Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MaCbiQUUQ1vMacp40n7t-sI_WUE.roa
File: MaCbiQUUQ1vMacp40n7t-sI_WUE.roa (raw, json)
Hash identifier: ajxQ56iGlqkqxGYt19T0eDsQCTwSVzcLkZhFnbvfF8U=
Subject key identifier: 31:A0:9B:89:05:14:43:5B:CC:69:CA:78:D2:7E:ED:FA:C2:3F:59:41
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018510B19D243D726A73BFFF7BB7C098766F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MaCbiQUUQ1vMacp40n7t-sI_WUE.roa
Signing time: Wed 14 Dec 2022 12:52:33 +0000
ROA not before: Wed 14 Dec 2022 12:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 194.87.250.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
195.133.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:b1:9d:24:3d:72:6a:73:bf:ff:7b:b7:c0:98:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 12:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31a09b890514435bcc69ca78d27eedfac23f5941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:b2:75:23:02:a5:fa:7e:4f:68:f6:8b:4c:
4c:9b:bf:ee:93:d8:05:97:50:95:52:4a:ef:2e:aa:
49:34:b2:f7:8e:a5:0e:56:55:82:3d:7a:65:ba:26:
57:f8:f4:0c:53:19:0e:fb:42:f3:6f:92:09:f1:fb:
aa:be:90:8f:0e:ac:a0:91:18:72:9e:37:ac:48:2d:
11:7a:8f:f8:0c:87:e5:f9:ac:69:a6:79:a3:d7:2e:
36:57:45:2d:43:ce:05:2c:de:f9:0c:0e:2b:ca:54:
dd:0a:17:4e:8f:6c:e3:dc:7d:2f:f4:ae:8f:11:9a:
d6:2e:2f:a2:ec:76:35:6c:5f:91:b5:2d:33:37:a0:
d0:e2:60:b4:48:dd:bf:37:28:4c:42:18:c5:4e:4e:
61:10:3d:84:b2:75:22:77:6b:4f:83:d0:c3:13:fe:
6e:ed:01:3e:ed:c9:09:2a:ea:59:44:bb:9e:1e:51:
60:71:0c:58:fd:04:bd:8f:12:6f:d2:d8:f3:c4:dd:
1b:15:aa:08:f9:61:9e:f3:82:02:02:6c:2d:a0:27:
9a:cc:d5:68:0b:02:33:10:43:43:11:de:12:fa:6c:
2d:12:db:2c:20:58:2b:4a:ea:1b:12:9d:d5:0b:d0:
48:22:a2:e3:61:f7:1f:7d:8c:88:ec:5f:50:7c:f4:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:9B:89:05:14:43:5B:CC:69:CA:78:D2:7E:ED:FA:C2:3F:59:41
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MaCbiQUUQ1vMacp40n7t-sI_WUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.41.0/24
194.87.250.0/24
195.133.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c7:33:17:59:a6:6b:81:56:e7:9e:03:9f:97:f5:73:2e:64:
fd:60:a6:df:db:ca:fe:e1:22:7c:c9:f8:54:e7:04:6d:34:6d:
0e:a0:c0:48:4d:09:0f:1a:00:d5:f0:1c:93:89:b6:71:08:87:
77:26:d0:dc:1f:47:b9:07:15:21:a0:1b:aa:c5:cf:47:ba:ea:
9a:a6:d8:09:ad:2b:ce:36:70:64:ee:b8:41:50:a0:3f:2b:6d:
71:f0:6e:0d:b8:ca:57:5c:b1:b4:f3:64:e6:1b:55:66:69:4e:
9f:fa:e3:0e:f4:eb:bd:d3:7d:47:53:f5:cb:ec:df:8a:7c:d1:
c8:26:a9:7c:14:f1:fa:6d:b2:39:ed:a2:d1:31:cb:20:80:fb:
4a:93:87:bc:4f:48:ec:74:52:41:d8:93:2e:4b:8b:87:42:f6:
f0:88:3f:ea:cb:8d:fe:2c:cc:b4:e8:42:6e:a2:73:06:43:e8:
1f:9b:c8:2f:b3:be:41:0c:fc:0c:3a:f9:02:08:cc:45:1c:dd:
92:7f:07:e7:c2:4a:d0:31:b3:4b:f6:a8:c7:cb:46:86:0b:97:
18:96:4f:15:80:d4:24:75:7c:10:74:ef:10:5e:f6:7b:e6:f9:
28:d7:b6:9f:62:c5:4f:06:e1:d5:7e:e2:c6:df:e4:8f:33:91:
73:f8:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org