Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/mkufVgsKvgHTm4g8zZzYRvTcbiY.roa
File: mkufVgsKvgHTm4g8zZzYRvTcbiY.roa (raw, json)
Hash identifier: 2sa6lXk3/YUEWDatG2nH2oHjUGUTpmF1lv8zlHmObXE=
Subject key identifier: 9A:4B:9F:56:0B:0A:BE:01:D3:9B:88:3C:CD:9C:D8:46:F4:DC:6E:26
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 05AC5C58
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/mkufVgsKvgHTm4g8zZzYRvTcbiY.roa
Signing time: Sat 01 Jan 2022 08:53:59 +0000
ROA not before: Sat 01 Jan 2022 08:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34614
IP address blocks: 193.26.215.0/24 maxlen: 24
193.26.219.0/24 maxlen: 24
193.26.223.0/24 maxlen: 24
193.27.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95181912 (0x5ac5c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jan 1 08:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a4b9f560b0abe01d39b883ccd9cd846f4dc6e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:a3:13:0d:29:ee:8a:ab:8f:61:2a:c3:93:
37:41:46:d4:ba:89:04:e7:4d:39:f5:de:f6:43:a8:
57:97:f3:dc:e8:ae:bb:1f:a3:68:13:fb:1c:7a:45:
6f:29:ad:ec:cd:2b:30:94:a6:34:5e:41:9a:19:b9:
e9:e3:c0:14:58:d5:f9:0b:27:37:4c:ad:80:8f:63:
14:d6:26:fa:4a:79:df:1e:e9:fc:66:7f:b6:cd:2e:
79:74:f2:fd:90:e2:e8:80:83:9c:50:c7:2c:e8:ed:
bb:1d:71:b8:12:d2:72:61:b6:ec:ad:42:82:75:b2:
78:41:c5:9d:7a:3b:58:73:95:e9:bb:40:d2:77:bc:
c6:5b:b1:b7:14:c2:1c:e7:dd:0c:71:6b:23:35:1d:
1d:79:35:a2:fc:d2:12:8d:42:85:37:83:ee:06:0f:
75:eb:1c:31:7b:aa:cd:df:10:65:b5:9b:b9:10:a3:
aa:c0:ca:db:f0:b8:2f:71:76:7d:37:97:a7:8d:b1:
1e:d6:e9:5b:73:f8:47:18:4e:8b:45:92:d7:fb:67:
da:49:eb:68:73:13:1a:7e:f2:29:d3:4a:4d:b0:4b:
cf:0b:a3:0e:aa:7d:18:2c:52:6e:42:6a:4b:8e:6e:
d8:80:a3:cb:14:de:f6:f6:f3:e5:83:c7:04:0c:c8:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:9F:56:0B:0A:BE:01:D3:9B:88:3C:CD:9C:D8:46:F4:DC:6E:26
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/mkufVgsKvgHTm4g8zZzYRvTcbiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.215.0/24
193.26.219.0/24
193.26.223.0/24
193.27.8.0/24
Signature Algorithm: sha256WithRSAEncryption
73:25:4a:9d:63:b7:ec:b1:94:0b:fd:f4:3c:9f:52:c8:3f:38:
ec:4a:33:41:43:c7:6e:54:98:b1:26:4e:f6:18:0d:f5:d9:ef:
75:fe:6c:e6:37:35:ed:81:d9:85:02:9b:ed:58:b6:6f:49:04:
41:7c:d6:ec:c4:84:64:dd:43:71:66:95:90:31:52:2a:ea:67:
1b:c2:e7:4f:eb:0a:88:b1:79:b8:f4:a2:29:b5:9c:4e:f7:60:
25:fe:14:69:30:a6:9e:02:51:94:9f:b3:a9:ee:46:25:57:00:
5a:4a:6a:77:74:dd:1e:91:16:ec:d7:9c:ea:d4:4e:01:9f:e0:
b6:0a:c7:77:5a:40:a0:f2:8b:4a:57:4b:5f:e0:41:f0:a9:ed:
5f:91:67:fe:bf:dc:6f:c0:72:9a:9d:81:45:bb:96:65:49:3f:
90:f1:6f:77:e4:cd:b6:d2:0c:de:ae:4d:aa:d7:69:90:2d:4f:
fc:a7:fc:39:26:67:dc:04:5f:1e:7c:cd:60:07:91:5f:85:18:
bc:d5:06:ee:6c:f5:57:e9:3b:f4:18:db:e5:3e:21:5b:f0:db:
1a:61:b6:72:57:36:7b:24:13:de:43:23:b2:d9:57:c0:fd:9a:
ca:50:37:de:27:2f:fb:60:b9:85:ce:de:95:a5:8f:2d:0a:c8:
ff:d0:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:09 2024 by rpki-client on console-fra.rpki-client.org