Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/eCWHc0us2sHJtq3aMUcdzEvkyMs.roa
File: eCWHc0us2sHJtq3aMUcdzEvkyMs.roa (raw, json)
Hash identifier: Y1dEHfHqqhGLKKusNJXhkjHbfcBDqb6sSfLEmjiCRps=
Subject key identifier: 78:25:87:73:4B:AC:DA:C1:C9:B6:AD:DA:31:47:1D:CC:4B:E4:C8:CB
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 0151B7CD
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/eCWHc0us2sHJtq3aMUcdzEvkyMs.roa
Signing time: Sat 01 Jan 2022 11:04:20 +0000
ROA not before: Sat 01 Jan 2022 11:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210962
IP address blocks: 194.26.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22132685 (0x151b7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jan 1 11:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=782587734bacdac1c9b6adda31471dcc4be4c8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:6b:a9:83:40:53:3d:cb:c4:4d:d3:49:0e:
a7:92:43:76:be:c9:b9:be:51:4f:5f:e2:37:1e:d2:
04:90:9c:1f:06:66:9a:bf:58:69:87:02:9b:32:18:
c6:47:af:19:e7:97:2b:80:60:ea:ac:9d:4c:af:2a:
cc:a7:8f:64:91:66:12:ea:88:a0:27:a7:c5:31:2d:
f3:93:b0:37:b8:62:63:fd:1c:20:7b:02:ec:3b:0b:
70:a9:9d:49:de:96:d1:fa:ba:02:94:b7:4d:7c:36:
36:bd:8b:38:cd:84:06:fb:35:96:4b:e5:6d:40:53:
53:23:ec:de:12:86:eb:6a:43:e1:2d:c5:90:00:68:
60:8d:47:0f:2e:a6:fb:b1:f6:05:62:f8:1a:f3:f7:
24:ff:c0:52:76:45:66:14:c0:50:ff:f4:0f:dd:b5:
d6:5d:16:2f:88:45:15:c2:72:9b:23:b0:cc:1b:e7:
25:fd:92:54:7e:23:17:65:d9:34:3d:01:3d:ef:7b:
f0:02:04:e1:9b:d9:a5:a1:9c:64:80:10:ad:79:9b:
ef:3e:63:b5:c8:38:20:9a:8f:e9:22:29:14:65:e8:
91:4e:2c:77:b1:c5:4e:10:50:f2:cb:73:0d:78:30:
b4:45:e5:2b:ff:42:3b:3a:90:e6:c0:81:c5:a9:e8:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:87:73:4B:AC:DA:C1:C9:B6:AD:DA:31:47:1D:CC:4B:E4:C8:CB
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/eCWHc0us2sHJtq3aMUcdzEvkyMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9c:fa:12:a2:69:2c:6b:ab:59:b9:54:eb:d5:62:d5:56:83:
ba:89:22:6c:cb:56:be:67:d3:f3:f4:04:51:2b:eb:d4:44:76:
69:a4:2c:61:10:0d:fb:97:3a:9f:9c:ee:f9:af:53:ad:28:ee:
17:cb:35:3b:51:d3:0c:33:3d:1d:44:ab:07:9d:87:cd:f6:93:
2c:9c:25:5d:af:ab:a6:43:47:c2:ca:1d:65:4a:09:b9:f6:d6:
77:8e:6b:cb:1e:e7:22:12:fe:97:59:32:0b:8a:76:b2:a4:4d:
11:4e:ac:17:af:ec:d0:6f:ff:c9:f6:f6:af:af:7b:61:21:60:
b8:44:45:0c:09:05:ac:b7:8d:4b:ae:78:57:a3:74:4b:88:7d:
5b:ca:6d:71:c9:32:4c:1b:90:b0:a0:fd:a0:88:5d:d6:4d:29:
1c:05:0b:70:50:2b:bc:db:fc:1d:a2:ab:4a:62:f1:58:ea:af:
ac:a2:ec:a8:28:19:53:fd:19:33:28:67:1c:96:9d:dc:bd:0a:
09:7c:6a:a7:7c:83:f6:16:c8:72:59:44:57:22:b5:34:e1:ca:
a9:25:f9:d9:25:bd:f1:46:a2:5b:33:66:c3:00:5f:f8:38:a0:
fb:0e:ae:ca:87:ab:a2:0e:3f:4d:06:2e:d7:d6:51:2a:8b:6c:
0c:ff:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:03 2024 by rpki-client on console-fra.rpki-client.org