Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/NOvYB8NVd276DKeiQPRHlYLJoxs.roa
File: NOvYB8NVd276DKeiQPRHlYLJoxs.roa (raw, json)
Hash identifier: 95VrFI23tEEiJbwBLK6InrPhuhB3Yanigh3cQmnfmHs=
Subject key identifier: 34:EB:D8:07:C3:55:77:6E:FA:0C:A7:A2:40:F4:47:95:82:C9:A3:1B
Certificate issuer: /CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Certificate serial: 0184AA0E8DAE9D5E1E3EFD1C75E0EA1AC09F
Authority key identifier: C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/NOvYB8NVd276DKeiQPRHlYLJoxs.roa
Signing time: Thu 24 Nov 2022 14:33:11 +0000
ROA not before: Thu 24 Nov 2022 14:33:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33853
IP address blocks: 193.26.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:0e:8d:ae:9d:5e:1e:3e:fd:1c:75:e0:ea:1a:c0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Validity
Not Before: Nov 24 14:33:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ebd807c355776efa0ca7a240f4479582c9a31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:8f:5b:87:b1:94:3d:b0:cc:fb:2e:66:9d:
54:fc:c7:ac:3d:40:a7:9c:4d:f0:af:a2:ba:df:de:
96:33:ee:97:c9:d2:f5:73:91:c1:f9:11:69:cb:b2:
46:91:01:e7:7b:e0:5f:ea:1e:d0:74:72:04:14:3a:
42:62:fe:1f:5c:f7:cb:33:76:91:88:53:54:a3:6a:
34:b0:b2:bc:f4:86:60:94:6c:38:42:f9:67:ee:ff:
50:09:52:9e:91:96:a3:10:84:76:cd:9c:98:f9:77:
ae:59:ce:f2:b7:1d:fb:a6:17:cb:f9:71:dc:9c:09:
3b:0a:36:f3:7e:43:ec:5b:12:40:9a:b5:8d:16:f8:
1b:79:8f:d2:fb:84:6c:da:61:e7:8e:88:4a:8f:f7:
02:47:02:c7:b0:94:67:e6:e8:53:58:59:ee:30:75:
2f:f5:7a:7a:9f:56:c4:95:3b:f4:f9:5e:db:c1:4a:
56:c0:dc:48:6a:ef:85:9f:eb:0c:45:b8:6c:9b:f4:
6d:1d:3b:77:b5:42:93:74:8c:6a:14:8b:e1:e4:85:
8d:31:8c:ae:88:70:9b:a4:bf:0a:c9:f8:fd:12:37:
6b:b7:f4:5c:0a:c9:c4:b1:ca:23:c0:4a:80:86:aa:
83:60:27:7c:14:42:53:f2:52:d3:0e:4e:3a:9f:76:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EB:D8:07:C3:55:77:6E:FA:0C:A7:A2:40:F4:47:95:82:C9:A3:1B
X509v3 Authority Key Identifier:
keyid:C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/NOvYB8NVd276DKeiQPRHlYLJoxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ab:1c:46:63:f6:4c:50:bb:f9:39:c6:0f:cf:df:bf:d4:fd:
03:83:a7:ff:ed:06:70:1d:4a:a7:92:06:59:95:b5:2d:db:7e:
20:73:a0:19:7d:b0:9e:35:13:22:f5:48:92:90:2c:90:b7:17:
98:2c:30:3e:78:fc:39:8b:7f:18:7d:2b:80:a1:fa:43:ee:11:
ab:69:24:b0:75:f5:d3:2d:e3:b7:49:b2:a0:ac:a3:a4:eb:51:
68:94:c0:04:1d:ca:51:27:82:05:6b:60:72:ca:ef:ee:29:e4:
99:65:67:d5:f6:1a:85:d7:e8:28:0c:3d:a3:0f:7d:ca:68:5a:
06:fc:00:12:80:d9:84:25:c8:68:c3:64:a9:f2:2b:a0:2c:77:
fc:b3:80:46:a5:fa:48:26:d6:00:79:80:0d:d2:93:54:13:76:
57:5f:f1:a4:52:28:51:0f:b3:cc:f2:ca:8d:63:22:59:49:2a:
e4:90:10:9a:e3:e4:bf:0d:67:0a:79:a0:8b:05:5f:cf:69:8d:
a3:0c:f5:53:ca:71:91:66:00:a8:22:2a:01:5a:f2:06:0e:79:
6f:d3:1a:09:74:78:20:8b:3c:79:d1:bc:da:48:e6:00:eb:d9:
57:d2:91:2a:ab:38:53:0d:c3:72:07:99:a4:bd:77:f2:ee:55:
c1:73:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:24 2024 by rpki-client on console-fra.rpki-client.org