Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/PD0FA58CjWt6LPCaet1bl6v5Kic.roa
File: PD0FA58CjWt6LPCaet1bl6v5Kic.roa (raw, json)
Hash identifier: s8k+BYk7YND3VD8nHNzaVOVex9ws0vrZgDYLFoScXdM=
Subject key identifier: 3C:3D:05:03:9F:02:8D:6B:7A:2C:F0:9A:7A:DD:5B:97:AB:F9:2A:27
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 85A476
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/PD0FA58CjWt6LPCaet1bl6v5Kic.roa
Signing time: Sat 01 Jan 2022 01:53:11 +0000
ROA not before: Sat 01 Jan 2022 01:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8758390 (0x85a476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Jan 1 01:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c3d05039f028d6b7a2cf09a7add5b97abf92a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:23:f9:38:4c:ca:8c:f2:73:c6:7a:b9:b4:
cd:a5:5b:db:05:c4:31:6a:84:2e:70:3a:2c:60:2f:
b2:de:7f:48:17:e5:ba:49:bc:42:df:7e:d6:d3:5e:
f0:49:ff:28:f2:8d:39:83:82:fa:9b:38:47:2b:4f:
91:36:29:dd:a9:13:aa:16:e3:3f:02:2e:c8:d5:10:
21:9a:25:bc:bd:d8:7d:90:e0:ab:13:94:82:22:bf:
66:44:3d:27:4c:c8:70:0e:8c:6f:c8:2c:d0:ec:6e:
ea:89:9f:f0:c3:7f:46:46:58:ab:ad:1b:1c:7b:60:
12:0f:ac:53:6e:e8:cc:bf:6e:e7:a4:66:2e:0e:a5:
24:47:32:7f:f8:f7:c3:66:25:1f:0b:de:f4:f4:14:
cf:6c:ec:f5:db:c5:77:28:2b:8a:57:9b:6f:10:74:
08:da:f3:15:b7:98:b5:a6:f2:d7:af:c9:eb:43:9f:
da:fd:c1:59:2c:be:c7:b7:83:47:68:1f:d5:05:ab:
ea:9f:4d:dc:b8:bc:24:03:c8:27:ab:90:12:8e:73:
67:ca:48:6d:a2:72:9d:54:27:42:45:62:d2:28:83:
ca:53:3b:51:e4:14:37:35:81:c6:24:f5:d9:be:85:
62:d7:12:98:a1:71:25:3c:37:f5:d8:17:fb:38:e3:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:05:03:9F:02:8D:6B:7A:2C:F0:9A:7A:DD:5B:97:AB:F9:2A:27
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/PD0FA58CjWt6LPCaet1bl6v5Kic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f0:32:9b:c1:fa:f2:e5:31:f6:c5:47:ac:3e:b9:17:70:9e:
0c:61:fb:c3:0f:86:68:b5:5a:33:c8:13:78:5f:79:ba:3c:be:
bf:bd:26:41:7c:8d:d3:cd:84:fe:e9:6a:6c:ba:9a:bd:88:49:
89:c0:5e:24:7d:43:cb:5e:ef:39:6b:6d:16:2d:61:82:d3:51:
93:c7:8f:56:cf:43:00:a7:ca:77:98:8e:59:5b:0a:33:a8:7c:
49:be:51:f8:e1:e7:94:3e:7a:10:89:ca:5d:06:34:06:04:20:
6c:f1:26:f8:ba:0d:94:b0:47:80:17:93:17:fa:18:a5:11:3b:
7f:b5:75:e9:ba:a4:55:55:38:1c:f6:21:72:e9:09:63:66:37:
c2:21:69:6b:97:42:78:ae:99:b0:74:23:78:c3:fa:bc:7c:51:
b1:aa:e2:5b:29:df:0b:7a:10:d9:66:91:fa:f1:32:08:99:35:
6c:28:8f:56:21:7d:41:88:88:e4:2c:f6:8f:aa:06:12:34:5f:
d7:1c:76:f4:f0:3e:b9:95:c5:07:17:ad:34:39:10:cb:69:da:
03:c8:20:0f:01:1b:f9:c9:ab:9f:a6:b9:72:54:e7:02:2f:a4:
1f:92:cd:5b:7c:95:51:ee:87:a0:f3:28:6b:73:22:f9:8e:f3:
b4:85:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:54 2023 by rpki-client on console-ams.rpki-client.org