Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/F9VhvFoR8mNPQU1TY29nWIdArUE.roa
File: F9VhvFoR8mNPQU1TY29nWIdArUE.roa (raw, json)
Hash identifier: 87glNS++XGd8X6EGJsK2/MLsJFqXgNpCLgXF76Ye9n8=
Subject key identifier: 17:D5:61:BC:5A:11:F2:63:4F:41:4D:53:63:6F:67:58:87:40:AD:41
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01840DD5AADF7C28DDB4B52DE2F06AB7A354
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/F9VhvFoR8mNPQU1TY29nWIdArUE.roa
Signing time: Tue 25 Oct 2022 06:30:17 +0000
ROA not before: Tue 25 Oct 2022 06:30:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21413
IP address blocks: 192.44.4.0/24 maxlen: 24
153.96.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:d5:aa:df:7c:28:dd:b4:b5:2d:e2:f0:6a:b7:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Oct 25 06:30:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d561bc5a11f2634f414d53636f67588740ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:e3:78:08:28:98:c8:62:49:69:df:37:1e:
38:6b:40:c7:2b:19:f3:91:37:ca:1c:9f:b6:78:ef:
14:2d:ab:8f:55:22:9e:b3:36:d3:ca:24:81:d9:25:
50:32:f1:41:37:10:24:e6:6d:84:0b:cc:65:08:18:
ef:72:d4:ee:9f:b0:38:fa:54:cb:53:31:6b:fc:95:
91:fc:3d:48:cd:5a:46:82:60:28:f2:4f:1b:ab:b8:
ed:2a:d1:3a:5e:94:ec:f1:04:d9:6c:ee:62:92:d2:
93:39:eb:78:7c:6e:46:1c:d1:45:40:7e:2a:6b:41:
88:0c:96:fa:94:7b:c7:50:d4:fd:e4:bb:38:bf:f7:
60:f4:c5:8f:86:4f:57:89:76:e6:60:61:ca:72:28:
65:2b:b0:fa:72:28:a8:36:34:28:22:3f:29:31:bd:
36:50:34:d8:3e:fc:fd:de:c0:ca:e7:9f:d7:d2:e8:
71:f2:7c:4f:06:89:4b:55:ad:97:48:78:cc:6d:69:
86:23:95:51:a2:10:22:b6:27:d0:bb:f1:46:02:4d:
54:6f:7f:37:d2:79:65:f8:cb:11:f8:fb:26:17:80:
fc:7e:2e:c6:fb:e6:60:ae:b9:ed:03:e0:37:34:cf:
53:26:94:13:0e:46:a9:77:4f:d5:db:26:f1:7e:dd:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:61:BC:5A:11:F2:63:4F:41:4D:53:63:6F:67:58:87:40:AD:41
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/F9VhvFoR8mNPQU1TY29nWIdArUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.26.0/24
192.44.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e9:a2:c0:40:cd:da:18:0d:d4:a0:f4:86:36:fe:2c:0b:ce:
12:a2:60:a4:49:1d:b6:6d:36:c5:a5:03:5d:7b:4a:dd:32:3f:
a1:28:9b:84:71:9a:8f:a3:27:36:35:9f:9f:9f:48:d0:03:07:
18:43:7a:bd:43:17:18:b2:69:85:65:7e:8b:15:a4:5f:57:b2:
29:06:3a:3c:20:9f:3d:fa:1b:9d:09:c5:88:06:85:25:3d:8d:
be:fa:56:9a:ef:28:5a:eb:9e:df:9c:8e:5f:62:b0:e1:b4:82:
c8:3e:c7:4c:bf:ea:b5:8a:ff:93:2f:64:39:c5:9e:3d:d0:20:
5f:9a:1a:fa:82:83:80:fb:fd:67:3d:ae:9a:c1:d6:88:dd:13:
c6:f8:a3:75:58:77:38:9d:6a:4f:f6:aa:64:99:d2:7e:35:3a:
b0:74:74:8e:71:13:97:37:44:d0:16:99:eb:dd:54:2c:8c:d8:
2b:4e:c3:f0:9e:85:46:19:96:54:e1:b9:f6:43:82:b5:3f:c2:
93:90:b7:8b:cb:23:fa:d3:75:16:48:27:c3:2a:70:a6:5f:39:
00:cb:cf:cd:57:49:2a:c5:73:2a:4c:37:07:98:5a:95:f3:45:
8f:56:0e:c0:4a:76:b0:8e:d0:64:71:41:a2:0f:1c:0e:a4:b8:
ae:7c:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org