Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/P4a8DFRIM-kjf-8GqLyx7QO4v_4.roa
File: P4a8DFRIM-kjf-8GqLyx7QO4v_4.roa (raw, json)
Hash identifier: CxEPSoLQyeY4J3eO5rOX8ceIHGzyYQZYM85wKiZabNk=
Subject key identifier: 3F:86:BC:0C:54:48:33:E9:23:7F:EF:06:A8:BC:B1:ED:03:B8:BF:FE
Certificate issuer: /CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Certificate serial: 01764C85
Authority key identifier: 0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/P4a8DFRIM-kjf-8GqLyx7QO4v_4.roa
Signing time: Mon 07 Mar 2022 10:27:03 +0000
ROA not before: Mon 07 Mar 2022 10:27:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 194.26.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24530053 (0x1764c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Validity
Not Before: Mar 7 10:27:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f86bc0c544833e9237fef06a8bcb1ed03b8bffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:93:29:28:23:49:d7:f3:99:5d:50:bf:95:
a2:14:81:37:2d:59:71:5e:6a:6e:8d:cb:55:b7:5d:
e4:c0:14:fb:04:ac:4f:c2:10:5f:ef:9c:b7:ee:82:
e6:89:f9:f3:62:d4:96:bc:3d:62:99:41:93:86:bb:
1c:78:c9:c0:eb:49:68:1e:31:88:64:44:6a:e5:34:
9d:78:93:e9:e3:40:ea:c7:9c:51:a6:cf:fb:5e:72:
b4:79:65:91:d8:23:03:25:fe:37:99:6f:ba:4c:8d:
4d:ce:47:08:e1:b7:9e:83:0c:a5:55:f7:00:f4:75:
e9:90:32:d8:28:2b:77:39:35:fd:a2:cc:c4:43:aa:
8d:66:6b:38:21:0d:c2:db:50:6f:31:e6:00:4f:c1:
fc:c4:7a:52:f8:e9:e9:39:1f:78:2b:94:d1:f9:82:
38:fd:59:fd:eb:ea:63:00:ff:a8:ae:bf:36:9b:6a:
36:93:95:f1:95:aa:68:ee:3b:cc:a3:26:35:37:6b:
1b:ab:57:ac:fc:e9:e7:5f:fe:1b:06:03:79:7c:6e:
e1:48:23:6b:33:43:8b:52:70:08:db:27:48:dc:46:
5d:5d:bf:44:4d:ec:28:f9:62:0d:c4:c5:1f:32:15:
26:26:9c:58:71:d2:70:5d:b2:46:dc:bf:af:05:e6:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:BC:0C:54:48:33:E9:23:7F:EF:06:A8:BC:B1:ED:03:B8:BF:FE
X509v3 Authority Key Identifier:
keyid:0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/P4a8DFRIM-kjf-8GqLyx7QO4v_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:2e:3d:6d:4e:11:65:f8:f9:d0:4d:e8:69:0c:05:66:fa:3e:
3e:0e:8d:78:49:44:5a:fe:6f:c2:cd:e0:9c:b0:bd:e3:f4:61:
d3:c5:df:28:05:ad:d0:a4:8a:8b:28:12:ec:3d:56:05:cf:65:
c9:80:04:61:58:e1:9a:85:53:98:ce:99:a1:83:29:7e:8c:d0:
13:ab:12:08:2d:c3:83:a2:c4:a1:ed:7c:f2:73:be:92:68:39:
81:b3:66:07:2c:74:34:6f:bd:9d:17:ca:79:39:7c:55:30:19:
9d:7d:fc:67:22:9f:d0:db:99:7e:ec:b6:49:5e:13:6e:de:15:
b0:33:08:67:fe:88:e2:6e:21:cc:98:96:eb:d9:7f:04:16:75:
bd:60:9e:3d:c6:78:d8:38:eb:33:ab:7e:a2:6e:05:b8:ba:e7:
ac:79:32:02:9d:6b:d0:ec:15:a0:3b:45:a9:2e:5c:69:7e:41:
0b:de:9d:70:a4:2f:2c:2f:1a:bd:e7:94:28:e8:f7:87:ad:9e:
78:20:a4:9a:99:99:b2:99:f4:6b:ee:67:49:6c:79:57:f7:4a:
c5:73:66:a8:65:07:f7:d9:24:05:49:4e:b4:b0:46:53:3c:74:
55:27:f4:fa:c4:a7:2e:bb:68:6d:e7:0c:e2:e7:87:2c:f6:98:
1a:31:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org