Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/0S53Rw3QhICdSkljksRdVVMxjJw.roa
File: 0S53Rw3QhICdSkljksRdVVMxjJw.roa (raw, json)
Hash identifier: oG0OSfzKiymenjdBb5XlY3LesnhkiQMDrsUZT+wRxgM=
Subject key identifier: D1:2E:77:47:0D:D0:84:80:9D:4A:49:63:92:C4:5D:55:53:31:8C:9C
Certificate issuer: /CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Certificate serial: 0171F595
Authority key identifier: 0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/0S53Rw3QhICdSkljksRdVVMxjJw.roa
Signing time: Sun 06 Mar 2022 06:32:32 +0000
ROA not before: Sun 06 Mar 2022 06:32:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.26.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24245653 (0x171f595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Validity
Not Before: Mar 6 06:32:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d12e77470dd084809d4a496392c45d5553318c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:fa:5a:d2:09:a4:0b:9c:ba:89:03:2c:90:
eb:54:21:f8:00:32:d2:eb:05:d9:53:95:a7:6a:d1:
20:af:77:60:d4:b9:9c:76:8d:f5:bd:2e:b1:22:13:
0d:e9:7f:b4:4d:9e:86:14:f9:45:09:ea:cc:39:5c:
0a:14:00:2d:04:99:44:53:53:96:52:d9:b7:5e:74:
49:94:36:74:bf:d8:3e:37:d8:be:b8:9d:b6:71:cd:
5a:89:b5:4e:8b:f8:48:83:fd:31:c7:60:54:01:31:
c1:43:65:61:cb:1a:d8:c2:d6:23:a4:a0:65:78:65:
c9:c7:ec:80:9f:d0:02:71:f1:2b:b5:9b:22:d8:22:
ff:7d:6a:0b:a6:10:14:5e:4b:71:11:97:dd:33:0d:
8d:18:cc:02:b5:24:c3:ac:01:02:8f:d8:6d:0c:a6:
e5:49:5e:e9:69:3f:8b:3b:be:1c:12:df:70:f2:14:
1c:1d:80:f9:80:76:09:f4:66:9d:e6:06:ce:f4:cc:
6b:34:e8:35:9a:db:17:9d:ed:eb:79:a4:fa:60:a8:
89:84:36:e1:1c:6f:29:4d:5e:cb:96:cf:52:ae:16:
58:29:10:f6:55:00:1b:f5:35:5f:76:54:7d:4d:cb:
66:50:90:8b:76:1e:18:8a:5e:5d:00:c6:39:ad:e6:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:77:47:0D:D0:84:80:9D:4A:49:63:92:C4:5D:55:53:31:8C:9C
X509v3 Authority Key Identifier:
keyid:0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/0S53Rw3QhICdSkljksRdVVMxjJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
31:49:3e:65:e6:70:03:a9:9a:38:3d:1f:8e:7d:54:41:32:3e:
b4:ba:92:a4:51:66:5e:2d:f4:f2:ba:2e:81:1b:4a:89:fd:ca:
70:f4:cf:21:a7:c2:cc:34:90:48:7e:97:8f:1d:ec:81:b1:88:
77:9b:05:7f:55:4d:82:a2:b6:5f:0f:72:2a:8d:14:e9:c6:9b:
b7:e3:46:1a:f6:6f:cb:86:80:b7:50:90:0e:45:25:09:cf:72:
3a:cc:fb:31:c3:05:c7:73:ff:99:61:cb:2c:6c:0e:d1:1f:f8:
db:21:75:df:39:b4:64:ea:fe:19:c3:23:72:64:d8:ea:f3:b3:
8c:19:51:14:34:49:36:b3:80:ed:52:d3:17:16:05:50:01:c8:
14:89:fc:5d:dc:59:ee:c7:28:c3:e8:ee:f6:26:b3:ef:10:6b:
ec:9f:39:7c:45:64:36:e3:7a:f4:bf:cb:f6:8a:64:17:70:11:
60:85:02:df:f0:f0:07:d6:35:7c:7d:54:c6:91:88:1f:69:51:
ea:ae:a8:20:cb:ba:d2:51:4b:f2:6b:1a:14:3d:87:b1:56:a1:
48:42:df:dd:ba:c2:d9:79:e9:4c:78:a4:ae:e2:97:20:79:88:
20:3c:9b:33:6b:f9:16:78:76:fe:ac:f3:65:0d:2f:7c:ef:24:
d5:2e:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:56 2023 by rpki-client on console-ams.rpki-client.org