Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/S_NWdnHNw6xlAhdvvZx-t9RYAhA.roa
File: S_NWdnHNw6xlAhdvvZx-t9RYAhA.roa (raw, json)
Hash identifier: ebkUzlWHhkIDUJET9isVxQIpmixI/DpL8Q0UEA4H56o=
Subject key identifier: 4B:F3:56:76:71:CD:C3:AC:65:02:17:6F:BD:9C:7E:B7:D4:58:02:10
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 2A009EE3
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/S_NWdnHNw6xlAhdvvZx-t9RYAhA.roa
Signing time: Thu 10 Mar 2022 12:50:36 +0000
ROA not before: Thu 10 Mar 2022 12:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57269
IP address blocks: 188.26.192.0/19 maxlen: 19
188.26.192.0/21 maxlen: 24
79.116.0.0/16 maxlen: 24
188.26.200.0/21 maxlen: 24
188.26.208.0/21 maxlen: 24
86.127.224.0/19 maxlen: 24
188.26.216.0/21 maxlen: 24
188.26.218.0/24 maxlen: 24
194.55.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704683747 (0x2a009ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Mar 10 12:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf3567671cdc3ac6502176fbd9c7eb7d4580210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:16:5e:ce:f3:81:0a:59:1c:02:4d:c2:7b:
5e:69:cf:73:94:cb:5c:60:59:c0:c9:e0:62:b7:a0:
5e:54:f5:ad:64:dd:b6:ce:38:9b:00:de:8f:42:4e:
f1:2e:4d:90:80:ea:98:cc:f4:d7:db:74:58:23:62:
7f:aa:df:85:b0:58:74:fd:ae:10:72:44:b9:24:2a:
a6:52:53:3c:87:a0:0b:5a:72:8c:13:c4:6c:38:7e:
04:b5:86:2a:7c:1b:5b:2c:d8:43:2a:01:eb:82:43:
10:41:7b:b1:6d:49:61:6f:3e:3c:99:8b:15:9d:28:
66:06:d9:78:3a:74:ec:36:25:b2:99:fd:9a:14:e0:
f6:86:90:4b:ac:f1:dd:3e:86:29:a5:1e:a7:a8:f7:
e6:b3:21:28:ed:42:cf:a7:d8:60:6f:02:e1:ea:f6:
89:63:51:bc:f0:bd:bb:06:26:43:a0:16:ee:63:01:
02:82:aa:b0:3c:c7:4b:5c:bb:ba:38:8c:1b:c4:69:
87:27:77:9b:c8:e9:a4:e7:e8:2e:a7:0c:9b:cc:33:
a9:7a:44:43:00:c2:3f:a1:bb:cd:0d:fb:fd:36:f4:
31:b5:7e:40:27:8d:1c:30:fa:c9:9c:07:37:8e:d7:
26:60:17:c2:64:6b:d9:1f:e6:55:31:88:7c:f2:95:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:56:76:71:CD:C3:AC:65:02:17:6F:BD:9C:7E:B7:D4:58:02:10
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/S_NWdnHNw6xlAhdvvZx-t9RYAhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.116.0.0/16
86.127.224.0/19
188.26.192.0/19
194.55.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:89:46:8d:0b:99:b5:ad:84:11:cc:4d:ac:77:30:07:45:21:
82:6e:e3:76:d3:18:d0:73:1d:03:30:b8:ed:8e:ad:e8:22:66:
a1:92:13:f5:80:a9:32:56:84:95:6a:39:5b:09:6d:e1:a8:5d:
8d:e8:80:a0:99:d9:0a:17:77:8e:c9:cb:2e:59:35:65:1c:0d:
8e:ed:5e:56:92:07:e8:5c:5c:a7:6c:c7:f7:ff:65:16:78:b9:
dd:6b:f7:68:91:8f:80:7f:44:84:3e:7e:a1:0c:f5:ca:05:c2:
92:bd:d7:d3:45:96:0e:a9:e4:93:d0:c2:fa:4c:46:6c:08:73:
c6:4f:74:6b:a2:51:44:69:ae:44:a0:4b:2d:3f:b0:1d:0d:88:
cd:27:bf:c5:71:b4:d0:c9:f0:bf:17:a3:25:da:6c:61:e2:26:
b7:9c:ef:ac:76:0c:19:6d:06:23:5b:c8:d4:fe:b3:fa:aa:6b:
10:7a:2e:34:32:39:e5:16:2f:20:6c:e2:5e:ee:40:d9:65:ce:
8e:09:43:8f:62:6f:0c:44:72:c4:08:e3:98:30:fb:1d:13:ea:
13:a1:3a:dc:67:16:0c:f1:71:95:16:0a:7b:99:e8:7c:64:48:
76:40:40:88:a4:a5:48:48:e5:97:91:b6:3d:42:b9:3f:6b:46:
21:d4:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org