Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/fP0wwqAhMPQlANIAqYmM8luUENE.roa
File: fP0wwqAhMPQlANIAqYmM8luUENE.roa (raw, json)
Hash identifier: MaQAVpNIIjGaj9siQGw7KCC61TGEud+2lyublIE1jjM=
Subject key identifier: 7C:FD:30:C2:A0:21:30:F4:25:00:D2:00:A9:89:8C:F2:5B:94:10:D1
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 1CCB03
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/fP0wwqAhMPQlANIAqYmM8luUENE.roa
Signing time: Sat 01 Jan 2022 01:57:25 +0000
ROA not before: Sat 01 Jan 2022 01:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 185.26.188.0/22 maxlen: 22
185.26.188.0/24 maxlen: 24
185.26.189.0/24 maxlen: 24
185.26.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886979 (0x1ccb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jan 1 01:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cfd30c2a02130f42500d200a9898cf25b9410d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:8b:90:3d:68:f0:b6:78:62:bd:f5:29:86:
87:f8:21:61:63:13:0b:45:b7:4d:1c:c9:c0:69:98:
71:69:98:bf:ae:74:f6:d6:8f:07:97:e9:06:9c:48:
1c:54:44:25:22:9f:20:64:ce:6e:e3:d2:21:e2:9a:
45:46:24:cf:94:43:a6:17:62:77:a5:b9:cd:88:f0:
39:a3:7c:a4:7c:1a:67:3e:0e:77:93:d0:f9:1c:5b:
c9:45:41:c9:c4:15:bd:05:d3:38:92:b0:f6:7a:72:
68:59:97:ca:09:5f:96:b5:20:db:87:e6:b8:8e:60:
aa:93:19:9a:02:a3:19:19:41:f9:80:59:0e:e2:2f:
77:69:07:68:47:95:d1:ba:41:da:af:f1:d0:61:6c:
7a:96:c1:10:21:8a:23:f7:3d:e1:81:86:23:ac:c8:
f9:a4:76:d2:f9:f0:1e:a4:44:d6:42:c4:33:f0:a2:
1c:0a:26:3f:c6:20:85:cb:ea:f9:02:92:d1:00:ba:
d8:6e:2a:67:71:02:65:15:6e:00:a8:e5:d1:9f:51:
72:db:ec:b2:03:fc:06:04:ee:64:c4:2e:be:24:7d:
47:23:44:36:89:22:6b:97:2b:bf:7e:f1:ff:15:08:
7b:83:76:86:84:e2:f9:59:ce:0f:9c:40:f8:73:71:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:30:C2:A0:21:30:F4:25:00:D2:00:A9:89:8C:F2:5B:94:10:D1
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/fP0wwqAhMPQlANIAqYmM8luUENE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
28:e8:48:e9:8a:e2:30:74:f7:f1:ba:ba:39:37:3f:1d:8e:32:
4b:19:5f:3f:e8:f8:c5:44:6e:cf:31:c4:ef:03:2c:d1:66:51:
a9:77:1a:ff:20:f0:ae:df:f0:d1:e3:73:0b:d9:65:eb:ef:0d:
b1:94:ad:c5:b9:5d:1f:2b:50:1c:70:21:49:91:e2:c9:73:61:
bd:b7:1a:81:a1:f8:1f:c0:7f:2b:b0:4b:47:79:53:7f:49:dd:
66:9b:35:43:d1:7a:78:d9:e5:1a:18:39:06:92:8b:ad:fc:35:
81:9c:7f:b0:03:66:f5:51:81:79:99:91:22:03:89:bd:78:e4:
3d:8e:02:eb:60:63:50:84:5a:2c:07:2e:13:23:4b:f5:54:72:
aa:5c:eb:98:fa:37:00:80:e8:cf:9d:23:27:a3:72:03:31:ff:
25:5b:b6:a7:4b:0b:0d:df:33:c8:09:f3:38:36:49:a2:0e:77:
9d:4e:56:b8:d0:3c:a1:43:a5:f4:18:22:b3:1a:60:cc:f6:ff:
59:d6:98:51:4e:84:07:1a:85:2d:fb:01:e0:c7:b2:30:f1:e1:
6d:6c:07:f5:53:d0:c6:9a:f1:76:e1:43:eb:69:5d:5a:64:cd:
7b:6a:3b:4a:d9:45:fa:78:4b:c4:d0:f4:3b:b6:29:a3:ba:8e:
06:83:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org