Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/z_mJO5ZGCpBzarGxIW-dUCt701g.roa
File: z_mJO5ZGCpBzarGxIW-dUCt701g.roa (raw, json)
Hash identifier: 2ZxGv4WVu2Tz8MW8tBk2Vk+ACB6oBrgnfZoS6mdsBbM=
Subject key identifier: CF:F9:89:3B:96:46:0A:90:73:6A:B1:B1:21:6F:9D:50:2B:7B:D3:58
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 18A8E2BB
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/z_mJO5ZGCpBzarGxIW-dUCt701g.roa
Signing time: Sat 01 Jan 2022 15:07:11 +0000
ROA not before: Sat 01 Jan 2022 15:07:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28990
IP address blocks: 217.26.144.0/24 maxlen: 24
217.26.144.0/21 maxlen: 21
217.26.144.0/20 maxlen: 24
217.26.145.0/24 maxlen: 24
217.26.150.0/24 maxlen: 24
217.26.147.0/24 maxlen: 24
217.26.146.0/24 maxlen: 24
217.26.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413721275 (0x18a8e2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 1 15:07:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cff9893b96460a90736ab1b1216f9d502b7bd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:f8:d9:c5:cc:aa:ba:63:3e:27:9d:13:d1:
60:50:44:9f:07:72:ce:99:0d:dc:41:03:2b:56:4c:
54:ce:04:f8:19:ba:9e:d6:0c:2b:b4:a3:67:5e:f6:
26:60:37:e4:ea:76:10:4a:0f:8d:b4:ee:92:4b:1d:
d1:92:06:5e:55:1b:8c:bc:89:1b:5e:f6:c4:90:a8:
ec:58:36:c8:fd:06:c3:78:0f:da:cd:89:01:ca:0f:
76:08:aa:7d:e2:dc:35:0d:42:97:e2:06:1e:02:e2:
4f:01:a6:e5:14:49:d7:fe:f3:8f:f3:f2:7d:f7:4f:
dc:95:03:58:67:4a:4f:66:17:c5:ee:b5:fc:e5:da:
10:75:7b:b9:9e:6d:bc:cb:55:98:2d:e6:72:81:83:
2b:1d:67:b0:63:31:b2:4e:9f:90:04:e3:e6:11:06:
c4:c5:9a:46:67:67:ef:cf:5e:8d:bd:47:04:85:19:
b1:3f:e9:47:e8:05:4b:75:60:1d:4a:10:98:d1:1f:
9d:10:02:0d:fc:9d:a2:67:c6:6a:a8:6b:d6:46:9e:
51:75:93:1c:65:de:6b:57:a9:0b:87:59:0c:71:30:
c7:10:ef:03:08:c3:75:f1:e1:ad:97:25:bc:83:67:
df:53:3b:d6:bb:a8:50:71:c1:f4:aa:f5:37:3c:c1:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:89:3B:96:46:0A:90:73:6A:B1:B1:21:6F:9D:50:2B:7B:D3:58
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/z_mJO5ZGCpBzarGxIW-dUCt701g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.144.0/20
Signature Algorithm: sha256WithRSAEncryption
96:f7:a5:ae:6f:98:e1:2c:a5:5f:26:8a:00:02:11:5c:e4:38:
6c:f8:7c:f5:7c:39:81:85:22:78:51:1b:c1:0c:e1:fa:e1:f1:
f0:80:84:e9:87:03:f2:3a:0a:35:ea:e9:1e:fe:35:7d:7c:c1:
19:53:e5:36:22:49:b4:49:77:fb:bc:36:e6:a6:e5:9f:05:13:
11:b3:06:95:99:ac:b4:11:b4:ab:b0:bf:23:35:a4:16:51:3b:
f6:05:b0:2a:cb:d7:f7:e4:a4:9b:49:f2:fc:bf:d6:ec:03:0c:
1e:83:ff:bb:cc:48:3d:81:3c:75:db:b3:14:c4:82:de:7c:8a:
a8:7c:94:51:a9:33:03:0f:80:eb:7a:7b:27:47:97:d3:3e:48:
7a:2d:61:42:6b:3d:08:26:eb:c7:29:9f:e4:a2:cf:c5:21:d7:
5d:5f:cf:87:1f:c1:0a:37:f1:78:21:cf:29:36:c6:1e:26:05:
2e:ca:38:07:a9:83:5e:9a:f5:45:3a:e8:c5:b6:e9:1c:4d:c1:
a3:5e:75:90:44:36:23:82:9c:fc:0b:bf:11:af:0e:6b:50:d3:
d3:27:70:ea:e6:f7:cc:34:e1:5c:41:f4:56:cf:37:4d:22:3c:
39:56:42:c1:31:2f:3f:d4:29:a3:a5:47:ba:61:67:34:6a:18:
0f:24:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:19 2023 by rpki-client on console-fra.rpki-client.org