Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/Z26luDlNX_7FtOPjx9dPw4_3KyA.roa
File: Z26luDlNX_7FtOPjx9dPw4_3KyA.roa (raw, json)
Hash identifier: SYFgdKvcsLZ98aFFWUQHkFVZPlNnbq/eOgVpC6WuFWs=
Subject key identifier: 67:6E:A5:B8:39:4D:5F:FE:C5:B4:E3:E3:C7:D7:4F:C3:8F:F7:2B:20
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 04623B36
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/Z26luDlNX_7FtOPjx9dPw4_3KyA.roa
Signing time: Sat 01 Jan 2022 01:02:13 +0000
ROA not before: Sat 01 Jan 2022 01:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39632
IP address blocks: 91.208.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73546550 (0x4623b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: Jan 1 01:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=676ea5b8394d5ffec5b4e3e3c7d74fc38ff72b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:55:29:be:3b:9c:71:49:5d:dc:0b:ee:74:
a8:f4:d0:c7:5b:89:5c:bc:d8:a1:75:38:70:d1:75:
2b:5c:95:51:fd:e7:12:ab:a8:5b:83:12:8a:fc:58:
0d:19:37:b0:18:8d:48:40:35:55:97:fb:b3:a3:63:
87:2b:02:da:9b:da:63:4d:b8:ea:9f:33:32:55:6d:
7c:9e:11:d4:68:f6:38:92:bb:10:2d:2c:e3:f0:50:
9d:4b:95:bb:2f:1c:50:dc:c5:fa:5f:8b:5e:cb:8a:
a5:07:92:ae:9c:6b:70:b3:5f:b4:55:04:32:12:21:
33:32:c6:10:53:fc:2e:f5:1a:f7:a1:10:87:2f:07:
7a:02:95:ff:fe:83:b3:cf:f1:c1:b8:d4:67:c5:a6:
3f:be:e8:1c:59:ca:6d:18:b8:f2:60:ec:f3:14:a4:
59:7c:d4:fd:b3:4c:21:48:80:67:9c:57:e3:a9:26:
8d:60:f5:95:c5:ec:d5:42:35:14:9f:3f:50:f3:eb:
89:7c:2f:f8:76:6e:4b:56:3e:3c:77:08:6b:f3:96:
42:d5:80:d9:b5:9e:29:49:62:61:5d:41:43:79:84:
b4:9e:98:0e:b1:42:3a:1e:26:f8:75:b9:96:b7:b6:
94:a2:8a:b7:04:56:57:87:a8:87:1a:41:41:d6:ee:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:A5:B8:39:4D:5F:FE:C5:B4:E3:E3:C7:D7:4F:C3:8F:F7:2B:20
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/Z26luDlNX_7FtOPjx9dPw4_3KyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5d:cc:7e:bc:c9:7f:7b:13:b8:75:0f:5b:49:f9:d0:58:02:
9b:8a:86:d1:b4:7c:bc:7f:29:72:aa:07:48:dd:3d:35:b5:74:
66:9e:ee:14:58:c0:d2:d2:c9:41:f1:d2:ae:75:3a:d4:3d:28:
a4:71:ca:1f:9f:9b:a1:55:29:67:f6:10:44:19:06:96:f5:75:
84:05:7e:ab:4e:b1:4a:fe:57:2b:9f:7e:08:dc:99:e5:ba:9d:
3f:ea:f2:b5:4a:5f:cd:70:b2:bb:89:f3:50:5d:69:53:a1:93:
04:1d:a0:5f:41:84:05:5e:0c:21:b1:fc:12:91:c1:21:a5:d0:
0c:bd:be:ad:6d:3e:25:72:6a:23:c3:f7:dc:4a:fb:91:46:e6:
6a:df:84:ec:63:ab:e1:cd:27:1c:24:2a:4d:87:c9:43:70:65:
e2:26:5d:fd:a1:c4:69:2c:96:57:89:e2:ca:bd:b2:8c:b0:ec:
51:2d:ab:3f:54:45:36:57:c8:13:bf:57:7c:9e:74:33:0f:5a:
e6:e1:a2:9f:81:2b:29:20:96:de:0e:5e:b8:b8:55:e2:4e:8a:
74:19:7d:e4:c9:62:b7:1f:e6:25:dd:c8:a8:6c:8d:d6:6b:14:
9b:f2:cc:5e:23:6c:9a:56:5a:df:49:f6:75:73:e8:e6:f7:1c:
92:a2:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:31 2023 by rpki-client on console-fra.rpki-client.org