Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/8KX36baBcq6LapUVrmDkDLznKgY.roa
File: 8KX36baBcq6LapUVrmDkDLznKgY.roa (raw, json)
Hash identifier: ZmJEMcKe/ZTGrTT8TH3JTpThBg+r+qlUBDL2JXIq34I=
Subject key identifier: F0:A5:F7:E9:B6:81:72:AE:8B:6A:95:15:AE:60:E4:0C:BC:E7:2A:06
Certificate issuer: /CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Certificate serial: 01395B3E
Authority key identifier: 0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/8KX36baBcq6LapUVrmDkDLznKgY.roa
Signing time: Mon 07 Feb 2022 09:44:09 +0000
ROA not before: Mon 07 Feb 2022 09:44:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.26.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20536126 (0x1395b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Validity
Not Before: Feb 7 09:44:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a5f7e9b68172ae8b6a9515ae60e40cbce72a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:06:85:f3:d7:3a:cf:f5:13:22:3e:f2:3b:
26:49:f9:0c:57:aa:38:64:67:81:a7:95:f4:75:0e:
53:bb:05:d9:cd:2e:bf:34:5c:86:e0:e9:91:bf:90:
92:2e:bf:3c:81:fb:09:08:16:a6:e8:57:68:02:2b:
d0:9d:c4:05:ec:07:a7:3a:04:1d:77:2a:db:8b:d6:
e8:bc:16:79:d6:68:92:22:dc:68:56:53:3c:e7:e4:
1f:78:c7:36:84:ff:7d:2a:49:bf:fe:af:63:60:dc:
4c:28:4a:27:de:68:80:4f:06:45:a7:a1:29:13:ea:
a8:aa:85:e3:ff:14:e8:08:cf:2b:50:65:82:45:a0:
5a:d3:6c:cc:d5:fe:84:da:29:bf:39:12:ff:20:95:
2d:93:a5:33:ad:53:cd:6c:7e:68:f2:a9:45:19:73:
24:72:75:c1:cb:bf:a6:60:4e:4e:6f:a4:75:a1:a2:
02:a3:f9:e8:47:d0:84:f9:25:b3:f9:c7:1b:5d:03:
3f:36:7e:57:69:fe:93:ac:52:2c:6d:16:bb:ae:e7:
88:cf:51:28:ec:67:f6:b7:61:11:62:15:74:fb:25:
ac:cf:17:8a:2f:66:8f:93:0f:3d:e4:fd:f8:d5:3d:
99:68:f6:54:a7:5d:b5:5d:90:e5:03:52:d7:63:32:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A5:F7:E9:B6:81:72:AE:8B:6A:95:15:AE:60:E4:0C:BC:E7:2A:06
X509v3 Authority Key Identifier:
keyid:0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/8KX36baBcq6LapUVrmDkDLznKgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ca:0e:0f:2d:d4:b3:77:44:06:7c:e8:63:7e:56:c6:7b:8b:
08:72:58:02:5a:34:6b:61:40:0d:74:ea:bb:0c:6a:7f:4d:27:
41:4e:85:16:ca:a9:3a:8b:0c:ab:5b:16:0d:fd:6d:57:96:07:
52:e4:e8:b5:47:bb:c6:07:34:b8:ef:82:32:6b:97:a6:19:65:
47:48:2f:49:0c:ea:0f:f5:a9:1d:d5:f9:18:df:59:c3:bd:3a:
ff:50:ce:a6:50:dc:d0:41:c5:9d:c4:92:2f:19:99:83:b9:e0:
08:7b:2a:4a:d8:81:c5:2f:7f:03:d0:06:55:83:e2:f7:87:2d:
28:07:22:06:3a:26:8b:73:40:ef:d9:42:2b:97:68:76:dc:e2:
f6:5c:36:a5:89:75:76:f2:ac:34:d4:6e:b9:ee:9b:21:02:aa:
da:9b:8b:f0:bb:71:c1:74:d2:24:07:02:b4:cf:a9:e5:95:db:
96:ed:b1:a2:fb:31:3a:7b:ad:51:61:04:7d:3b:10:0b:f8:e8:
ff:99:f6:67:79:38:db:ae:10:2b:a2:03:71:4a:d3:4b:21:0f:
0c:da:f9:e6:08:71:01:48:1c:f0:28:8a:b2:05:71:e1:d2:98:
d1:8b:b3:2a:18:d2:81:0d:f1:6e:6d:0b:3b:ee:f8:3c:61:ae:
86:ce:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org