Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/ivgMMvSXuWYjHoHeViC4LN8n4yk.roa
File: ivgMMvSXuWYjHoHeViC4LN8n4yk.roa (raw, json)
Hash identifier: 2Xm5vx3MpwNKzCK/l1Dur1dgUIoqFOxF2lCPNtCCQyI=
Subject key identifier: 8A:F8:0C:32:F4:97:B9:66:23:1E:81:DE:56:20:B8:2C:DF:27:E3:29
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 09FA66
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/ivgMMvSXuWYjHoHeViC4LN8n4yk.roa
Signing time: Mon 04 Apr 2022 21:19:28 +0000
ROA not before: Mon 04 Apr 2022 21:19:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653926 (0x9fa66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Apr 4 21:19:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af80c32f497b966231e81de5620b82cdf27e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:42:4a:c1:dd:b2:7c:9e:f5:07:f4:b7:1e:
d0:cb:05:0b:d7:72:bb:dc:59:fd:6a:bf:84:1a:e9:
fd:56:cd:29:76:8c:6c:db:13:d0:53:36:aa:8d:4d:
66:73:6e:25:ba:fb:84:6d:14:95:0f:71:85:5d:c6:
1c:b4:0d:95:16:3e:e7:9b:90:62:8e:3a:48:17:9a:
80:62:3d:e5:6b:ab:3c:00:46:98:e1:bc:77:9c:8c:
d7:c6:20:fc:3c:f6:c2:53:8b:23:3d:74:32:a5:0a:
ae:b5:c8:d0:92:84:a4:70:c8:70:65:1f:8a:b8:a5:
ca:6f:a0:dc:a0:bf:a1:f6:26:17:7b:c0:26:f3:45:
6d:9b:d0:bf:44:19:77:c8:48:f2:8a:b7:da:87:17:
b9:8a:50:9a:76:33:49:96:84:da:79:23:ed:8e:64:
e0:d6:ad:a0:4e:92:90:82:ff:e2:08:d1:00:2c:49:
86:8f:43:1e:57:51:ea:c4:eb:5a:92:36:e1:14:25:
fc:c0:cc:d6:cf:71:33:42:ec:c7:a1:08:1e:bf:5d:
02:49:3b:4f:2c:27:cd:99:04:51:89:78:d6:fc:b8:
22:7a:cb:83:a0:12:57:11:b8:2d:2f:97:d3:21:a8:
7e:46:1e:e7:1a:24:a6:40:87:91:6f:23:6d:e8:a3:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:0C:32:F4:97:B9:66:23:1E:81:DE:56:20:B8:2C:DF:27:E3:29
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/ivgMMvSXuWYjHoHeViC4LN8n4yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.21.0-193.26.22.255
Signature Algorithm: sha256WithRSAEncryption
37:d8:09:8d:f2:85:d6:47:cd:46:ba:0d:89:5a:38:60:2a:bd:
61:07:02:c6:56:9f:a2:0a:54:76:98:d5:7b:2b:15:3f:84:93:
ac:6e:7e:87:69:48:69:21:b1:61:21:3d:83:eb:83:2a:48:7e:
c5:d8:01:95:f8:d6:ce:ad:4b:b3:22:4b:1a:70:0c:4d:ee:90:
8e:85:79:3f:55:39:e1:57:a2:8b:3d:97:36:70:ba:df:d3:2b:
a1:8f:66:e4:c0:15:19:ff:e5:8e:c3:60:27:9d:e1:a2:4e:19:
85:eb:96:31:80:5c:de:5e:e9:fd:e2:df:71:c9:9c:61:e7:67:
3f:92:f2:1a:07:99:b5:bb:6d:cd:a6:52:65:a2:de:e9:2b:cc:
ed:af:1a:14:41:97:af:39:3f:35:0b:a1:2d:e2:5d:80:76:e0:
89:ce:a1:b4:7b:38:07:78:34:af:10:65:8b:dd:09:59:df:b0:
ab:e9:ff:d4:88:84:44:39:d6:31:0f:00:22:d8:4b:f3:b4:d9:
2d:b0:90:2c:9b:53:ad:db:e8:5a:b8:9b:ea:b4:a8:eb:98:30:
f8:0e:ef:84:9d:66:db:8e:c7:b6:f6:3e:ee:fa:c3:c1:dd:80:
2d:ca:95:44:02:c2:03:64:70:21:92:89:30:95:f5:e4:e4:af:
5f:94:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org