Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/8Dn79aoUXOhynkL4mCn-zkwX-04.roa
File: 8Dn79aoUXOhynkL4mCn-zkwX-04.roa (raw, json)
Hash identifier: HINKo7eFycI7kSmq3dhDRCUaIZvquBIlGqGc/qpuGd4=
Subject key identifier: F0:39:FB:F5:AA:14:5C:E8:72:9E:42:F8:98:29:FE:CE:4C:17:FB:4E
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 2962ED0A
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/8Dn79aoUXOhynkL4mCn-zkwX-04.roa
Signing time: Sat 01 Jan 2022 10:04:01 +0000
ROA not before: Sat 01 Jan 2022 10:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57269
IP address blocks: 188.26.192.0/21 maxlen: 24
79.116.0.0/16 maxlen: 24
188.26.200.0/21 maxlen: 24
188.26.208.0/21 maxlen: 24
86.127.224.0/19 maxlen: 24
188.26.216.0/21 maxlen: 24
188.26.218.0/24 maxlen: 24
194.55.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694349066 (0x2962ed0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 10:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f039fbf5aa145ce8729e42f89829fece4c17fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:a0:03:d5:71:07:e9:18:59:5b:d2:0c:99:
42:1f:78:4a:24:ae:72:06:25:6c:09:80:11:c9:d4:
9e:d4:d3:84:e7:78:f1:5f:9d:ee:f2:c3:ec:c8:d1:
60:00:76:e0:b8:51:80:99:5f:85:1e:db:e3:39:61:
33:54:c0:94:26:4f:f9:53:f2:72:93:c6:ed:49:82:
da:7e:0f:f2:ff:0c:cf:38:fa:b6:c2:a6:c7:ba:ee:
a6:75:a0:8a:ed:29:cb:a6:d3:3f:e0:91:8a:14:22:
a4:f4:2e:9e:47:1e:bc:3b:7e:7b:e7:3b:06:64:ca:
c2:78:b7:ff:09:5c:5d:cc:d4:94:40:70:06:c5:5a:
20:ad:dd:01:e4:81:19:ab:67:e9:94:0a:7e:96:87:
7b:c4:f5:cd:f7:54:73:31:dc:01:34:7f:f9:a0:4d:
c8:d6:ea:29:32:ee:c1:f1:cc:70:b1:ed:7a:15:b7:
71:be:da:53:a8:94:72:8a:49:53:70:57:2a:b4:39:
b0:9f:50:2c:89:93:3d:da:56:0f:4b:50:5f:fc:1f:
4d:db:e3:99:7c:0b:41:d3:9c:34:4d:71:d8:32:ce:
e5:fc:2d:4a:fe:7c:92:df:41:b7:dc:a9:5b:94:b2:
aa:6f:77:18:69:76:fa:ca:18:ba:cd:44:ce:a6:14:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:FB:F5:AA:14:5C:E8:72:9E:42:F8:98:29:FE:CE:4C:17:FB:4E
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/8Dn79aoUXOhynkL4mCn-zkwX-04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.116.0.0/16
86.127.224.0/19
188.26.192.0/19
194.55.169.0/24
Signature Algorithm: sha256WithRSAEncryption
46:62:1e:04:72:e7:69:ff:67:bc:62:57:e8:24:9e:1d:57:e5:
e7:09:7e:56:10:45:99:6e:43:75:17:07:91:6f:a7:e0:58:9b:
3a:4e:ae:85:c1:7e:d1:a9:af:2b:c9:58:0b:fa:e5:b1:77:20:
e4:a2:87:f3:dd:9d:40:21:e1:88:14:98:05:89:b3:77:cd:37:
3f:e7:22:79:70:aa:59:67:4a:43:18:ac:0b:24:c9:a7:a4:73:
a9:6f:3f:a0:75:f9:6b:5b:14:4a:7b:d9:15:cb:92:5a:2e:d2:
6c:19:fd:41:d6:4f:83:61:a2:f6:5d:e0:13:8c:86:94:c0:e1:
b4:60:9c:86:e6:1a:c1:ac:74:6c:dd:d0:77:c7:11:22:2c:45:
55:f2:54:52:58:d0:d0:72:0a:33:96:d2:d3:e3:6e:b0:d8:da:
c0:16:f7:82:80:6c:76:52:62:15:f2:5b:9a:af:a0:44:3c:63:
70:7e:9d:22:1a:cc:97:d0:62:62:3e:e6:a3:86:7e:40:c5:21:
9c:42:e0:43:8d:d4:9d:da:fb:c9:0f:0c:11:23:8d:a4:94:e2:
e4:0a:ad:fc:56:a0:b0:74:8f:c5:f0:a8:5c:33:c9:26:27:a5:
67:ec:27:e0:95:9c:9f:ba:c6:71:a6:de:76:9c:da:da:30:7d:
89:ff:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org