Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/XQrl-y_ajI90f8a4B2XQdaJYrsw.roa
File: XQrl-y_ajI90f8a4B2XQdaJYrsw.roa (raw, json)
Hash identifier: kyQ//MQ1SRUSR+ZsRaIuJs8pSWWC73q2sciVzHMCHBw=
Subject key identifier: 5D:0A:E5:FB:2F:DA:8C:8F:74:7F:C6:B8:07:65:D0:75:A2:58:AE:CC
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 012F90
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/XQrl-y_ajI90f8a4B2XQdaJYrsw.roa
Signing time: Thu 31 Mar 2022 13:27:31 +0000
ROA not before: Thu 31 Mar 2022 13:27:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60720
IP address blocks: 185.26.195.0/24 maxlen: 24
185.26.194.0/24 maxlen: 24
185.26.193.0/24 maxlen: 24
185.116.202.0/23 maxlen: 23
185.116.200.0/24 maxlen: 24
2a00:8d60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77712 (0x12f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Mar 31 13:27:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d0ae5fb2fda8c8f747fc6b80765d075a258aecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:a7:0b:45:e5:2c:19:96:0c:02:39:83:bd:
45:e2:59:e0:cf:80:42:5e:60:d0:ef:cf:96:69:df:
ae:8c:10:21:22:bb:f8:26:d3:39:68:80:bc:08:b8:
8f:29:9a:b1:fa:cf:8d:35:16:19:23:c7:4b:b7:b2:
12:6b:6e:ba:e8:2c:43:1b:93:5f:ab:f0:96:d8:09:
81:30:6a:63:de:d4:13:a9:21:ea:f6:90:5e:86:b6:
6a:6a:cd:9d:93:da:96:3b:9b:1f:0a:06:52:a2:b7:
8a:84:4e:77:44:47:64:c2:f9:96:eb:a5:ea:ea:bf:
19:e4:84:b8:4d:bf:d7:c8:4b:ae:7b:b0:d4:c4:77:
55:c3:0a:44:08:57:73:44:fc:3c:fc:13:2a:c7:53:
12:66:60:89:8b:f6:70:ac:1d:3d:87:f9:e4:06:c3:
59:95:da:71:5b:39:f8:bb:88:c3:b6:9e:f2:eb:63:
3b:bb:b6:1d:bb:29:f7:d6:c5:a0:79:b0:e5:77:e9:
39:61:e7:48:e6:a0:a9:d7:da:6d:f7:81:10:be:c1:
08:e4:80:62:48:40:ef:83:b1:b1:4e:25:60:66:14:
9a:e3:c8:ba:b4:2a:84:53:0b:42:09:03:38:f4:8a:
95:39:c7:a2:99:5a:22:b8:b1:69:a9:51:fd:ee:63:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:E5:FB:2F:DA:8C:8F:74:7F:C6:B8:07:65:D0:75:A2:58:AE:CC
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/XQrl-y_ajI90f8a4B2XQdaJYrsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.193.0-185.26.195.255
185.116.200.0/24
185.116.202.0/23
IPv6:
2a00:8d60::/32
Signature Algorithm: sha256WithRSAEncryption
26:87:89:57:3d:66:c1:d0:2b:d4:a7:7c:47:d0:db:3d:ce:12:
af:05:98:e0:c6:48:53:58:74:66:b2:8b:2e:e0:9a:c7:10:ee:
49:e6:27:07:4c:cf:bb:d6:12:71:a9:56:89:75:b0:0b:8b:26:
10:49:71:64:e6:30:12:53:8b:8b:0b:ee:b8:64:19:09:48:a8:
ea:82:2f:07:5f:73:31:00:66:70:a4:a7:e4:23:83:c4:92:03:
d1:6a:69:ab:98:14:d7:44:6f:cc:6d:58:b7:9c:43:f7:4f:cc:
05:fa:e4:f4:71:ed:7d:c7:82:d1:64:c7:73:6c:9d:38:9e:25:
31:e8:6f:9a:2a:93:ef:8b:3f:b1:a1:20:f9:ab:e1:a3:a6:51:
21:7f:35:59:87:8d:1a:99:de:1b:54:43:f7:bd:d5:02:e7:b2:
40:8a:62:8c:0a:07:eb:86:fd:07:e8:26:4c:7e:0f:e3:b9:a9:
65:12:46:38:50:f2:7e:2a:c9:78:73:6e:5d:fd:5c:01:c4:35:
b7:86:ab:bd:f1:a0:cf:bd:33:52:69:82:76:06:e2:e0:6a:b1:
4f:a1:b9:41:fb:67:3c:4e:dc:46:a8:81:72:67:53:98:28:c1:
99:13:fe:c9:d1:1a:d3:c5:85:5f:06:e7:26:f7:ad:81:de:9d:
bc:96:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:52 2024 by rpki-client on console-ams.rpki-client.org