Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/I26sYCEfSmErsKR_oY2dJMnopsw.roa
File: I26sYCEfSmErsKR_oY2dJMnopsw.roa (raw, json)
Hash identifier: XI4hI8et6mITX9uAh80Akfzh/bWm//iYs2TsFqB+NuI=
Subject key identifier: 23:6E:AC:60:21:1F:4A:61:2B:B0:A4:7F:A1:8D:9D:24:C9:E8:A6:CC
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 06DD477E
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/I26sYCEfSmErsKR_oY2dJMnopsw.roa
Signing time: Sat 01 Jan 2022 12:02:30 +0000
ROA not before: Sat 01 Jan 2022 12:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208017
IP address blocks: 139.28.158.0/23 maxlen: 23
139.28.156.0/24 maxlen: 24
139.28.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115165054 (0x6dd477e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jan 1 12:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=236eac60211f4a612bb0a47fa18d9d24c9e8a6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:cb:19:30:f3:be:d5:b2:5a:44:9b:36:c9:
ae:43:43:93:af:30:4e:fc:a3:ff:b1:ee:0f:ae:16:
4b:7c:9c:bb:dd:b4:65:3d:ca:5c:bc:b0:be:75:be:
20:a3:3e:5c:6d:52:2c:89:1c:ab:23:a3:ba:07:9c:
a5:0d:78:19:4c:db:65:28:5e:71:dd:e3:4b:ff:be:
35:17:ad:cd:e7:85:c6:a8:29:59:b6:37:99:4a:59:
ca:1c:88:da:3c:1b:30:53:48:04:a6:83:55:b1:8c:
95:67:5c:9c:08:b1:be:ae:d5:5a:92:aa:55:3b:ff:
65:7a:47:72:f7:8f:bc:00:eb:76:3b:2c:46:33:ff:
4c:6d:73:5c:fa:16:d7:8b:c9:8b:25:87:25:27:c1:
11:35:c2:d2:bc:63:ee:72:33:ea:16:37:27:a5:a7:
b7:19:2a:4c:ca:d3:ec:ef:ea:7c:c2:3a:52:b4:57:
21:70:17:88:b4:df:6d:91:5b:cd:c5:ee:15:20:c7:
1e:99:b9:7b:3f:2a:57:7c:fb:70:69:66:90:22:02:
88:05:ad:1d:6f:e1:49:e9:ce:4b:f0:dc:fe:98:82:
90:98:26:e2:76:52:f1:16:cf:e4:aa:58:21:81:7a:
de:99:c4:e0:8a:e4:49:3f:bf:72:b4:ba:67:b5:28:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:AC:60:21:1F:4A:61:2B:B0:A4:7F:A1:8D:9D:24:C9:E8:A6:CC
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/I26sYCEfSmErsKR_oY2dJMnopsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.156.0/22
Signature Algorithm: sha256WithRSAEncryption
45:95:bf:99:78:a1:e0:42:0c:35:ce:e4:5f:2b:12:9b:42:75:
4f:36:5e:03:27:3b:63:01:c2:a2:ab:b1:2f:91:7a:00:bf:56:
47:e8:b0:f8:05:ea:68:53:f9:0c:a7:af:4c:d6:57:f3:2e:5f:
e1:8c:92:d0:4e:62:6e:41:fb:e1:8f:75:31:24:9f:c8:65:a0:
fa:b3:c8:18:0d:fd:67:89:96:13:4f:5f:c6:bb:f6:03:1f:55:
56:26:07:77:7c:e2:b1:c8:13:63:46:df:a5:7a:45:88:09:88:
b8:ee:e7:fd:e9:75:fa:07:4d:fd:9e:d5:fe:65:99:1a:0b:69:
23:46:39:71:5f:aa:6d:3d:7c:16:4e:55:2f:7b:1c:ea:e7:a5:
52:af:04:1f:32:9b:7d:72:00:e8:41:89:76:37:4b:2b:b2:99:
4d:43:ec:a7:ef:ff:89:ca:aa:66:e2:2c:44:3c:92:f7:a3:71:
d5:6d:81:ce:99:d1:db:40:db:90:bc:58:a2:6d:78:34:a0:cf:
ea:ed:d3:c9:e5:74:d4:6d:67:b2:f6:f4:6c:fd:8e:45:76:cd:
79:f4:16:ba:e1:bc:80:99:77:ec:4b:d2:63:be:20:20:bd:5a:
9b:e3:d8:90:09:2f:5a:73:bf:ba:d9:63:be:04:b1:29:54:04:
60:f0:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org