Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/irEk1c8xtc7V4S1qicQHoe2mfkc.roa
File: irEk1c8xtc7V4S1qicQHoe2mfkc.roa (raw, json)
Hash identifier: sfBLzolHXyxSnW9QzXoc9ZjkAMYRiGd6eVK2WI3i1LE=
Subject key identifier: 8A:B1:24:D5:CF:31:B5:CE:D5:E1:2D:6A:89:C4:07:A1:ED:A6:7E:47
Certificate issuer: /CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Certificate serial: DA603A
Authority key identifier: 0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/irEk1c8xtc7V4S1qicQHoe2mfkc.roa
Signing time: Sat 01 Jan 2022 06:02:28 +0000
ROA not before: Sat 01 Jan 2022 06:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.26.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14311482 (0xda603a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Validity
Not Before: Jan 1 06:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ab124d5cf31b5ced5e12d6a89c407a1eda67e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:b5:ae:b3:a2:ad:14:e6:8d:53:d0:50:b0:
36:db:01:74:12:68:8d:38:f2:ff:8e:c8:36:e9:4b:
59:ed:6a:06:85:35:a3:ab:76:ef:7c:91:f9:58:98:
03:47:61:34:9a:0b:4d:58:2d:9a:ce:c9:6b:a8:e6:
83:fc:0c:62:10:fb:95:15:da:22:e6:41:14:ec:ed:
c5:cc:dc:7f:f3:38:28:3a:02:01:c2:35:96:25:0d:
6d:ad:25:28:14:99:e8:ca:26:78:3f:d6:31:5e:14:
06:29:dc:5a:d3:3b:76:27:4d:e1:30:1b:60:30:92:
84:77:9e:7c:70:21:fa:f0:f6:28:16:c1:24:fa:c9:
25:78:9b:26:3b:3d:9c:d8:73:23:2c:12:e1:bf:ff:
59:4e:13:b4:f6:66:ec:f3:7d:c8:e0:83:9f:d0:a6:
31:0b:93:b3:79:df:e4:76:4b:e6:ab:d2:49:6e:f1:
5c:b0:07:44:4e:c9:2c:b5:44:e4:fc:02:c5:b3:dc:
9b:6f:2d:d1:15:d6:66:19:5e:f8:34:bb:0a:69:d6:
dd:de:53:b3:d0:44:a8:50:9b:b4:70:46:73:74:ce:
36:4d:9c:1d:9f:96:28:87:37:51:c8:50:56:48:1b:
dd:48:bf:07:ae:a4:b9:a6:bd:95:1b:16:d5:33:ee:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:24:D5:CF:31:B5:CE:D5:E1:2D:6A:89:C4:07:A1:ED:A6:7E:47
X509v3 Authority Key Identifier:
keyid:0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/irEk1c8xtc7V4S1qicQHoe2mfkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
78:32:36:75:ee:3f:a1:00:35:5c:92:6c:79:a9:68:80:21:bf:
1b:88:fc:4b:fe:6a:a7:89:6d:d9:2d:f3:41:55:d7:86:6e:b9:
1d:f4:48:ab:11:dc:d9:9a:f8:ec:d6:0f:ce:b1:29:78:a6:66:
7d:3c:68:6a:f7:c7:55:3a:06:25:36:4a:0e:d0:ae:ae:1b:cb:
f8:3d:a8:0b:fa:75:18:5a:a3:0c:ba:6a:6a:24:ec:3e:63:a5:
c2:8b:b3:de:78:6f:d0:af:1a:d5:db:b4:72:15:24:53:27:39:
0a:e9:fc:3d:17:71:72:79:9b:55:b0:68:08:3c:df:2c:8d:34:
15:02:b6:00:fe:41:99:02:23:08:41:65:56:01:ae:42:be:33:
d8:c1:2c:10:df:98:9f:5c:f6:9f:0b:5e:e5:1d:81:06:ff:f0:
d6:16:0d:4a:1c:96:a1:31:4e:5b:e6:95:b7:6a:64:1d:f5:9b:
ba:28:e1:d4:89:41:ec:f5:36:84:70:57:e3:bc:b6:af:ef:c3:
a7:5c:db:b2:e2:7c:55:98:10:25:14:c3:33:35:02:ed:80:92:
e6:26:49:9e:b2:d4:95:ec:73:02:51:fd:3e:d9:dd:f5:96:d3:
23:4a:0d:95:71:c2:cd:dd:d2:73:8e:b4:a2:e0:fb:7f:bb:89:
8c:83:02:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANpgOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YmZjYWUwOTQ3YWVhMThhOTFkYzI2MDRlNzJmODFhMzRkOTU0Y2NiMB4XDTIyMDEw
MTA2MDIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFiMTI0ZDVjZjMx
YjVjZWQ1ZTEyZDZhODljNDA3YTFlZGE2N2U0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkuta6zoq0U5o1T0FCwNtsBdBJojTjy/47INulLWe1qBoU1
o6t273yR+ViYA0dhNJoLTVgtms7Ja6jmg/wMYhD7lRXaIuZBFOztxczcf/M4KDoC
AcI1liUNba0lKBSZ6MomeD/WMV4UBincWtM7didN4TAbYDCShHeefHAh+vD2KBbB
JPrJJXibJjs9nNhzIywS4b//WU4TtPZm7PN9yOCDn9CmMQuTs3nf5HZL5qvSSW7x
XLAHRE7JLLVE5PwCxbPcm28t0RXWZhle+DS7CmnW3d5Ts9BEqFCbtHBGc3TONk2c
HZ+WKIc3UchQVkgb3Ui/B66kuaa9lRsW1TPuSqcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKsSTVzzG1ztXhLWqJxAeh7aZ+RzAfBgNVHSMEGDAWgBQL/K4JR66hipHc
JgTnL4GjTZVMyzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NfeXVDVWV1b1lxUjNDWUU1eS1CbzAyVlRNcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjYvYmI4ZGYxLWNmZGMtNDBiZS1hYWIyLWQ5ZjYzYzU5M2VkZC8x
L2lyRWsxYzh4dGM3VjRTMXFpY1FIb2UybWZrYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYv
YmI4ZGYxLWNmZGMtNDBiZS1hYWIyLWQ5ZjYzYzU5M2VkZC8xL0NfeXVDVWV1b1lx
UjNDWUU1eS1CbzAyVlRNcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIa6jANBgkqhkiG9w0BAQsFAAOC
AQEAeDI2de4/oQA1XJJsealogCG/G4j8S/5qp4lt2S3zQVXXhm65HfRIqxHc2Zr4
7NYPzrEpeKZmfTxoavfHVToGJTZKDtCurhvL+D2oC/p1GFqjDLpqaiTsPmOlwouz
3nhv0K8a1du0chUkUyc5Cun8PRdxcnmbVbBoCDzfLI00FQK2AP5BmQIjCEFlVgGu
Qr4z2MEsEN+Yn1z2nwte5R2BBv/w1hYNShyWoTFOW+aVt2pkHfWbuijh1IlB7PU2
hHBX47y2r+/Dp1zbsuJ8VZgQJRTDMzUC7YCS5iZJnrLUlexzAlH9Ptnd9ZbTI0oN
lXHCzd3Sc460ouD7f7uJjIMCOw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org