Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/_Y-HkkN4CQyMo9PGh6fk9hYG5A0.roa
File: _Y-HkkN4CQyMo9PGh6fk9hYG5A0.roa (raw, json)
Hash identifier: nVhderJgBT9ipxK1OsmCGrHuAsKyvYzgbn//O9RAJxI=
Subject key identifier: FD:8F:87:92:43:78:09:0C:8C:A3:D3:C6:87:A7:E4:F6:16:06:E4:0D
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 0183A3471006912833DB568CB94294125A6F
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/_Y-HkkN4CQyMo9PGh6fk9hYG5A0.roa
Signing time: Tue 04 Oct 2022 13:54:46 +0000
ROA not before: Tue 04 Oct 2022 13:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211320
IP address blocks: 185.26.138.0/24 maxlen: 24
185.26.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:47:10:06:91:28:33:db:56:8c:b9:42:94:12:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Oct 4 13:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd8f87924378090c8ca3d3c687a7e4f61606e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:81:b5:e6:ce:80:f4:7e:30:df:56:d5:5b:
90:2e:f1:83:cf:3a:31:38:52:67:5d:3f:e7:41:8f:
a4:d3:b6:fd:75:00:44:c2:28:d0:af:fe:7d:27:04:
0f:8f:ec:5d:af:04:12:c9:d6:ce:8f:43:ec:c9:20:
5e:93:29:68:18:78:77:93:ac:82:b0:57:be:60:b5:
38:e1:7f:8a:79:94:22:23:81:e3:4f:a8:4b:23:4b:
1d:bf:4b:d0:29:fc:c6:20:cb:cc:7e:21:8a:cb:5b:
0f:4c:ee:c7:e0:e5:f6:1c:e6:f5:04:74:a2:1b:db:
79:07:e4:6a:5f:bc:6c:89:2c:bd:cc:09:8b:f0:04:
27:1f:19:b4:ee:5d:f4:7c:ba:2d:89:79:c9:9c:68:
df:a2:36:80:76:9d:6f:ba:2f:06:c3:df:be:0c:0b:
a8:64:27:7f:07:3f:de:22:09:78:3f:bd:b5:59:f4:
b2:b0:ce:cf:6c:7a:07:00:72:76:c7:fe:a9:17:1f:
b4:83:61:90:e2:d4:e7:db:31:12:cf:b3:8e:5e:d4:
1a:76:bf:a4:c7:0f:f5:14:6b:59:c1:8f:a1:24:31:
5d:ff:d2:ea:21:59:3e:3b:76:2f:ec:38:f6:05:a9:
fa:dc:bd:24:08:e4:ac:41:08:e7:9a:3d:fe:a5:d8:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:87:92:43:78:09:0C:8C:A3:D3:C6:87:A7:E4:F6:16:06:E4:0D
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/_Y-HkkN4CQyMo9PGh6fk9hYG5A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.138.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ef:6c:db:48:d6:b6:7b:ff:5e:0c:ed:f0:0e:3f:c4:cc:1a:
e7:94:f6:68:8d:58:d6:74:0b:5d:1d:8f:56:82:98:ba:f0:2c:
49:ef:31:9b:07:ec:d4:eb:c7:97:32:06:25:b5:97:1a:29:12:
5a:49:f1:bf:74:2e:3b:76:f8:79:54:be:74:f9:f8:fe:6f:24:
55:f5:f6:0e:ba:9b:2f:64:3c:cb:9c:f2:b2:7c:48:f0:b0:ea:
f7:d4:56:c9:07:ec:11:43:35:aa:20:bc:4b:df:e6:02:ef:d1:
f5:9d:f6:9b:5f:8c:19:fe:e9:bb:e6:b1:34:85:e3:cc:ab:a6:
80:c3:f8:d6:c7:4c:78:04:e5:11:4f:b5:ca:f6:3a:38:dc:17:
0e:c4:bf:1e:81:22:ea:e5:32:bb:df:68:68:61:11:04:da:7d:
46:b0:3f:02:f5:76:31:fb:fb:4b:72:ea:84:7c:64:25:4c:ed:
d1:ed:52:9a:dc:a9:bf:4b:ea:1d:fa:9f:17:7e:29:f4:82:2c:
93:59:0f:98:b8:cc:b1:7d:08:74:ca:51:7d:11:9c:ac:f4:02:
17:cd:78:e7:cb:9b:a7:3c:f7:de:87:93:3e:83:c4:a7:8e:5b:
28:66:51:47:6c:0f:fb:87:9f:fa:d0:34:97:3d:e0:31:bd:f3:
51:1e:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:32 2024 by rpki-client on console-ams.rpki-client.org