Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/_Y2Jh0z872AzfnWITO2B70mr7hY.roa
File: _Y2Jh0z872AzfnWITO2B70mr7hY.roa (raw, json)
Hash identifier: Xr5Ob9/dUm4jZaHYHO51esvKOIaJAPdrLimrg/nmzqw=
Subject key identifier: FD:8D:89:87:4C:FC:EF:60:33:7E:75:88:4C:ED:81:EF:49:AB:EE:16
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 925E43
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/_Y2Jh0z872AzfnWITO2B70mr7hY.roa
Signing time: Tue 08 Mar 2022 16:54:26 +0000
ROA not before: Tue 08 Mar 2022 16:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9592387 (0x925e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Mar 8 16:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd8d89874cfcef60337e75884ced81ef49abee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:68:7a:b0:88:cd:11:ae:ed:45:a0:c8:2c:
91:e0:bc:6c:a5:eb:4b:24:ec:77:5d:58:be:83:75:
de:c5:3b:a4:a4:79:76:0b:3b:9d:83:9b:e5:69:cd:
74:6f:ea:b6:f7:c2:33:31:ad:fe:e1:74:d6:1e:18:
82:0a:01:d9:58:67:ae:06:18:ae:7a:2b:7f:f7:bb:
68:ae:18:7b:86:53:f0:b2:23:e6:1c:b5:48:05:27:
7c:46:a3:5b:98:e2:9d:aa:3c:bd:e6:57:5b:4b:b9:
41:58:40:bc:2e:12:a2:13:1a:0b:f8:1c:b4:6c:cd:
7c:ec:a2:e9:a5:6f:0e:00:85:12:26:e6:b6:4b:9d:
4e:8f:55:41:1f:86:8e:7a:ed:4d:91:bc:e1:17:c6:
14:2b:f3:3b:80:f1:df:51:69:67:36:9b:00:f9:4e:
4b:62:5e:f3:97:be:cc:ae:0c:53:a5:b9:a1:67:d9:
18:40:3a:fe:46:ff:3d:63:3d:6c:f3:33:85:c8:5a:
12:15:9a:91:99:41:87:f9:77:a0:b6:92:41:ef:fe:
20:e9:11:a5:a1:bb:cb:53:cc:80:5b:b3:80:be:fb:
83:ef:58:81:d1:96:bb:71:9b:e8:af:9c:8f:58:e6:
a1:aa:e9:0c:20:c4:04:95:6e:a9:19:27:c0:5e:a8:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:89:87:4C:FC:EF:60:33:7E:75:88:4C:ED:81:EF:49:AB:EE:16
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/_Y2Jh0z872AzfnWITO2B70mr7hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
82:96:10:e0:59:67:9c:2b:80:ad:92:ba:a9:d4:8b:16:79:81:
52:06:3b:f5:ea:24:d8:85:25:15:c1:07:71:9b:db:6c:f8:8c:
e4:99:d1:36:f2:0a:28:98:c5:cd:04:ec:3d:1f:48:c3:fb:4b:
a3:d4:83:a8:e2:9b:46:04:2b:62:fb:0c:52:24:05:3a:4d:6c:
cc:31:2f:42:39:d2:1d:33:23:bb:c1:8a:36:45:4c:cb:cb:49:
83:7b:b4:8c:70:da:4d:99:89:3f:50:f1:9e:89:0e:08:44:98:
ee:ad:7d:23:ba:df:d1:7a:5d:ad:7c:9a:a2:a5:9d:47:e9:45:
2f:eb:aa:75:0c:67:df:e8:5e:63:82:5a:de:76:de:d7:71:d9:
35:3d:40:b6:ce:2a:32:60:1a:d3:d4:3c:f7:ee:b9:cc:5f:7f:
d5:ad:c7:9a:e2:95:ce:c2:36:6e:71:c8:96:0f:5b:ae:2a:6d:
d4:25:bb:59:55:03:7f:28:39:de:4e:4d:d6:31:09:ef:c7:87:
c4:b3:fb:b9:70:b0:53:e6:62:df:f4:49:1a:c4:b4:82:10:f0:
12:6f:82:65:dd:ce:c8:27:76:a7:7a:8f:0e:6a:aa:91:c0:8d:
a1:ad:21:f7:27:91:71:09:2d:66:8d:df:12:be:0a:35:76:ea:
f7:71:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org