Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/hlNGIG0jnNfBdlqF_ex1g8iVyvk.roa
File: hlNGIG0jnNfBdlqF_ex1g8iVyvk.roa (raw, json)
Hash identifier: l8BxMxUUEtlBw00KECjbusRGv388sKGVyLc/wdr/Vds=
Subject key identifier: 86:53:46:20:6D:23:9C:D7:C1:76:5A:85:FD:EC:75:83:C8:95:CA:F9
Certificate issuer: /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial: 55B6D3
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/hlNGIG0jnNfBdlqF_ex1g8iVyvk.roa
Signing time: Sat 01 Jan 2022 02:56:44 +0000
ROA not before: Sat 01 Jan 2022 02:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210444
IP address blocks: 194.9.90.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5617363 (0x55b6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Validity
Not Before: Jan 1 02:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=865346206d239cd7c1765a85fdec7583c895caf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:b7:89:0b:80:75:ac:e0:0d:56:56:c6:72:
7f:94:a9:71:88:6f:ee:c7:23:36:c3:3d:9f:5a:f0:
6a:9e:17:95:bb:f7:f9:78:42:d1:d1:4a:9d:20:67:
7c:91:10:49:ea:ba:aa:73:2c:45:14:a0:d7:97:d9:
20:13:4b:2f:69:db:05:77:5f:1f:33:10:32:6b:75:
27:87:32:ac:9e:cc:d4:96:29:21:a5:cf:75:a6:b7:
a3:49:d4:51:d2:c1:9d:8b:03:1d:57:7d:06:e5:84:
5f:28:f0:c2:2c:64:0c:99:8f:1d:25:4a:53:ba:5e:
6d:8c:41:85:6b:db:10:bd:92:a9:ef:c0:36:08:f7:
d5:85:b0:53:7f:d9:25:f8:3e:c2:86:58:80:c9:b8:
2b:a7:e1:44:c8:f5:45:a2:4c:75:c0:23:97:e8:bc:
8f:df:c5:9f:92:6a:2d:10:d5:ff:90:42:5e:df:0a:
94:c3:66:27:3b:95:c3:95:b2:bc:0c:0f:54:da:d6:
4a:89:8c:aa:8d:f2:6e:64:ef:68:d5:3d:09:18:27:
5e:34:08:ac:3e:84:7f:88:49:3d:ef:b7:ac:b3:46:
04:41:31:4e:fa:85:ed:9d:55:7d:a8:a7:56:de:6f:
7e:d2:3c:bd:49:a7:28:be:c1:67:0c:7b:51:c3:64:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:53:46:20:6D:23:9C:D7:C1:76:5A:85:FD:EC:75:83:C8:95:CA:F9
X509v3 Authority Key Identifier:
keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/hlNGIG0jnNfBdlqF_ex1g8iVyvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.90.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0f:a8:58:42:43:02:05:8e:2d:5e:6f:5b:68:ab:ba:8d:2c:
3a:d7:d8:4f:d1:46:24:92:c8:11:2e:4c:cb:a0:5f:d5:d7:73:
53:01:82:94:0a:92:42:e3:23:87:bc:fc:5e:00:56:9b:f4:57:
f0:aa:d9:85:ee:9a:60:81:20:7f:a4:09:94:7e:37:a1:55:2f:
1f:e0:2c:75:78:8c:88:4e:c4:d8:aa:28:64:f8:de:f3:1f:ce:
64:e2:86:ee:11:58:ff:8e:e8:42:dd:c4:08:ae:15:4f:87:d0:
ea:14:63:89:34:38:70:54:01:ac:45:1d:81:f2:63:15:9c:e4:
e4:74:da:17:78:28:9b:82:c5:7e:e7:df:de:96:46:a8:19:83:
66:6c:08:19:23:6e:24:dc:71:03:a2:e2:e8:e8:f9:cc:61:92:
2f:3b:fe:21:79:9f:27:f8:98:f5:4e:01:a2:83:13:3c:83:ed:
97:c1:37:c4:d0:8a:48:8f:25:3d:36:11:ec:2f:fe:a7:09:82:
ad:ac:dd:5a:40:b3:74:64:1b:4a:7b:85:23:9b:60:ef:69:38:
b5:6d:08:45:1c:92:20:b4:e9:c2:f7:06:a3:1a:4f:af:9a:bb:
dd:c6:c9:99:ed:57:fb:45:67:6d:bd:b4:02:af:16:eb:ec:00:
e2:cd:b7:6a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDVbbTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMx
NmIzZjMzNGUyNjkxMTA2OTBlOWVjNmE3YTU4NWRmZTRmZTg3MDQwHhcNMjIwMTAx
MDI1NjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4NjUzNDYyMDZkMjM5
Y2Q3YzE3NjVhODVmZGVjNzU4M2M4OTVjYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtFm3iQuAdazgDVZWxnJ/lKlxiG/uxyM2wz2fWvBqnheVu/f5
eELR0UqdIGd8kRBJ6rqqcyxFFKDXl9kgE0svadsFd18fMxAya3UnhzKsnszUlikh
pc91prejSdRR0sGdiwMdV30G5YRfKPDCLGQMmY8dJUpTul5tjEGFa9sQvZKp78A2
CPfVhbBTf9kl+D7ChliAybgrp+FEyPVFokx1wCOX6LyP38WfkmotENX/kEJe3wqU
w2YnO5XDlbK8DA9U2tZKiYyqjfJuZO9o1T0JGCdeNAisPoR/iEk977ess0YEQTFO
+oXtnVV9qKdW3m9+0jy9SacovsFnDHtRw2SbzQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIZTRiBtI5zXwXZahf3sdYPIlcr5MB8GA1UdIwQYMBaAFDFrPzNOJpEQaQ6e
xqelhd/k/ocEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZC84Y2NkNmQtMTM0Yy00ZWJiLWFlZmMtZWM2MDM5MjY2MDBiLzEv
aGxOR0lHMGpuTmZCZGxxRl9leDFnOGlWeXZrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84
Y2NkNmQtMTM0Yy00ZWJiLWFlZmMtZWM2MDM5MjY2MDBiLzEvTVdzX00wNG1rUkJw
RHA3R3A2V0YzLVQtaHdRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwglaMA0GCSqGSIb3DQEBCwUAA4IB
AQAID6hYQkMCBY4tXm9baKu6jSw619hP0UYkksgRLkzLoF/V13NTAYKUCpJC4yOH
vPxeAFab9FfwqtmF7ppggSB/pAmUfjehVS8f4Cx1eIyITsTYqihk+N7zH85k4obu
EVj/juhC3cQIrhVPh9DqFGOJNDhwVAGsRR2B8mMVnOTkdNoXeCibgsV+59/elkao
GYNmbAgZI24k3HEDouLo6PnMYZIvO/4heZ8n+Jj1TgGigxM8g+2XwTfE0IpIjyU9
NhHsL/6nCYKtrN1aQLN0ZBtKe4Ujm2DvaTi1bQhFHJIgtOnC9wajGk+vmrvdxsmZ
7Vf7RWdtvbQCrxbr7ADizbdq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org