Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/24eNLP-GoIo7C4e_aD7vixsswJM.roa
File: 24eNLP-GoIo7C4e_aD7vixsswJM.roa (raw, json)
Hash identifier: lSqfnHfyL77H64B3qMqK67d3Ex2bcorsLWzInaYvih0=
Subject key identifier: DB:87:8D:2C:FF:86:A0:8A:3B:0B:87:BF:68:3E:EF:8B:1B:2C:C0:93
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0184C9DBDF8A36BBC81FEFC6F9D0E72D14BC
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/24eNLP-GoIo7C4e_aD7vixsswJM.roa
Signing time: Wed 30 Nov 2022 18:45:40 +0000
ROA not before: Wed 30 Nov 2022 18:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56414
IP address blocks: 194.26.217.0/24 maxlen: 24
2a12:7807::/32 maxlen: 32
2a12:7800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:db:df:8a:36:bb:c8:1f:ef:c6:f9:d0:e7:2d:14:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Nov 30 18:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db878d2cff86a08a3b0b87bf683eef8b1b2cc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:1d:fd:61:47:d9:3a:3e:34:5a:aa:02:48:
4f:b4:fc:54:fd:37:83:61:dd:20:a6:5e:47:40:f9:
64:24:49:27:5d:08:89:96:09:34:82:7d:e0:63:08:
10:1b:19:99:dd:bf:9a:8d:d3:05:e0:ae:dd:ce:6b:
ff:f7:4e:55:48:c8:8c:63:62:d5:12:4a:dd:fb:e5:
8f:97:57:5b:d1:c2:ea:b8:71:da:15:78:45:18:1a:
c5:06:02:d3:0d:2f:b7:83:c4:d4:96:f2:3b:c4:7d:
5f:eb:d3:8c:84:2b:e6:5a:81:89:37:5b:53:b1:cf:
f4:7a:2a:27:1f:28:5d:91:0d:39:84:b5:a5:e4:8f:
29:cf:85:ca:68:b1:0a:f0:63:ba:3d:2a:3f:eb:05:
b1:d8:f6:f8:04:fe:8a:e7:24:f1:b1:ad:5c:7c:77:
13:2a:99:92:46:f0:24:6f:e3:fa:d9:f8:32:79:7f:
d7:bf:9a:28:75:d8:d4:a2:c9:a9:ce:57:7b:43:a9:
89:3c:65:bd:9c:d5:7b:2c:34:7b:3f:7c:21:1f:10:
a0:4e:f2:b4:92:82:d1:e8:60:db:00:0c:48:49:51:
2e:a7:2b:37:dd:e1:56:94:d2:6d:97:52:be:b5:9a:
42:47:61:e8:37:07:01:80:99:80:7a:fa:a7:67:c9:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:87:8D:2C:FF:86:A0:8A:3B:0B:87:BF:68:3E:EF:8B:1B:2C:C0:93
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/24eNLP-GoIo7C4e_aD7vixsswJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.217.0/24
IPv6:
2a12:7800::/32
2a12:7807::/32
Signature Algorithm: sha256WithRSAEncryption
37:f9:b0:12:b1:6e:d6:c6:d8:bc:af:0d:e2:d5:ef:00:4d:2a:
98:60:9e:c0:4f:42:ec:69:d6:52:a9:8d:e8:8d:df:bc:9b:40:
6d:fa:85:c0:ef:43:a1:cc:c2:cd:8e:c4:09:ba:6b:3d:d4:85:
e9:40:f1:69:eb:73:91:0f:9c:b7:4f:5e:5c:87:6c:9a:90:55:
36:cf:aa:7a:af:2c:e1:c3:72:f8:84:7f:d3:db:d1:2f:be:bb:
d6:27:12:31:3f:c4:5f:29:98:81:14:22:9e:0a:1d:66:4d:bc:
5e:95:37:e5:01:40:bc:47:4c:1c:9f:cf:6d:f8:3b:81:f5:d7:
d3:a2:99:bd:79:31:f4:5e:08:ea:61:ba:37:35:dd:d0:25:82:
39:31:99:34:37:df:ca:0f:c1:72:ba:08:10:95:e2:dd:b9:50:
ba:1f:d9:eb:ed:2b:4d:27:0d:6d:09:be:45:75:d0:56:1b:92:
ee:88:38:b7:c3:a7:16:85:c9:bd:79:bb:97:18:37:e8:00:eb:
af:8e:45:57:c3:34:c1:db:06:d6:ea:71:93:be:63:3c:75:5d:
3f:f1:76:79:fb:fb:fc:4c:14:96:d9:b4:0c:6e:3c:28:d5:40:
ed:79:be:2a:48:d9:23:58:ef:3b:b7:21:a7:36:29:bc:35:08:
df:23:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org