Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/X6XS1JnkW-II-wejaqcCVm3sK5o.roa
File: X6XS1JnkW-II-wejaqcCVm3sK5o.roa (raw, json)
Hash identifier: r3RHssN6ABrqV1rqg72AN4VlotRC7vrJkmngVHdoBaw=
Subject key identifier: 5F:A5:D2:D4:99:E4:5B:E2:08:FB:07:A3:6A:A7:02:56:6D:EC:2B:9A
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 03C76D3B
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/X6XS1JnkW-II-wejaqcCVm3sK5o.roa
Signing time: Sat 01 Jan 2022 07:59:24 +0000
ROA not before: Sat 01 Jan 2022 07:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31192
IP address blocks: 193.26.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63401275 (0x3c76d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Jan 1 07:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fa5d2d499e45be208fb07a36aa702566dec2b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:78:b4:df:bf:80:7c:b3:6e:b6:5a:4e:dd:
76:90:9a:60:e8:85:d2:67:3a:22:66:fc:9c:c7:76:
fe:49:a4:a5:73:cd:c0:f0:b1:0d:f4:49:bf:f9:e6:
08:5f:df:53:88:6b:c5:8b:06:2e:0c:7b:7f:64:db:
30:00:98:da:d4:3d:06:18:3b:a8:66:8f:0d:25:63:
d9:54:49:45:a9:11:29:30:0b:41:a3:fb:d6:9b:76:
53:fb:5f:4d:7b:6d:94:38:b6:b4:31:ca:01:88:bf:
1a:3d:d3:40:a1:e1:96:71:a6:12:0b:75:95:2b:eb:
e6:8d:68:62:d9:66:b0:bd:63:43:09:f1:64:ea:01:
eb:b2:2e:2b:c9:52:b9:09:a3:33:29:85:77:73:14:
d6:5b:9b:4d:a9:c8:4a:b8:e1:11:ab:7b:68:7a:65:
50:23:a5:69:fb:52:93:47:8a:e9:0b:27:c0:e7:19:
68:38:2c:5d:a9:fc:02:f9:ea:2c:9e:59:2c:15:d0:
d3:2b:d2:56:a8:3e:13:49:30:fc:5a:8b:f1:5f:6c:
9f:31:2b:bd:c6:72:a7:2a:11:b3:83:43:a1:31:75:
5e:89:6b:15:7d:74:0b:50:f9:32:1c:67:4c:cb:db:
e6:c9:ef:d2:43:51:1f:13:d2:f8:24:26:55:15:b9:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:D2:D4:99:E4:5B:E2:08:FB:07:A3:6A:A7:02:56:6D:EC:2B:9A
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/X6XS1JnkW-II-wejaqcCVm3sK5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:06:84:79:4c:a2:67:d1:fb:75:38:a0:bc:cb:36:c9:aa:16:
ca:f7:4b:e9:63:34:b1:80:3c:25:2d:bb:43:1b:da:04:d5:b5:
06:32:8b:1f:b2:4a:8f:19:ec:fe:c6:92:24:76:50:74:26:c6:
32:12:cd:7a:14:10:9b:d6:8b:bb:c6:c3:b7:9d:2f:95:f4:6f:
d7:53:0a:c5:83:45:fc:fb:90:87:f8:c4:53:8a:8a:d4:50:04:
d9:1b:b5:fe:e8:14:82:16:d6:3b:5d:f2:1d:45:25:8f:b1:5c:
18:7a:bb:25:45:70:ae:1e:79:ab:98:77:cc:b0:37:f1:5a:3e:
b3:d7:45:ee:e4:90:9b:58:f4:bb:1e:5b:d0:35:6d:2a:55:12:
49:61:26:c8:bc:6b:fc:b0:1c:d5:ff:34:f5:e1:1e:a3:1e:c9:
91:42:33:4d:fc:d3:95:4e:81:e0:8c:b4:a0:a2:c2:68:ee:a6:
90:72:f9:84:04:bb:5b:ff:b1:06:c6:b1:e1:f3:aa:3a:4e:73:
e8:2e:8b:e5:c2:44:04:88:39:c5:ee:0a:c3:0f:f0:a0:b1:cc:
40:e6:c1:8e:2f:f1:bf:83:7b:2a:e9:e6:ec:e6:01:52:28:39:
1b:51:a7:3f:e7:51:62:25:ec:75:c0:9d:f5:23:2f:3a:7e:f9:
7a:15:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net