Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MFikiNo9Z8827Xa7e01KXKUlCbk.roa
File: MFikiNo9Z8827Xa7e01KXKUlCbk.roa (raw, json)
Hash identifier: c9GP3rSvp91cbC20OYv8ddPGm3zIuMwLt12sWNkl6Tw=
Subject key identifier: 30:58:A4:88:DA:3D:67:CF:36:ED:76:BB:7B:4D:4A:5C:A5:25:09:B9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01852F4590C38CD744DF5F2B95E30C765C93
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MFikiNo9Z8827Xa7e01KXKUlCbk.roa
Signing time: Tue 20 Dec 2022 11:22:46 +0000
ROA not before: Tue 20 Dec 2022 11:22:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210388
IP address blocks: 194.87.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:45:90:c3:8c:d7:44:df:5f:2b:95:e3:0c:76:5c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 11:22:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3058a488da3d67cf36ed76bb7b4d4a5ca52509b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:04:c8:22:d0:22:db:12:39:df:69:76:de:
2f:3a:f2:76:87:74:f2:eb:6c:6f:d1:83:a7:02:f2:
ab:f2:5b:93:36:d5:80:fe:8c:6f:70:6f:1d:8d:9f:
27:61:1d:17:ce:07:f1:70:b4:bb:0a:93:6c:31:2e:
fe:3e:c5:84:4f:00:9c:78:e5:48:43:7d:8e:97:d4:
6d:72:1c:2f:07:00:6a:4f:d7:8c:57:da:2a:ec:14:
ff:af:f4:15:48:d0:c6:77:ba:85:74:3b:18:ec:58:
7a:03:08:a5:50:92:43:9c:37:e8:61:a9:79:a8:d0:
ab:8b:5b:49:d9:dc:09:28:36:d6:9c:4c:23:5c:e1:
59:29:fa:1b:c1:23:60:08:c3:e8:22:f7:9b:d6:f7:
08:dc:93:83:c2:d8:de:13:e3:5f:7c:45:e5:89:05:
d4:4f:86:7e:82:7b:5f:01:c4:7f:15:26:e3:7d:fb:
11:57:6c:be:74:46:3c:72:63:55:1e:a6:0a:50:ca:
98:5d:44:e2:c5:e1:ea:9b:d8:94:97:b7:ab:99:7b:
8b:20:04:9c:8c:a6:66:42:8f:05:6b:97:29:ef:48:
52:82:04:4e:c8:ce:26:47:10:aa:65:3e:55:c6:1e:
a9:0a:d0:30:16:f9:19:e0:fc:b6:e6:42:2d:a5:4c:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:A4:88:DA:3D:67:CF:36:ED:76:BB:7B:4D:4A:5C:A5:25:09:B9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MFikiNo9Z8827Xa7e01KXKUlCbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.160.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e7:21:8f:22:19:41:22:f2:d1:94:e5:1a:75:c5:31:e1:00:
34:ae:29:5e:f9:7d:63:23:49:00:1f:a5:7f:ee:64:40:e3:cc:
55:cf:4f:a0:41:1b:77:f7:8e:5f:01:29:ad:79:58:1c:9b:07:
b0:da:8e:8c:73:44:e4:6c:aa:a4:9b:fd:f1:ac:41:e1:1d:be:
0c:02:85:ac:50:a1:1c:a9:98:ea:56:f3:45:ed:a1:c4:c3:c6:
39:bb:c6:a1:65:eb:46:46:c4:c2:ce:55:11:90:39:96:19:32:
34:bd:8d:7e:cc:4e:37:a9:85:a7:26:04:0a:1f:7b:c9:a6:99:
db:34:b0:3b:4c:d8:23:49:61:eb:a7:0c:57:3f:67:f5:75:d0:
8b:3c:d8:80:12:0d:d2:0d:65:99:08:f7:b3:e4:d4:0e:09:3c:
89:a1:62:48:33:b8:f4:75:d5:3c:c5:96:63:8e:f2:60:70:f4:
96:fd:7f:5c:00:b4:67:ff:87:f0:6e:38:8e:e1:c8:46:e7:e2:
09:c6:9b:d1:0d:e5:a4:0c:07:ac:d4:14:c6:9d:d5:e3:62:92:
79:cb:41:c0:69:ca:60:1d:7f:af:ff:f2:1d:de:57:ee:dd:ad:
7b:be:d1:82:44:f9:b0:c5:c7:ab:fa:4f:42:3a:ea:55:c2:02:
f1:ed:8c:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUvRZDDjNdE318rleMMdlyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjIwMTEyMjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDU4YTQ4OGRhM2Q2N2NmMzZlZDc2YmI3YjRkNGE1Y2E1MjUwOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklQEyCLQItsSOd9pdt4vOvJ2h3Ty
62xv0YOnAvKr8luTNtWA/oxvcG8djZ8nYR0XzgfxcLS7CpNsMS7+PsWETwCceOVI
Q32Ol9RtchwvBwBqT9eMV9oq7BT/r/QVSNDGd7qFdDsY7Fh6AwilUJJDnDfoYal5
qNCri1tJ2dwJKDbWnEwjXOFZKfobwSNgCMPoIveb1vcI3JODwtjeE+NffEXliQXU
T4Z+gntfAcR/FSbjffsRV2y+dEY8cmNVHqYKUMqYXUTixeHqm9iUl7ermXuLIASc
jKZmQo8Fa5cp70hSggROyM4mRxCqZT5Vxh6pCtAwFvkZ4Py25kItpUxmbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDBYpIjaPWfPNu12u3tNSlylJQm5MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvTUZpa2lObzlaODgyN1hhN2UwMUtYS1VsQ2JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlegMA0G
CSqGSIb3DQEBCwUAA4IBAQAg5yGPIhlBIvLRlOUadcUx4QA0rile+X1jI0kAH6V/
7mRA48xVz0+gQRt3945fASmteVgcmwew2o6Mc0TkbKqkm/3xrEHhHb4MAoWsUKEc
qZjqVvNF7aHEw8Y5u8ahZetGRsTCzlURkDmWGTI0vY1+zE43qYWnJgQKH3vJppnb
NLA7TNgjSWHrpwxXP2f1ddCLPNiAEg3SDWWZCPez5NQOCTyJoWJIM7j0ddU8xZZj
jvJgcPSW/X9cALRn/4fwbjiO4chG5+IJxpvRDeWkDAes1BTGndXjYpJ5y0HAacpg
HX+v//Id3lfu3a17vtGCRPmwxcer+k9COupVwgLx7Yx0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org