Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/JdVzgpuMH6wATR5cam71VH_E5Zk.roa
File: JdVzgpuMH6wATR5cam71VH_E5Zk.roa (raw, json)
Hash identifier: Llttf+BZAvilJtYPXtxaSw8R8S+cDXGOG7tYz/gtQtY=
Subject key identifier: 25:D5:73:82:9B:8C:1F:AC:00:4D:1E:5C:6A:6E:F5:54:7F:C4:E5:99
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 8790AF
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/JdVzgpuMH6wATR5cam71VH_E5Zk.roa
Signing time: Sat 01 Jan 2022 00:56:15 +0000
ROA not before: Sat 01 Jan 2022 00:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 194.26.217.0/24 maxlen: 24
2a12:7800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8884399 (0x8790af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 00:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25d573829b8c1fac004d1e5c6a6ef5547fc4e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:84:0c:0a:ae:d7:a7:91:de:a5:53:ab:66:
68:52:a2:51:69:34:14:cc:d2:41:d2:21:0a:59:71:
6b:b2:9f:2b:81:6a:f5:6e:ea:f1:af:19:d0:81:f2:
b7:4b:33:04:a2:f6:f5:77:33:5d:d9:3f:15:53:a7:
01:13:ac:59:79:73:03:55:41:4c:ab:9e:6a:3a:4e:
dc:80:0b:b5:43:96:4e:45:24:ae:66:98:fd:d5:10:
61:56:3a:a1:01:10:e4:41:00:59:00:42:ae:d8:cb:
b3:99:58:0a:2f:a7:41:3c:60:f7:bf:7d:49:6b:20:
c9:df:dd:ba:6a:b1:b6:31:d4:bc:05:11:ce:f0:c8:
17:ac:ba:3b:8c:4b:c0:1f:69:33:1a:39:3c:1d:b3:
c5:97:64:a6:f3:56:f0:cd:dc:4d:5f:36:bc:57:1b:
ad:31:33:78:21:8f:71:96:76:f0:8e:1b:c6:c1:b7:
58:f1:61:76:4d:79:f0:82:25:13:07:d8:f8:1e:37:
eb:3f:ea:25:b9:7c:23:01:19:b0:cb:d5:63:a6:06:
bc:97:78:fe:d5:b8:54:0f:a8:c5:d4:1b:f9:c9:71:
3b:48:af:38:7b:10:b5:46:97:c1:0a:f0:fa:39:99:
40:18:06:65:91:62:1e:55:0a:ea:5a:ab:d9:a1:03:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:73:82:9B:8C:1F:AC:00:4D:1E:5C:6A:6E:F5:54:7F:C4:E5:99
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/JdVzgpuMH6wATR5cam71VH_E5Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.217.0/24
IPv6:
2a12:7800::/32
Signature Algorithm: sha256WithRSAEncryption
7e:7a:6d:0d:ae:db:56:ec:95:df:e4:01:b8:ec:af:0c:2c:49:
73:6d:e1:4f:89:f3:0f:ba:ba:57:e0:4e:81:f4:88:29:b9:98:
f2:e8:af:59:37:2c:2d:86:1c:99:ed:0f:3c:88:97:b2:fe:ff:
65:6c:f7:c4:dc:30:b5:8d:5b:af:1c:1a:14:fb:0f:55:09:ff:
c3:58:86:9d:42:61:8a:bf:09:15:ca:70:b8:7d:93:14:3a:0e:
2c:ab:b9:e6:33:2a:48:f9:2b:19:4a:cb:a7:49:d6:e3:08:95:
e2:ca:bb:b6:0b:c9:af:1d:a8:5d:28:78:d4:e4:32:6c:c1:96:
8a:17:bf:cd:d5:f8:a7:50:dd:12:15:b6:de:b8:12:a4:0c:0f:
4a:7a:ef:cf:8e:e5:2a:86:7f:f9:82:83:14:81:5d:8b:3b:a0:
35:fb:2b:83:9b:8b:ce:91:be:c3:a1:a6:9f:d7:af:52:56:56:
47:06:68:78:63:25:a9:5d:60:7e:5d:ca:ab:dd:5d:f6:ca:cb:
78:43:2f:2e:46:5a:aa:4c:dd:5e:84:aa:14:09:3b:f4:06:bf:
eb:68:3c:5e:2e:0b:97:a8:c0:a4:f5:04:f8:af:ef:36:7e:fb:
62:16:da:74:25:52:00:75:23:8d:25:bf:53:a5:20:87:a7:ee:
62:e5:15:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org