Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/xXd4_Yk4wC9BWEu0TffISH4D4BI.roa
File: xXd4_Yk4wC9BWEu0TffISH4D4BI.roa (raw, json)
Hash identifier: CL5zkUCVdVVVBOyAsMxtyCnkT948rL3oSFF9obRzCq4=
Subject key identifier: C5:77:78:FD:89:38:C0:2F:41:58:4B:B4:4D:F7:C8:48:7E:03:E0:12
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 026B92BD
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/xXd4_Yk4wC9BWEu0TffISH4D4BI.roa
Signing time: Sat 01 Jan 2022 10:57:07 +0000
ROA not before: Sat 01 Jan 2022 10:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48748
IP address blocks: 195.88.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40604349 (0x26b92bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Jan 1 10:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c57778fd8938c02f41584bb44df7c8487e03e012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:d2:3a:ff:61:15:db:f7:d6:cf:be:70:be:
c9:d1:ab:3c:87:40:99:ed:ea:fd:3c:c5:db:11:0a:
8d:6e:e8:58:94:b2:15:6a:58:ee:68:72:4b:17:65:
88:19:8a:3e:8a:dd:e4:de:93:16:c2:ea:2b:44:6d:
83:71:68:b5:36:9c:54:b2:52:fd:13:3d:1f:cd:23:
29:dc:36:1f:97:86:84:0c:64:f0:c6:6a:1d:c9:f1:
2c:76:cf:ca:25:7a:ed:88:2c:c3:7b:84:df:3b:de:
48:5a:c3:7f:29:24:b7:a2:ac:0c:18:6a:f5:83:de:
76:ed:9e:a2:49:54:6f:ea:51:67:6b:20:2e:2f:4d:
b9:a3:a2:5f:8c:8f:77:60:7c:aa:71:bb:37:15:a2:
50:75:a1:3e:2c:4b:16:2a:7c:59:b7:c1:29:a1:51:
3c:97:bd:89:fd:1b:d4:0d:11:f0:fb:06:4f:94:56:
b4:dc:84:24:6c:9b:a9:9b:95:1c:5b:30:be:bb:42:
1b:7f:87:a8:25:e9:56:a3:2f:cb:33:b9:60:f4:10:
a8:1d:c4:58:9b:9b:97:61:77:1b:c9:c7:3c:48:6a:
56:d2:ab:7c:0f:c4:98:f1:88:81:e2:bb:44:e4:5c:
a4:18:e1:c1:bb:f2:29:cb:3d:c1:f0:1a:69:ea:4e:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:78:FD:89:38:C0:2F:41:58:4B:B4:4D:F7:C8:48:7E:03:E0:12
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/xXd4_Yk4wC9BWEu0TffISH4D4BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.26.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:34:8b:f9:00:29:31:d0:82:06:95:0e:34:be:6c:ce:20:a7:
14:8f:dc:9d:da:0c:64:26:fd:ca:fe:1e:8e:84:1d:f9:25:57:
9d:f4:bf:d3:d5:c8:02:e5:9b:0b:be:b6:f5:30:4a:2f:4b:ca:
08:e4:27:35:f2:94:ef:70:24:a4:1d:5a:fb:6a:de:a4:7f:80:
4f:3c:3d:52:20:fe:56:53:48:ba:23:90:d8:d7:1b:00:9f:bb:
2a:74:2b:d8:2c:bf:e2:e0:e2:b8:ae:56:2a:17:b1:1e:00:95:
ac:e5:6d:14:f2:a5:9f:7f:f7:df:80:ee:bd:a8:c1:1c:11:34:
9f:9f:8e:d9:26:aa:58:b7:72:70:3f:1e:5d:d8:ea:17:e7:46:
cc:fa:65:2a:cd:c8:d6:84:e4:be:1a:05:40:ac:c3:54:d6:a5:
07:eb:87:ff:9c:30:d5:bb:1c:2a:38:cd:e3:db:9f:c2:4b:34:
94:a6:6c:ed:77:cb:b1:49:c8:0d:2d:08:5f:00:62:0b:80:0f:
6a:81:ac:3b:f7:e0:12:2c:c8:68:39:a5:3e:96:5f:e6:b4:cf:
b1:86:2e:ce:be:73:a1:2b:92:de:c1:61:fa:9e:1a:d9:60:80:
e1:60:4a:80:ec:10:eb:43:e3:a2:60:d9:72:1c:b7:62:c7:7e:
1b:a8:d9:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAmuSvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZmJkZGM2MzEzZWZjNGI2NzJhN2UyYjMyYWUzYzQ0ODRmZTVmNjMwMB4XDTIyMDEw
MTEwNTcwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzU3Nzc4ZmQ4OTM4
YzAyZjQxNTg0YmI0NGRmN2M4NDg3ZTAzZTAxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBV0jr/YRXb99bPvnC+ydGrPIdAme3q/TzF2xEKjW7oWJSy
FWpY7mhySxdliBmKPord5N6TFsLqK0Rtg3FotTacVLJS/RM9H80jKdw2H5eGhAxk
8MZqHcnxLHbPyiV67Ygsw3uE3zveSFrDfykkt6KsDBhq9YPedu2eoklUb+pRZ2sg
Li9NuaOiX4yPd2B8qnG7NxWiUHWhPixLFip8WbfBKaFRPJe9if0b1A0R8PsGT5RW
tNyEJGybqZuVHFswvrtCG3+HqCXpVqMvyzO5YPQQqB3EWJubl2F3G8nHPEhqVtKr
fA/EmPGIgeK7RORcpBjhwbvyKcs9wfAaaepOmhkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTFd3j9iTjAL0FYS7RN98hIfgPgEjAfBgNVHSMEGDAWgBSfvdxjE+/EtnKn
4rMq48RIT+X2MDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L243M2NZeFB2eExaeXAtS3pLdVBFU0VfbDlqQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvM2UwNjlhLTM0MjEtNDBhYi05ZTBjLTQ1Y2MyZGQ2ZTQ5MS8x
L3hYZDRfWWs0d0M5QldFdTBUZmZJU0g0RDRCSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
M2UwNjlhLTM0MjEtNDBhYi05ZTBjLTQ1Y2MyZGQ2ZTQ5MS8xL243M2NZeFB2eExa
eXAtS3pLdVBFU0VfbDlqQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcNYGjANBgkqhkiG9w0BAQsFAAOC
AQEAizSL+QApMdCCBpUONL5sziCnFI/cndoMZCb9yv4ejoQd+SVXnfS/09XIAuWb
C7629TBKL0vKCOQnNfKU73AkpB1a+2repH+ATzw9UiD+VlNIuiOQ2NcbAJ+7KnQr
2Cy/4uDiuK5WKhexHgCVrOVtFPKln3/334DuvajBHBE0n5+O2SaqWLdycD8eXdjq
F+dGzPplKs3I1oTkvhoFQKzDVNalB+uH/5ww1bscKjjN49ufwks0lKZs7XfLsUnI
DS0IXwBiC4APaoGsO/fgEizIaDmlPpZf5rTPsYYuzr5zoSuS3sFh+p4a2WCA4WBK
gOwQ60PjomDZchy3Ysd+G6jZmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:57 2024 by rpki-client on console-fra.rpki-client.org