Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MHUjaFQD30-7heXoWcRRBPAMrQY.roa
File: MHUjaFQD30-7heXoWcRRBPAMrQY.roa (raw, json)
Hash identifier: fIVDxKorDtipN+OcoASR9BOMKft9UIVpAAVlYuG5xeQ=
Subject key identifier: 30:75:23:68:54:03:DF:4F:BB:85:E5:E8:59:C4:51:04:F0:0C:AD:06
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184C884E5017CB523918D403B0112DB0B53
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MHUjaFQD30-7heXoWcRRBPAMrQY.roa
Signing time: Wed 30 Nov 2022 12:31:03 +0000
ROA not before: Wed 30 Nov 2022 12:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
194.87.223.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:84:e5:01:7c:b5:23:91:8d:40:3b:01:12:db:0b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 30 12:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=307523685403df4fbb85e5e859c45104f00cad06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:16:54:b6:35:e4:3e:e6:5a:4e:cd:34:cc:
d0:4c:3c:cd:bc:71:b9:56:ff:d7:10:92:69:5f:9b:
d0:de:dc:c1:f4:fb:a2:ae:7b:d4:75:ba:bf:39:d8:
5c:fc:ba:d2:89:5a:da:57:fb:b9:8a:7e:f3:10:52:
bc:82:26:02:84:23:15:22:41:90:ab:90:fe:81:bf:
f9:31:ce:bf:0c:07:f8:3a:e0:d8:44:16:58:4b:b8:
2d:df:4e:e2:b0:67:b8:a1:0c:6b:7c:7f:ba:4c:f4:
e8:2c:01:1f:be:d2:0b:33:0d:d7:7e:2a:ea:72:38:
3d:ce:a8:37:42:5b:52:60:cf:4c:01:e1:1d:15:07:
a1:54:73:9c:7c:21:7c:19:60:43:59:35:09:77:fa:
cb:a6:2c:ee:cd:b9:9f:42:c4:64:91:51:80:b6:1b:
75:16:07:36:2a:8c:4e:67:d5:99:9b:bf:e4:aa:ac:
e4:40:31:5d:78:be:91:3a:91:7c:70:a4:b1:3a:c5:
2e:1a:f7:4d:5b:7b:7a:a9:9d:85:9d:3d:e6:86:b2:
c3:0b:ce:1b:42:20:00:7c:22:ba:51:96:c0:f4:38:
6f:84:6f:f8:39:fa:ef:f0:6d:1f:e7:9b:9d:6b:d2:
b1:63:91:56:50:e5:c9:93:d8:b7:53:b8:b8:8f:4e:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:75:23:68:54:03:DF:4F:BB:85:E5:E8:59:C4:51:04:F0:0C:AD:06
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MHUjaFQD30-7heXoWcRRBPAMrQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0-62.76.226.255
192.124.180.0/24
192.124.183.0/24
193.124.18.0/24
193.124.90.0/24
193.124.133.0/24
193.124.200.0/24
194.58.40.0/24
194.58.46.0/24
194.58.59.0/24
194.87.122.0/24
194.87.124.0/23
194.87.200.0/24
194.87.223.0/24
194.87.226.0/24
194.87.233.0/24
194.87.252.0/24
195.58.54.0/24
195.133.76.0/24
195.133.193.0/24
212.192.5.0/24
212.192.9.0-212.192.10.255
Signature Algorithm: sha256WithRSAEncryption
44:1a:36:f7:ac:46:46:6b:61:75:3a:b3:19:bd:7f:65:e4:fc:
a5:db:4a:9c:81:7e:79:c6:77:a2:55:3b:3b:80:4a:64:53:91:
96:19:6f:46:a1:6a:77:b8:35:54:07:ce:63:05:04:b3:ee:d5:
2f:54:7d:7b:51:41:15:3d:a7:8d:3e:9a:71:18:eb:9f:d2:74:
79:71:e2:b9:ea:b2:9b:63:9e:a0:a3:b0:40:49:aa:18:ea:64:
f4:00:bd:1a:eb:1b:ab:d3:bb:19:97:98:14:49:02:13:67:38:
a5:92:91:83:73:5d:5d:14:65:2b:0a:bb:05:70:cf:ea:69:df:
6a:8f:15:06:7f:d0:f4:77:07:fd:b0:f9:3a:a8:72:82:a0:e3:
d0:59:b4:10:89:32:e1:98:00:e1:d9:28:84:4b:d9:a2:28:3a:
50:37:dd:0b:9d:6e:29:f0:2f:7d:d8:12:40:b4:09:75:1e:fe:
45:32:b5:ed:35:08:14:0b:53:c3:82:11:54:b2:25:fd:6a:75:
c6:65:1c:a8:bb:52:ae:d1:b8:bc:df:04:bb:56:d6:c6:bf:37:
3d:86:21:0c:0f:3b:92:64:52:43:34:20:57:e5:ea:c6:91:f9:
8a:17:00:1f:c5:41:1f:52:d9:7d:2a:75:f8:cb:fc:bf:b2:46:
dd:7c:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org