Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xK7pV5S1otw2EwL_cWWj-pgywp4.roa
File: xK7pV5S1otw2EwL_cWWj-pgywp4.roa (raw, json)
Hash identifier: qUV8kvt0L0LPeDGMSGFrRrfP1OEfFvdz7coR//FlgJI=
Subject key identifier: C4:AE:E9:57:94:B5:A2:DC:36:13:02:FF:71:65:A3:FA:98:32:C2:9E
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0182C518889855704503C9182A424181BFD5
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xK7pV5S1otw2EwL_cWWj-pgywp4.roa
Signing time: Mon 22 Aug 2022 10:28:15 +0000
ROA not before: Mon 22 Aug 2022 10:28:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56414
IP address blocks: 194.26.217.0/24 maxlen: 24
2a12:7800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:18:88:98:55:70:45:03:c9:18:2a:42:41:81:bf:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Aug 22 10:28:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4aee95794b5a2dc361302ff7165a3fa9832c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:e3:27:18:43:65:72:10:74:da:e2:e1:4a:
dc:6f:d6:38:e2:d2:70:2a:1e:82:5a:ce:5a:e9:31:
dc:48:63:0d:67:59:a1:4e:25:b2:bf:03:0c:f8:85:
84:e7:2c:85:d8:a3:18:e8:10:be:54:ba:ae:5a:76:
c4:49:73:e3:86:74:70:bf:cc:79:bc:bf:6f:4f:7a:
0d:d2:71:33:ee:29:96:ac:4f:24:b8:5b:a7:d4:c7:
c2:e7:aa:84:fd:48:76:ce:49:62:c6:9e:2e:65:1c:
c2:b3:83:0e:94:8a:6e:b8:9a:d9:80:14:73:43:ff:
cb:2e:7e:77:0c:79:60:d2:bc:86:0e:68:5e:e0:19:
8a:3f:66:a0:63:fa:e0:bf:a7:15:a0:ac:d1:33:82:
8d:85:8d:32:a0:0f:65:cd:6c:f3:a2:4c:b8:df:9b:
32:cc:ac:c2:0b:54:34:d8:38:5d:00:1a:ef:d8:13:
a7:e2:f6:2b:4e:20:8a:f5:fe:91:f5:ca:32:4e:6d:
23:f5:6f:6a:b1:8d:1f:58:6a:b6:66:f2:80:e2:67:
d4:8e:c3:7b:1e:1c:48:9d:b8:5f:cd:00:51:6e:bd:
53:68:0e:3d:93:ac:c3:0f:10:c7:f5:03:e7:30:da:
7b:55:36:ae:f9:5e:bc:c9:03:e4:44:c6:f1:a7:76:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:E9:57:94:B5:A2:DC:36:13:02:FF:71:65:A3:FA:98:32:C2:9E
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xK7pV5S1otw2EwL_cWWj-pgywp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.217.0/24
IPv6:
2a12:7800::/32
Signature Algorithm: sha256WithRSAEncryption
41:66:e7:9a:7d:12:f0:71:1e:8e:5d:8b:a7:6f:f0:e8:27:c0:
55:4f:09:2e:70:ee:69:6e:36:94:d3:53:27:12:86:6c:c4:0c:
35:cc:51:82:4c:b4:a2:4c:a0:ef:c9:83:78:4b:7e:ed:20:94:
19:30:e8:31:80:02:86:41:8a:45:ce:9f:69:c1:61:2a:90:cb:
85:95:f6:b1:ad:52:ba:35:36:e4:68:ed:66:26:df:c2:ae:62:
4a:87:10:eb:25:30:3e:e0:c0:4b:60:26:3d:c3:aa:ec:fc:29:
f3:02:c9:5a:b6:10:dc:36:a4:bb:c8:42:05:2a:60:8a:b7:2e:
5f:b0:64:7f:21:e5:e9:b6:be:ec:ec:a4:f8:3a:8b:bb:ea:0e:
ae:b8:2f:1f:a9:c7:e3:13:30:74:67:75:31:6f:f2:34:2c:d5:
b9:64:40:a8:10:66:b7:16:f5:c8:4c:3c:48:fb:75:06:82:c7:
bb:05:fb:aa:9a:4f:07:fa:5d:3f:b0:a2:63:0f:46:7d:67:58:
ed:d3:b1:2a:ed:60:61:41:f3:18:e0:f1:77:72:81:d0:50:34:
70:b9:db:6b:b2:66:5e:37:de:d3:8c:c4:d5:85:97:33:8a:68:
42:02:84:e2:3a:da:df:7e:e8:42:aa:3e:c0:c1:d8:56:56:36:
e1:df:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:01 2024 by rpki-client on console-ams.rpki-client.org