Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/BlH693DWLboTjvefytibqb0cgvQ.roa
File: BlH693DWLboTjvefytibqb0cgvQ.roa (raw, json)
Hash identifier: GypPPBYqfiL8B/v1/qWJzIv0uvFPlOgzoDj8rC8Ar7Y=
Subject key identifier: 06:51:FA:F7:70:D6:2D:BA:13:8E:F7:9F:CA:D8:9B:A9:BD:1C:82:F4
Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial: 0184EC58013BE9B5EE34ADFE86F1E7702E74
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/BlH693DWLboTjvefytibqb0cgvQ.roa
Signing time: Wed 07 Dec 2022 11:28:21 +0000
ROA not before: Wed 07 Dec 2022 11:28:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50090
IP address blocks: 217.74.28.0/24 maxlen: 24
217.74.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:58:01:3b:e9:b5:ee:34:ad:fe:86:f1:e7:70:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Validity
Not Before: Dec 7 11:28:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0651faf770d62dba138ef79fcad89ba9bd1c82f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:4f:9e:1c:ef:35:fb:83:04:d1:c5:a9:07:
a1:db:ca:96:7b:0a:3a:28:53:3f:98:f4:ea:b3:60:
b0:c8:48:87:28:6a:17:dc:e4:71:f5:b7:6a:ee:81:
2e:72:3d:6c:6e:6a:c6:b1:4f:fb:44:8e:e0:4b:a5:
b3:ed:b1:95:05:bd:23:32:5c:81:e3:dd:2b:75:af:
39:09:6e:1e:be:c1:1c:ea:f0:58:6a:dd:87:fe:99:
56:4c:00:a8:90:aa:0e:04:43:77:eb:4c:3f:59:13:
8d:7d:71:fb:e1:cc:2e:10:49:ef:cd:95:fc:44:5a:
40:4e:ef:c9:a2:01:4a:c7:25:42:06:41:62:88:e6:
fb:1e:d6:b5:ee:06:1b:ed:ab:b3:82:14:7e:72:01:
9f:ab:b6:f8:86:dd:2b:25:e4:51:16:82:93:eb:10:
ae:ed:a6:93:6e:22:cf:c8:8e:36:3f:15:9f:b0:29:
3d:32:02:fd:6d:61:de:ed:90:38:f2:12:21:4a:c1:
d0:f0:0d:ce:a4:0f:96:f6:de:68:4c:f4:68:e4:8d:
24:2b:80:de:25:77:79:9d:fc:2c:a9:4f:88:0a:74:
49:b9:73:9a:5e:43:52:94:78:88:78:10:be:76:e7:
23:09:59:9f:2a:db:12:07:6d:19:bc:d5:84:4e:ce:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:FA:F7:70:D6:2D:BA:13:8E:F7:9F:CA:D8:9B:A9:BD:1C:82:F4
X509v3 Authority Key Identifier:
keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/BlH693DWLboTjvefytibqb0cgvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.26.0/24
217.74.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c3:aa:43:3b:ae:99:87:65:c9:98:7d:7a:34:ba:9a:67:bb:
64:03:d8:fc:ea:03:6e:4c:08:91:e1:18:e9:3c:b1:ec:8c:94:
2d:f1:70:ca:ff:ea:0a:7d:5c:5a:f1:ad:cd:4e:b4:0f:6a:15:
ce:e7:c7:05:03:b1:a3:ad:81:a7:09:4c:21:31:ea:36:83:96:
49:39:13:90:e3:a7:df:0a:d9:24:64:20:47:56:91:31:cd:8c:
f7:bd:98:c1:4a:08:8b:ae:51:dc:df:1b:8e:a1:88:e2:21:ed:
5b:02:09:af:34:97:4a:ce:03:dc:35:5e:55:07:67:dc:09:e9:
87:4c:32:1f:b7:f9:65:91:03:3b:75:14:b9:5a:58:39:61:93:
3c:bd:86:d7:67:5e:d9:85:45:8a:6b:06:5f:77:62:3f:2a:52:
b8:2a:df:67:fd:20:25:b9:0e:33:c9:82:bb:8b:02:bb:f8:31:
e5:fb:59:93:fa:ab:ed:43:8f:0c:ec:50:c9:bb:28:9e:7a:96:
78:20:fd:e9:40:26:0b:9e:05:37:6e:56:b1:af:97:88:ae:d7:
ab:41:71:82:76:a7:46:c0:9c:9c:6b:35:aa:d3:cf:e9:65:0c:
7a:4f:13:96:a4:71:01:1a:eb:25:06:e0:12:e3:3c:f3:b6:53:
0f:9d:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org