Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/yDSmv2oGEeEpNW4R--HImLopxvI.roa
File: yDSmv2oGEeEpNW4R--HImLopxvI.roa (raw, json)
Hash identifier: ORIO2dWmJxHcDRphM2xpKuWQDY/vOES0IxRgvV86gZw=
Subject key identifier: C8:34:A6:BF:6A:06:11:E1:29:35:6E:11:FB:E1:C8:98:BA:29:C6:F2
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 026E30FF
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/yDSmv2oGEeEpNW4R--HImLopxvI.roa
Signing time: Mon 27 Jun 2022 15:43:31 +0000
ROA not before: Mon 27 Jun 2022 15:43:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202311
IP address blocks: 195.26.68.0/22 maxlen: 24
2a07:f680::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40775935 (0x26e30ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Jun 27 15:43:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c834a6bf6a0611e129356e11fbe1c898ba29c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:81:e6:6d:b0:96:23:5b:90:68:96:83:34:
8c:8f:6a:02:4e:a3:7b:e8:d5:fd:a1:28:21:32:01:
b5:c7:22:06:8d:c9:e2:91:62:8d:0c:7b:52:ac:7b:
86:0d:8f:ab:20:9d:5a:88:d6:ff:1a:c8:1d:43:1b:
f4:6a:83:2b:ea:e9:06:a4:51:73:28:82:1c:d1:e3:
44:5d:25:ff:e6:79:f7:d6:0e:c5:3f:d0:23:3e:5c:
1f:5b:e0:2e:c7:b8:6a:dc:0f:93:34:77:67:39:75:
58:15:66:74:9a:67:f3:5f:84:e6:af:04:53:3d:ae:
2a:a7:af:9a:62:ca:9b:25:94:02:43:6d:75:40:8e:
6f:91:71:5f:7d:b7:93:e6:f7:86:a8:1c:6b:9a:3d:
f9:1f:66:be:7d:36:8e:84:9c:af:b7:c4:74:41:e4:
21:0e:1a:06:1a:dc:b9:96:28:ed:95:f6:e3:cd:d9:
11:f2:23:96:88:5c:b0:23:29:8d:64:e3:3d:3b:fb:
6a:2e:92:4f:0f:4f:9c:fc:45:5c:84:74:a3:8d:64:
b2:c7:cb:29:50:bf:29:1c:77:a6:7c:f9:7e:e9:b0:
6e:41:70:bd:ac:19:85:db:a9:1e:fe:ae:7c:80:01:
27:b3:4a:69:e9:e8:81:c3:81:33:a4:0e:44:1c:06:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:A6:BF:6A:06:11:E1:29:35:6E:11:FB:E1:C8:98:BA:29:C6:F2
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/yDSmv2oGEeEpNW4R--HImLopxvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.68.0/22
IPv6:
2a07:f680::/29
Signature Algorithm: sha256WithRSAEncryption
02:d6:73:e4:d5:8e:bd:d6:60:f2:06:8b:27:df:d5:6d:6f:a8:
fc:ff:bb:d4:8f:85:6a:76:b0:e6:ad:ee:82:18:9b:32:35:93:
1b:57:95:e5:d1:11:e2:f0:31:c0:ab:2e:fa:ef:41:bf:0c:42:
77:e5:eb:35:2b:dd:c3:af:60:1a:84:d2:f1:04:7f:f2:a9:2d:
0f:c5:e1:98:48:a1:0a:a7:55:bc:ff:63:93:2e:4d:08:91:0f:
08:0a:49:6e:9a:30:cc:ca:17:9a:32:00:d6:60:03:7f:f8:1d:
0e:24:6a:e2:32:05:5d:9f:9b:93:3e:46:aa:73:28:cd:7a:10:
a2:59:43:86:61:67:e5:a2:05:05:52:d1:bb:44:a1:62:75:9d:
62:86:88:78:de:00:55:77:ea:83:13:e8:98:b5:04:03:9c:14:
fc:49:ee:f0:af:14:56:32:b7:24:97:2a:f7:50:1c:c8:8b:d1:
a0:1a:26:db:a3:3a:ee:80:02:10:a4:a1:88:c5:3d:eb:fb:86:
42:2a:5e:bf:5d:b5:bc:86:3a:45:09:fc:b6:8a:5b:98:a3:e8:
f6:1a:95:87:25:54:4c:25:3e:68:43:07:88:7d:bd:f3:61:52:
e5:21:e6:a5:2c:7d:57:07:a1:ae:6d:68:4c:fe:a2:41:6d:12:
1e:2a:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:41 2024 by rpki-client on console-fra.rpki-client.org