:D1:19:73:D6:76:C1:5C:F7:40:E0:0D:41:86
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 1560E27A
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa
Signing time: Sat 01 Jan 2022 08:04:51 +0000
ROA not before: Sat 01 Jan 2022 08:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46562
IP address blocks: 185.92.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358670970 (0x1560e27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 08:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95560f9668b738d11973d676c15cf740e00d4186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:61:0f:54:9f:88:e4:37:3d:ab:0b:48:3a:
96:aa:18:b8:a0:93:88:16:e8:7f:04:e8:52:f2:12:
da:d3:89:51:74:08:7d:20:2f:b5:38:6f:4b:8e:08:
77:03:2b:95:2d:8a:81:cd:3e:68:c7:9a:bb:05:a6:
8b:9b:79:16:0d:05:74:e0:62:8d:01:dd:3a:af:65:
be:3f:79:9f:9c:08:79:88:16:b0:11:20:f4:ce:75:
a8:ff:ce:c4:ae:42:09:d8:83:ff:6f:47:0e:8d:7b:
6a:3b:74:39:d9:f0:02:88:d0:57:79:f8:ec:b0:4a:
5f:19:d9:58:15:b4:f9:33:39:94:4a:44:df:06:02:
1b:5d:98:0b:4e:02:c4:fe:5f:6c:0e:89:39:59:6f:
32:f6:26:60:b8:58:37:d1:5b:58:9c:c3:ec:31:ac:
c1:52:7f:ab:2a:5a:3a:41:29:f3:2d:3e:ae:d6:9e:
14:42:5f:db:b5:fe:c9:da:4f:ef:02:ef:34:bb:83:
d5:a3:e8:eb:4d:8d:69:a4:3c:e8:58:23:49:28:06:
83:73:cf:e2:8c:ff:79:cc:ad:69:4a:44:b2:42:0f:
e6:b1:f4:84:94:c5:92:b0:e9:cf:83:18:d8:ac:c8:
6a:e9:01:9b:5c:ae:f8:ab:7c:3b:99:c7:15:b5:24:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:0F:96:68:B7:38:D1:19:73:D6:76:C1:5C:F7:40:E0:0D:41:86
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lVYPlmi3ONEZc9Z2wVz3QOANQYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:81:84:93:df:66:bf:c0:38:da:d3:8b:df:be:1b:df:68:dd:
20:c1:57:9a:4c:5f:33:b5:77:07:4b:78:2d:d9:37:03:f0:1f:
14:9f:d1:10:e2:1c:b9:85:f7:55:20:ce:d1:4e:90:e6:ba:68:
0d:84:68:a6:07:e2:fc:eb:1d:97:a9:9d:92:22:8d:a2:53:6c:
ba:5e:1c:c2:a0:f5:2e:19:c3:9f:2a:17:64:7b:9d:b6:60:c7:
a5:6a:cb:4f:15:d6:7d:e9:aa:11:2d:05:60:c1:35:ec:b4:54:
ea:b0:37:cc:12:be:c1:c6:90:16:ea:19:ba:85:d4:e6:5a:9e:
f0:8e:48:fa:d0:2a:9d:f3:36:fc:ad:23:49:e3:2f:c7:a8:a8:
44:5a:c2:a4:59:fb:b9:c7:82:77:e7:99:23:9f:a2:3a:ad:11:
24:b1:60:7d:a1:5f:8b:e7:3d:74:48:34:98:f1:93:bf:d5:1c:
c5:42:69:1d:f5:54:cd:08:02:1e:3d:ac:2d:1b:04:f8:ff:07:
e3:df:c2:35:78:19:78:bc:30:2f:61:61:fa:c9:bb:dc:fc:80:
7e:52:08:31:74:f6:6d:14:e8:7a:29:e6:e5:5f:f3:c0:c7:b9:
d0:de:fb:49:3a:e4:a0:d0:91:94:26:93:80:82:11:5d:28:35:
e5:ec:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org