Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rs8Z30diqSryp4b4jerdIC36Yzk.roa
File: rs8Z30diqSryp4b4jerdIC36Yzk.roa (raw, json)
Hash identifier: pwqtrGhIV9/7dla2tPBjTmZwO3LfcNvsMStl1TeOB1g=
Subject key identifier: AE:CF:19:DF:47:62:A9:2A:F2:A7:86:F8:8D:EA:DD:20:2D:FA:63:39
Certificate issuer: /CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Certificate serial: 0735262E
Authority key identifier: AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rs8Z30diqSryp4b4jerdIC36Yzk.roa
Signing time: Sat 01 Jan 2022 15:06:45 +0000
ROA not before: Sat 01 Jan 2022 15:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 194.29.74.0/23 maxlen: 24
194.26.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120923694 (0x735262e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Validity
Not Before: Jan 1 15:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aecf19df4762a92af2a786f88deadd202dfa6339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:5d:5a:1a:0a:eb:ad:04:7d:7a:64:6f:a7:
75:d3:32:0b:bf:7d:61:cd:54:64:35:65:79:42:f1:
6d:a5:83:70:63:3c:44:d6:d2:a7:5c:e4:27:dc:b0:
d1:ae:25:5f:eb:8b:c0:08:eb:02:2d:c9:37:55:08:
0a:51:08:40:62:5d:f2:d8:8b:c1:fe:4d:8c:0e:7e:
ee:7c:23:c6:eb:c7:ad:82:8b:0c:33:96:ac:74:14:
e8:19:c7:a0:67:ad:0b:0a:18:5c:99:b7:0f:e1:01:
d6:5d:c0:f5:e0:37:24:22:c9:9e:62:17:ad:1c:3c:
33:f0:a8:dd:e0:a1:71:f5:c2:e7:a6:15:3c:75:27:
cb:a8:83:67:57:78:f1:3f:87:74:a8:dd:22:6c:01:
6e:2d:6f:de:0e:bf:dd:32:35:69:85:65:d9:7a:c2:
e8:3b:20:71:05:59:d2:63:76:12:c7:aa:0b:85:e0:
34:61:66:3b:05:20:9b:ed:53:0c:1e:50:47:2d:98:
81:d1:81:c3:8e:f9:3b:74:d3:96:d9:41:a7:5c:d2:
1e:77:26:38:ed:57:82:3c:35:c1:b8:6a:0e:04:ea:
f9:4e:78:80:ba:b2:ea:d5:14:a3:73:2c:49:67:57:
c1:89:ae:69:38:08:d8:b2:cc:59:ec:44:04:69:05:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:19:DF:47:62:A9:2A:F2:A7:86:F8:8D:EA:DD:20:2D:FA:63:39
X509v3 Authority Key Identifier:
keyid:AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rs8Z30diqSryp4b4jerdIC36Yzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.150.0/23
194.29.74.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:34:8a:99:52:d6:92:ea:32:5a:2c:0f:04:41:42:14:01:25:
7d:6f:1b:1c:ea:f2:29:bd:a9:30:c9:ad:bf:53:bc:b6:03:e9:
56:4a:05:ad:f3:79:71:f3:1f:be:d6:42:95:9a:80:58:9e:49:
97:5a:c1:44:6a:8c:35:b1:08:b7:d9:64:f0:ed:25:96:d4:f7:
4a:33:80:85:a5:7d:17:7f:57:97:a6:71:fb:3a:b4:2a:3a:9b:
a8:10:65:c7:72:d2:2f:22:64:ef:46:7a:60:ac:1d:00:97:28:
60:f3:e0:0c:62:7d:21:16:2b:8c:1b:5a:48:20:ba:91:64:63:
09:06:d2:de:f6:31:2f:a8:17:43:61:7c:64:b3:8d:c1:c5:94:
ad:af:bc:d5:10:10:8c:35:50:ce:5e:87:9c:84:4e:48:48:2b:
db:8b:e7:ac:7c:0b:7d:56:8e:50:5d:68:8a:eb:b1:20:f0:cb:
3c:eb:8c:cd:60:19:16:5d:9a:31:5e:92:f0:31:f4:0f:3a:0d:
f2:0f:69:19:d1:70:3f:48:86:d5:a5:5a:70:77:ca:0d:4a:a2:
15:ab:fa:7c:a3:46:d7:60:68:9f:6b:92:ed:73:97:64:42:62:
d3:78:af:e4:67:88:dd:ab:fc:2d:83:a1:ca:13:bc:a3:93:fd:
87:0a:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:56 2024 by rpki-client on console-fra.rpki-client.org