Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/F81AAW9N7z0i27BXDJkQWdS_tCs.roa
File: F81AAW9N7z0i27BXDJkQWdS_tCs.roa (raw, json)
Hash identifier: fqgDsRgJVQxl80ZsyNqB3ipVf96ufkCW7wiXzeme9WQ=
Subject key identifier: 17:CD:40:01:6F:4D:EF:3D:22:DB:B0:57:0C:99:10:59:D4:BF:B4:2B
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 301695BB
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/F81AAW9N7z0i27BXDJkQWdS_tCs.roa
Signing time: Sat 01 Jan 2022 15:03:06 +0000
ROA not before: Sat 01 Jan 2022 15:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24634
IP address blocks: 194.26.4.0/22 maxlen: 24
80.89.176.0/20 maxlen: 24
2a06:b940::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806786491 (0x301695bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Jan 1 15:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17cd40016f4def3d22dbb0570c991059d4bfb42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:33:89:21:e2:31:cf:f8:b6:6b:99:63:1c:
70:20:6e:c4:86:5a:92:24:74:bf:f2:4b:e1:fa:a3:
0c:35:ef:3a:48:73:f5:cd:97:b4:7b:d6:57:70:9a:
d8:92:2a:8f:1c:2c:b1:a1:b5:c3:b4:d8:89:b5:55:
87:36:32:6a:40:2c:c4:49:26:d0:36:3c:02:7a:d8:
d4:ca:48:06:d8:c9:2e:b1:16:0b:ba:04:72:3f:e1:
14:e1:fb:e8:b0:af:be:e9:27:aa:7b:0f:d4:c6:db:
0d:7e:51:02:da:e9:4b:09:58:46:55:18:3e:51:ec:
36:17:ef:10:95:7d:c0:f2:79:98:db:a2:e4:24:6a:
11:6b:10:30:69:eb:6d:9f:97:68:7b:f8:55:10:03:
fc:50:53:cd:33:31:65:75:d5:08:2d:59:37:06:99:
93:ac:78:33:0a:1d:b9:3d:82:fd:df:d1:13:55:2a:
0a:97:84:e4:47:d2:4b:84:44:b3:78:c6:f8:17:ed:
ee:b7:76:cd:ac:e8:86:c8:04:54:04:16:46:8e:6d:
57:21:b1:ee:78:47:d7:da:d2:34:87:53:c8:f0:30:
c2:94:5d:73:58:88:f4:ab:5b:8b:80:a6:dc:c8:c0:
86:14:ea:bd:5f:f8:0e:7e:76:d6:ed:8e:39:7d:d6:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:40:01:6F:4D:EF:3D:22:DB:B0:57:0C:99:10:59:D4:BF:B4:2B
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/F81AAW9N7z0i27BXDJkQWdS_tCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/20
194.26.4.0/22
IPv6:
2a06:b940::/29
Signature Algorithm: sha256WithRSAEncryption
98:22:a3:92:e7:10:a9:3d:58:c6:87:a8:58:a5:2a:11:2f:dc:
af:ab:3f:ba:6a:7a:e3:29:5f:0e:7f:0b:a8:61:73:9e:55:6c:
91:0c:87:de:8e:43:15:b2:3b:6c:b0:ef:e9:6d:1d:2d:5d:0d:
d6:b8:a3:bc:80:c6:92:da:95:bc:56:00:be:5f:e9:d0:96:9e:
09:bf:23:75:a4:90:68:77:7f:c7:d2:0d:36:35:5a:3a:3c:84:
ba:2f:dd:42:9e:0b:1d:04:a1:61:8e:12:2b:13:6e:78:d8:0c:
49:15:91:c3:0a:4f:c9:be:f7:f3:08:5e:a2:1b:d7:6f:47:ca:
d0:d7:e8:4d:e2:33:e7:e2:49:71:e3:f7:11:a2:f1:2a:5d:19:
71:6d:fa:30:59:53:c2:e0:54:7d:8b:33:a0:00:e9:43:4d:f1:
cd:c3:04:d2:68:de:51:25:02:8e:9a:21:ff:59:b4:26:aa:f4:
68:5d:47:63:f5:8b:e7:42:f0:ab:4c:bb:2c:74:72:72:38:7e:
81:ee:e0:18:05:0f:ff:b5:44:5a:83:e4:ca:55:c5:3d:62:c6:
f8:51:71:9f:2b:21:10:e0:bd:c8:8f:cf:66:01:ad:72:63:1e:
d1:75:cd:84:50:21:7f:43:6b:e3:e5:11:d4:9b:e6:61:16:c5:
5f:95:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:03 2023 by rpki-client on console-ams.rpki-client.org