Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XMFd-BdM7lV7OgGHMuZEHKFUT_U.roa
File: XMFd-BdM7lV7OgGHMuZEHKFUT_U.roa (raw, json)
Hash identifier: VTAovzjcwC6j2Jr31nandWk5uIHxC0RJrUnO2nlBqH8=
Subject key identifier: 5C:C1:5D:F8:17:4C:EE:55:7B:3A:01:87:32:E6:44:1C:A1:54:4F:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E3CD0E7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XMFd-BdM7lV7OgGHMuZEHKFUT_U.roa
Signing time: Thu 06 Jan 2022 15:10:16 +0000
ROA not before: Thu 06 Jan 2022 15:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210360
IP address blocks: 194.87.212.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238866663 (0xe3cd0e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 6 15:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cc15df8174cee557b3a018732e6441ca1544ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:2d:0c:a2:e9:19:e7:19:e4:a1:13:99:b5:
c6:95:6b:2c:96:2d:2d:f2:e7:e2:c9:5e:a7:98:16:
58:6e:6e:bd:05:ed:f8:8d:09:bf:6b:c0:e7:76:2f:
42:a7:13:29:40:2f:29:c0:63:23:d5:23:b4:45:00:
67:b2:b3:a7:67:ba:92:fa:5d:09:e5:fc:cf:68:ce:
05:9a:f3:eb:0b:bb:0d:8f:ca:3c:b2:6a:78:ee:8d:
97:58:84:95:f0:11:eb:8b:b1:70:5d:59:e2:b8:b3:
f9:36:62:8d:3c:8e:c0:62:09:ca:5c:9d:a8:ea:be:
47:e8:5e:36:9d:a1:05:6d:f1:cd:e6:3a:ed:89:aa:
6d:68:08:0a:99:a9:f1:0f:aa:45:9b:ec:3b:44:ce:
1e:fc:3f:b9:23:75:65:0d:1d:03:b9:33:fa:55:ae:
fc:87:d3:1c:39:27:77:e4:a6:db:d4:45:cf:09:8d:
86:11:19:55:49:8a:6c:46:46:f5:b1:3d:60:36:25:
b9:a2:9b:dc:ad:f1:e6:b1:91:c5:78:b0:a9:bb:c7:
69:ab:5b:c9:27:13:55:8c:99:07:54:f9:d1:e7:63:
10:69:3a:82:ad:bc:0a:03:6f:61:19:9a:c0:03:78:
5a:a6:18:bd:71:2e:ab:a1:20:10:fc:a8:ee:aa:3e:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C1:5D:F8:17:4C:EE:55:7B:3A:01:87:32:E6:44:1C:A1:54:4F:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XMFd-BdM7lV7OgGHMuZEHKFUT_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.178.0/24
194.87.212.0/24
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bd:07:63:d9:02:aa:3c:29:19:9c:d7:20:13:2d:57:eb:51:
7c:e0:49:11:d5:7a:8e:18:34:30:96:3d:e7:a4:6b:0b:46:cc:
37:22:e5:7b:c1:b5:73:29:fc:9a:0a:46:81:7e:54:97:79:a9:
b1:0a:30:67:c2:dd:65:d9:2e:8a:49:02:27:dd:a4:bc:9a:74:
59:d6:6b:68:0d:95:93:da:5c:8b:e9:03:42:b8:0d:ec:19:90:
10:79:c0:56:e5:bf:ad:08:07:e8:01:66:72:b7:b4:08:bd:0e:
88:ce:f4:3a:34:14:ce:40:56:20:98:22:05:06:a4:a5:4e:f2:
27:3b:14:b7:f3:0e:63:e8:85:41:b4:82:1a:dd:73:e8:4b:d3:
47:28:74:77:34:5b:bc:ef:42:ea:bc:90:34:51:1b:39:ce:43:
11:1a:44:99:f8:94:47:4b:bd:72:1d:b4:a8:68:5f:41:f5:f2:
b7:e8:df:3b:91:99:d5:93:e7:b3:6f:62:fa:a0:1b:89:ab:c3:
d1:a1:d3:6d:5c:9f:ff:56:0e:79:66:fa:5f:f0:bc:44:83:b0:
c4:b4:1b:64:35:79:fe:59:d5:b3:3c:77:ec:40:f4:ee:b6:72:
35:52:98:76:a3:21:64:96:9a:ca:64:2f:55:dd:73:74:07:cf:
4f:53:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org