Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/0R0BXftDXTiq0eFd8pyKYoEuixY.roa
File: 0R0BXftDXTiq0eFd8pyKYoEuixY.roa (raw, json)
Hash identifier: Ahojl3uOXqmFAGuwwWP9+nnDPCr0jkPxDgY/zkAUnys=
Subject key identifier: D1:1D:01:5D:FB:43:5D:38:AA:D1:E1:5D:F2:9C:8A:62:81:2E:8B:16
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 01843E34AA9268EE33D48BDA2A0BE5C5AECD
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/0R0BXftDXTiq0eFd8pyKYoEuixY.roa
Signing time: Thu 03 Nov 2022 15:55:49 +0000
ROA not before: Thu 03 Nov 2022 15:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:34:aa:92:68:ee:33:d4:8b:da:2a:0b:e5:c5:ae:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Nov 3 15:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d11d015dfb435d38aad1e15df29c8a62812e8b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:93:db:02:dd:67:41:2a:88:5a:a5:11:a8:
9f:bf:df:db:65:df:f0:5a:0f:2f:ae:3f:67:cb:45:
ea:10:28:52:38:4a:63:1f:c3:a4:f5:d2:6a:4d:d6:
88:02:2c:63:3d:94:05:2f:69:7b:85:18:06:cf:e6:
24:9c:4c:86:59:23:ad:4b:6a:36:fb:f8:b3:8d:0f:
12:88:94:3f:78:2d:7c:c2:a6:23:4c:e8:8d:44:dc:
e4:b9:9c:88:9d:91:aa:af:27:5b:ad:d3:14:80:b3:
32:b0:e3:1a:4e:d2:16:db:f5:60:e7:54:ea:71:19:
87:9d:13:39:56:a1:8a:70:b3:4f:bb:8d:93:2e:06:
f7:dc:28:91:5d:a7:da:77:19:48:e0:e3:cb:d2:b9:
11:df:d7:e5:cf:50:c8:e6:97:53:b4:e4:89:55:97:
48:8e:f0:93:d9:17:20:ec:b7:c6:5e:f3:79:d3:59:
85:67:79:6f:79:68:ed:57:7f:05:3e:d0:5e:36:be:
d9:18:bc:4b:45:3f:31:40:4f:d3:b4:b6:07:f5:ca:
2f:86:a2:86:7a:86:71:d4:b0:37:86:89:a8:62:62:
cb:5f:7c:97:b3:9a:35:36:86:a2:2b:4e:2c:80:64:
0f:30:23:7c:34:26:44:ec:3f:9d:66:7b:a8:be:47:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:01:5D:FB:43:5D:38:AA:D1:E1:5D:F2:9C:8A:62:81:2E:8B:16
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/0R0BXftDXTiq0eFd8pyKYoEuixY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a2:47:3b:be:94:b0:0e:1b:e2:47:97:e3:0c:64:90:0c:0c:
e4:a3:77:ec:a8:a5:62:89:b1:37:63:40:1b:61:42:c2:8f:10:
b0:8a:16:08:81:e1:45:bf:fc:51:ef:f6:e0:2f:15:cc:ed:00:
1c:90:12:fd:82:dc:4f:67:da:f9:06:2e:24:f1:46:0e:69:d4:
32:fb:ee:41:67:fc:16:c5:32:44:06:31:67:b9:2f:80:92:9f:
ce:27:2d:94:b2:5d:a3:49:58:38:e9:a6:dc:ae:08:d4:92:1c:
0c:77:b1:99:d7:97:ae:66:1b:2d:7d:73:9e:bb:f3:39:13:4b:
b3:78:f3:74:57:cc:c0:ed:ec:50:1f:a0:67:4c:60:1c:9f:d1:
e4:bf:8a:cb:3c:43:2d:cc:11:27:45:b7:44:bb:8f:57:75:43:
71:1f:91:60:bc:0a:f3:a9:60:3c:56:52:fd:9b:1f:8d:1b:0f:
7b:7d:0a:ea:5c:c2:5d:d8:9d:81:a7:19:09:61:78:7f:a7:92:
7a:a3:21:91:7f:9e:01:ba:dd:ad:1f:50:68:df:06:c0:5f:da:
d4:4b:dd:6d:4c:c0:e4:79:54:c2:20:2d:e7:30:43:59:98:58:
b4:7a:db:2e:36:79:be:3d:dd:e3:8a:1c:43:98:50:ab:0a:31:
d1:f6:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:54 2023 by rpki-client on console-ams.rpki-client.org