Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Mwx6bta_U6gDWrFp03qasnBaUJM.roa
File: Mwx6bta_U6gDWrFp03qasnBaUJM.roa (raw, json)
Hash identifier: LMskjqGEEBLNqDydkZ6J/t7qAgP0PoQhpFJUMuMz31A=
Subject key identifier: 33:0C:7A:6E:D6:BF:53:A8:03:5A:B1:69:D3:7A:9A:B2:70:5A:50:93
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183F0C8732CA3E967B49A1827F110B4101E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Mwx6bta_U6gDWrFp03qasnBaUJM.roa
Signing time: Wed 19 Oct 2022 15:06:51 +0000
ROA not before: Wed 19 Oct 2022 15:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53850
IP address blocks: 194.87.118.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:c8:73:2c:a3:e9:67:b4:9a:18:27:f1:10:b4:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 19 15:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=330c7a6ed6bf53a8035ab169d37a9ab2705a5093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:00:83:4a:b9:bc:ec:a3:59:f5:0f:9d:a3:
02:b4:27:04:c9:5e:0c:1d:c9:48:99:31:18:09:14:
0f:b4:52:e7:e2:5d:fd:b8:b0:cf:c4:58:35:f6:c6:
48:cf:cd:51:24:15:41:ab:29:40:ce:0f:a6:2a:57:
3c:ff:b1:bb:e6:82:42:44:81:c1:d0:df:a1:4a:5e:
87:e2:08:c7:4c:af:d8:98:96:eb:ac:8e:75:9c:70:
3d:66:65:8e:0a:6f:62:76:45:5f:98:12:11:c3:aa:
42:92:8e:45:61:06:da:c0:0b:b4:0f:23:aa:e7:cf:
c4:9a:8c:b5:4f:bf:8e:5b:90:26:d7:da:87:c2:b9:
b9:1f:79:48:14:41:cd:d7:3c:41:5b:25:bb:92:c3:
b8:28:fe:29:75:80:6c:ef:64:23:55:50:3b:fb:54:
90:89:5e:84:77:e3:3c:be:fd:c3:c8:17:92:ea:c9:
48:4e:20:c3:65:60:d7:f0:77:e7:13:6d:72:c7:10:
d0:93:d3:ca:1a:24:b1:66:25:a5:66:3e:79:da:c1:
16:5e:54:ea:4a:c4:32:d4:c8:dc:bc:f3:6f:fa:b0:
37:00:5d:c8:3e:e6:d4:7a:33:b4:56:e3:42:b2:d6:
49:af:21:0e:f0:c7:aa:e1:ff:2c:e4:7e:32:0f:25:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:7A:6E:D6:BF:53:A8:03:5A:B1:69:D3:7A:9A:B2:70:5A:50:93
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Mwx6bta_U6gDWrFp03qasnBaUJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.118.0/24
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1d:68:4c:d9:82:49:25:cd:70:28:1d:33:be:b1:51:fd:a8:
f6:c5:20:54:ec:6c:89:74:83:3a:f3:b2:25:de:b2:5a:29:aa:
11:68:d3:20:74:87:4e:63:ae:48:f1:69:ed:64:5d:f6:fd:99:
80:9c:79:90:be:d0:58:5e:e2:18:27:22:8f:fe:b6:fa:2a:c2:
7d:c0:f8:31:13:12:7a:1d:e9:37:d3:18:ca:dc:a8:5f:3b:80:
50:f2:dc:dc:23:5b:83:76:4b:89:81:68:12:ae:a3:0f:86:b9:
2a:a3:76:6b:d9:8b:c6:37:f7:6d:d7:74:8e:df:bf:c9:4a:e4:
fb:49:07:68:81:79:49:a0:43:26:d4:38:e9:f0:03:f5:e4:30:
f9:1b:2b:a8:a5:8a:a7:e9:5b:de:a6:20:b2:34:94:8b:ce:9a:
ca:72:54:c2:fe:0f:04:6c:c4:50:fb:d9:3f:3d:f8:cc:c9:8c:
63:8a:ec:d2:34:80:7a:df:b5:30:87:af:2e:84:03:e3:5c:3b:
27:0c:2f:31:06:b4:66:57:46:a1:73:6d:ee:6a:96:e2:92:40:
b2:43:ad:df:2e:df:4e:37:95:a1:ef:3b:0c:b9:fb:b9:1e:2e:
30:b3:b9:73:53:bf:86:11:7e:f3:62:65:fa:3b:bd:10:8d:66:
54:fa:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org