Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/xMQEY6zDnMNw-oLajyUqSLgV-7M.roa
File: xMQEY6zDnMNw-oLajyUqSLgV-7M.roa (raw, json)
Hash identifier: zB01lxrZAFEXjFzCg4RuoPeHmozHsM5JaeoenNBxDig=
Subject key identifier: C4:C4:04:63:AC:C3:9C:C3:70:FA:82:DA:8F:25:2A:48:B8:15:FB:B3
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 05AE8751
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/xMQEY6zDnMNw-oLajyUqSLgV-7M.roa
Signing time: Sat 01 Jan 2022 10:01:55 +0000
ROA not before: Sat 01 Jan 2022 10:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212186
IP address blocks: 194.169.190.0/24 maxlen: 24
194.169.196.0/24 maxlen: 24
194.169.193.0/24 maxlen: 24
194.169.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95323985 (0x5ae8751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jan 1 10:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4c40463acc39cc370fa82da8f252a48b815fbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:84:40:ec:22:8f:a0:a4:30:dd:68:84:9d:
d8:8c:67:ad:6d:d0:db:0f:b9:e2:67:d9:ef:27:33:
2e:1d:ef:fb:ff:44:8c:94:55:54:ab:05:5a:1a:1f:
78:43:28:1d:93:93:63:c8:ca:84:52:9e:b7:59:84:
95:8c:16:f4:07:cb:9b:4c:af:ed:ad:42:03:8d:50:
cd:87:69:e6:52:e3:72:bc:d4:f1:d8:9f:2b:24:02:
dc:ca:04:44:47:07:85:49:09:22:f9:2d:9d:65:7e:
b6:b8:05:b8:30:07:19:8a:b7:47:9e:96:1c:08:43:
b1:5b:83:b1:12:7a:a2:a8:a2:8a:8f:f5:2b:b0:cc:
c8:1f:7a:e5:b9:c1:50:0f:ea:1f:d9:5c:e4:de:df:
df:de:10:d2:47:b9:47:08:f6:15:b8:d7:dc:bd:f7:
c2:1f:94:89:85:69:a1:a7:78:3c:01:c2:82:1f:9c:
c2:55:de:82:9b:6e:8a:c7:32:e5:48:14:02:fd:03:
e4:7b:8b:ef:af:55:72:1e:b3:36:b7:e1:3d:10:df:
d0:64:a6:22:8b:b9:2b:70:29:81:31:4a:0b:70:68:
78:9c:a2:be:76:b9:87:d0:ce:a5:a5:0a:59:a0:0d:
ab:d9:d5:4b:83:89:aa:00:73:ee:e3:00:a1:ef:db:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:04:63:AC:C3:9C:C3:70:FA:82:DA:8F:25:2A:48:B8:15:FB:B3
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/xMQEY6zDnMNw-oLajyUqSLgV-7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.190.0/24
194.169.193.0/24
194.169.196.0/24
194.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c3:f4:3f:1b:47:2b:b7:5e:97:1c:83:6e:7a:14:55:12:c2:
b5:1d:53:56:06:04:aa:b0:ea:92:45:d7:bc:ac:e9:2d:60:37:
68:1a:73:a5:c3:ef:59:68:df:9a:90:8d:fd:3e:4f:aa:3f:8f:
b1:0a:99:26:af:03:40:76:de:8a:40:28:ca:b5:d4:82:b0:4a:
f3:45:3a:ae:ac:ee:4c:09:f4:b7:fa:fa:c1:72:37:f5:aa:b1:
eb:2f:58:93:14:5d:40:9b:09:b8:39:3b:7c:3c:01:35:89:a5:
cf:29:d7:33:e0:11:c6:bf:ee:c9:1f:14:03:43:fb:96:76:95:
c0:bc:42:55:f0:ab:9e:21:1f:ef:3b:b8:51:da:59:d1:34:49:
4d:c0:7b:c2:a1:43:ca:61:83:d0:16:bc:2e:0c:40:48:6c:63:
c0:66:10:db:41:7f:1c:0c:45:68:81:95:09:4f:ee:49:ce:7b:
32:27:7e:73:4a:b4:0c:68:f9:ed:8c:ca:a4:5e:44:e4:c5:6f:
cf:a7:1d:a3:7b:65:21:20:15:c6:fe:42:39:5a:56:1f:12:91:
85:0d:ea:68:b6:b5:1f:26:d3:d4:93:d6:3d:0b:df:92:3c:0f:
bd:36:31:9d:f9:a6:8e:70:23:fd:12:61:9d:98:c6:80:92:4b:
76:bd:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:15 2024 by rpki-client on console-fra.rpki-client.org