Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/DkT42syA5dmYzPfSpZHeVFR45eo.roa
File: DkT42syA5dmYzPfSpZHeVFR45eo.roa (raw, json)
Hash identifier: jnMp6e0YcfEYlAMbn0/Gbde5Q6jNf7eRojgPuYOlIvg=
Subject key identifier: 0E:44:F8:DA:CC:80:E5:D9:98:CC:F7:D2:A5:91:DE:54:54:78:E5:EA
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 0B24C2BF
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/DkT42syA5dmYzPfSpZHeVFR45eo.roa
Signing time: Sat 01 Jan 2022 04:55:58 +0000
ROA not before: Sat 01 Jan 2022 04:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39146
IP address blocks: 194.26.79.0/24 maxlen: 24
194.26.76.0/24 maxlen: 24
194.26.77.0/24 maxlen: 24
194.26.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186958527 (0xb24c2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Jan 1 04:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e44f8dacc80e5d998ccf7d2a591de545478e5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:d7:1d:ca:f0:b6:6b:d4:7c:98:09:a2:b8:
31:9d:4d:0f:27:e6:a0:78:76:e1:4b:45:7d:3c:ec:
2b:71:09:83:f2:a2:91:f5:5d:0c:70:47:4e:ac:8e:
89:97:03:d2:34:57:10:3a:87:b1:30:66:45:a4:ee:
d5:b4:4a:a6:34:70:5b:32:b5:a2:f6:18:c9:2b:f3:
38:bf:23:7c:7c:43:6f:c0:b6:10:dc:67:39:02:a8:
f2:d3:ce:88:68:69:dc:bc:a1:2c:5b:03:d5:35:de:
1d:12:6d:43:33:f6:2f:26:84:a5:a5:5c:11:9d:70:
37:3c:36:35:29:a7:1f:16:6a:53:b9:cd:99:9c:95:
10:34:35:0e:13:0f:d4:0b:89:d5:db:bc:6c:34:8c:
17:67:53:94:96:60:97:df:0e:06:a9:2e:18:fc:03:
17:d9:47:7e:35:86:50:34:34:4d:ed:2c:be:3a:b0:
8a:23:55:11:0a:3c:57:20:10:58:42:b0:31:d4:b0:
a1:ca:f2:9a:0c:ea:57:d9:94:d1:19:3d:06:b9:d0:
51:bb:b2:cd:fe:01:be:85:72:55:76:6f:f7:fe:70:
df:6c:47:4d:1d:4d:1c:97:99:bf:e0:a4:15:31:b9:
ae:a1:54:dd:33:30:a3:0d:a5:18:2f:7d:5f:85:17:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:F8:DA:CC:80:E5:D9:98:CC:F7:D2:A5:91:DE:54:54:78:E5:EA
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/DkT42syA5dmYzPfSpZHeVFR45eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.76.0/22
Signature Algorithm: sha256WithRSAEncryption
19:49:69:dc:1b:b4:2a:2d:95:86:67:99:22:62:27:79:dc:b7:
f1:68:fb:c0:b8:43:58:64:b6:47:1c:d7:fc:5a:01:d7:fc:12:
de:a5:5c:ab:ed:4b:65:10:66:e7:81:66:75:03:c6:cf:a3:45:
fc:e9:94:3b:49:e4:cc:32:5b:ca:a5:5b:91:0d:45:97:f7:81:
11:c6:b2:7d:30:64:66:c1:6c:f1:be:0a:65:3e:26:95:57:9c:
5b:a3:df:e4:87:bc:b2:f7:07:c6:5d:04:1d:14:ee:d4:fa:57:
1c:7e:5a:9a:42:01:85:f2:9b:75:95:78:5b:0e:a7:6e:27:df:
60:97:8d:b4:0e:22:b4:32:ad:0f:9d:d0:5e:7c:08:13:ee:c5:
e1:17:51:af:fe:db:08:f9:df:88:b1:a5:51:1c:03:2b:8e:e0:
9c:99:48:4d:dd:02:a5:11:87:78:4c:0e:5e:6c:d3:93:e2:be:
1d:b8:14:05:73:41:fa:14:8e:53:62:ba:5d:c2:ff:97:dd:2c:
1a:d5:12:5b:71:48:20:01:d6:d4:b9:e3:89:23:93:4c:a0:16:
d3:f4:d7:e4:3d:40:f6:15:12:40:05:fd:c7:10:32:93:d4:b2:
eb:3d:3c:f0:4d:d6:67:97:42:bf:30:02:3e:51:47:c4:b7:48:
e9:96:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-fra.rpki-client.org