Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/yBJWY3_oYr51sj0IsRYdPoFBaDs.roa
File: yBJWY3_oYr51sj0IsRYdPoFBaDs.roa (raw, json)
Hash identifier: VtqHzcZqkCuqLIyZ9ESyvSuccePwzY1xfuk1BFyAlaY=
Subject key identifier: C8:12:56:63:7F:E8:62:BE:75:B2:3D:08:B1:16:1D:3E:81:41:68:3B
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 09981F7F
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/yBJWY3_oYr51sj0IsRYdPoFBaDs.roa
Signing time: Sat 01 Jan 2022 15:55:15 +0000
ROA not before: Sat 01 Jan 2022 15:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205376
IP address blocks: 194.121.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160964479 (0x9981f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jan 1 15:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c81256637fe862be75b23d08b1161d3e8141683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:bb:6a:bf:36:f0:26:e3:ca:b2:85:02:36:
b4:e6:66:9c:03:cc:ea:8f:a0:03:0d:2d:4b:92:41:
3f:4f:1d:a9:2b:89:fa:fe:72:9f:23:28:0e:c2:90:
2a:37:5c:24:82:c2:d0:76:20:d1:9f:14:1e:96:9f:
d5:65:ec:72:12:9c:f0:a4:d2:7f:7c:cc:ae:28:b5:
e8:dd:dc:2f:56:9c:fb:cf:02:e8:bf:7e:99:9b:2f:
8e:cc:8f:ba:66:5c:1a:4e:43:16:8a:c6:a0:44:dd:
ea:ae:62:40:44:39:6f:6b:47:56:d3:de:b4:3e:8e:
e9:4a:e4:2f:2e:49:a5:3b:15:86:3b:68:0b:62:de:
23:c3:dd:70:15:61:57:a1:e9:09:17:da:51:cb:fb:
9d:1e:60:17:4a:0e:04:ee:17:49:d0:1d:05:98:49:
8d:53:e6:aa:d6:a3:18:69:07:ac:13:32:1b:18:0f:
d7:a2:a3:0a:d8:0a:56:a7:89:45:5c:48:fe:2c:b4:
d7:ac:01:bf:50:b4:12:80:28:05:95:7d:4e:55:e0:
a4:18:b2:17:81:96:a1:ee:66:d1:3e:fd:64:6b:88:
4d:5b:e9:12:83:90:c5:cb:3b:58:d7:a2:40:83:e3:
6c:13:24:dd:77:1c:59:ab:bd:7b:8c:f7:c0:e2:cb:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:56:63:7F:E8:62:BE:75:B2:3D:08:B1:16:1D:3E:81:41:68:3B
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/yBJWY3_oYr51sj0IsRYdPoFBaDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.121.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:26:31:a7:47:88:e4:67:89:e5:2d:f3:83:18:b4:e4:28:b1:
19:f4:b6:e8:5e:3f:c2:8b:de:14:19:88:d1:74:86:c5:8f:3b:
fc:ef:2b:3a:6d:ef:67:86:d6:f5:b4:30:b4:21:a1:aa:7f:ad:
e0:47:ff:72:6a:e0:1a:9c:8d:57:bd:f3:5b:a2:79:a4:56:a0:
6f:48:a6:43:62:64:54:66:03:57:b3:0b:a6:1f:c5:67:34:3e:
c4:64:38:a5:33:c0:17:32:5b:fd:bc:ee:9a:85:42:bd:69:6a:
50:3c:82:8e:24:c1:03:2a:b0:7d:95:0f:ec:71:a3:bf:53:0c:
8d:fe:23:ff:9f:ff:df:5e:6a:30:8a:42:54:6b:2a:6e:99:c6:
48:9e:2a:bc:36:ad:48:43:cc:6c:b0:ed:28:93:fb:c7:02:4f:
c0:f3:c1:47:5c:e6:dc:19:1e:03:de:02:76:21:fb:42:6c:23:
2f:f4:16:6a:29:67:68:28:07:10:46:ba:99:2c:7a:2f:d3:44:
ee:56:23:f3:66:2e:93:c7:0a:b0:89:19:e1:b0:5b:34:73:4e:
f0:85:fc:3d:1a:05:19:7a:32:4c:08:29:14:62:08:05:1d:e2:
90:1d:73:4f:d1:af:f1:f3:db:af:71:27:50:46:10:61:f3:a2:
88:f1:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net