Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/oG59KZ8RMnsp672clsDFINRs1KI.roa
File: oG59KZ8RMnsp672clsDFINRs1KI.roa (raw, json)
Hash identifier: RZuoSBaK2dkLCsm48udZoKftQRfGS/W1qe7qltVMvLE=
Subject key identifier: A0:6E:7D:29:9F:11:32:7B:29:EB:BD:9C:96:C0:C5:20:D4:6C:D4:A2
Certificate issuer: /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial: 05907965
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/oG59KZ8RMnsp672clsDFINRs1KI.roa
Signing time: Sat 01 Jan 2022 12:02:17 +0000
ROA not before: Sat 01 Jan 2022 12:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 194.26.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93354341 (0x5907965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Validity
Not Before: Jan 1 12:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06e7d299f11327b29ebbd9c96c0c520d46cd4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:15:67:de:12:13:d5:51:ad:7e:f9:d8:9e:
fc:7b:34:36:f6:39:cb:d1:fc:82:a3:e7:86:90:f0:
ba:2b:a7:f4:65:a8:bf:8d:5c:ee:e8:63:9a:0d:b9:
55:86:05:ee:73:0d:2f:6a:c6:6f:f2:44:e6:6f:ba:
2b:65:04:02:e0:0a:b3:d9:67:8f:bd:55:be:36:3d:
34:57:13:39:74:36:ba:f3:54:15:95:08:58:e0:6a:
50:8a:91:50:f0:11:36:dd:77:44:70:51:22:55:e8:
20:23:6f:15:8a:ab:1d:c5:ed:08:09:f4:d8:bf:32:
c9:e7:5a:dc:f2:9b:7c:24:5e:00:1d:89:6c:a3:84:
6f:59:d5:f1:62:09:0a:a5:f1:c1:df:ce:81:aa:7a:
bb:d1:9c:70:a8:d1:c9:96:86:ac:3a:64:65:11:29:
47:7b:dd:3b:ef:65:41:02:8e:dc:77:fe:b8:3f:37:
89:78:50:57:ca:61:f2:0c:26:fe:2d:d1:4b:1a:94:
86:5d:23:ec:e1:52:86:99:86:bf:98:04:a5:a2:12:
c3:08:32:73:c8:4a:7c:a8:38:13:3e:d2:86:95:d8:
ea:33:0e:f9:1a:41:1c:55:28:fb:41:ab:3d:d3:68:
e7:94:06:27:84:e9:5b:6d:86:1e:49:8f:83:55:0c:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:7D:29:9F:11:32:7B:29:EB:BD:9C:96:C0:C5:20:D4:6C:D4:A2
X509v3 Authority Key Identifier:
keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/oG59KZ8RMnsp672clsDFINRs1KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:12:d2:ca:af:f8:9c:e3:a6:46:d9:ed:80:5f:81:dd:c1:81:
81:bb:a1:11:39:91:e2:6d:92:c0:03:24:62:4c:d6:a4:57:53:
0d:ab:82:cb:24:47:34:44:76:f5:63:92:8e:dc:13:29:22:cf:
00:1b:71:24:34:13:34:fb:14:9d:44:75:d1:65:03:47:d6:e1:
6e:27:1b:84:96:b2:29:94:90:c5:ea:c3:66:59:35:f8:6d:34:
f6:5c:27:4d:0b:1d:fb:9f:e7:27:b8:7f:27:38:d8:6e:dc:42:
f4:c3:4f:d0:2a:c9:26:62:d5:2f:9e:65:7a:94:c0:07:bf:a3:
03:34:9b:a6:8f:ac:8e:66:ea:59:ec:21:5a:52:a2:03:27:6f:
46:f2:d8:19:92:7f:9c:32:d5:d2:79:34:28:12:df:38:ad:72:
39:e2:74:ea:ce:0e:dd:37:e9:cd:5e:8b:90:97:ca:c5:22:ce:
10:2b:17:3f:c6:88:85:f9:3a:e4:bb:66:f8:35:8f:b1:d1:7a:
f4:79:84:2d:bc:d4:0b:b2:f9:f4:0a:46:92:94:38:a8:50:dd:
7b:94:33:32:be:52:37:f0:4b:ed:bc:69:ee:8e:41:ef:7f:1c:
27:60:d2:1f:c3:5c:13:51:46:34:a1:68:cb:5f:17:ed:db:81:
41:cf:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net