Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m0VMFrbLQ4IZ6oinWowxRhmNW2c.roa
File: m0VMFrbLQ4IZ6oinWowxRhmNW2c.roa (raw, json)
Hash identifier: qQ9Q/OeTQ6FtANTeE46XIVMAsOAv6BMBh5sXldBlqwE=
Subject key identifier: 9B:45:4C:16:B6:CB:43:82:19:EA:88:A7:5A:8C:31:46:19:8D:5B:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 108079CF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m0VMFrbLQ4IZ6oinWowxRhmNW2c.roa
Signing time: Thu 23 Jun 2022 06:47:32 +0000
ROA not before: Thu 23 Jun 2022 06:47:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 194.87.17.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276855247 (0x108079cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 23 06:47:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b454c16b6cb438219ea88a75a8c3146198d5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:c6:92:e4:1c:05:39:9e:94:a1:42:bf:7c:
77:c7:f4:05:46:f7:23:df:bd:8c:a9:6c:8e:7d:e6:
79:8a:d9:2b:54:ee:80:cf:49:6c:b6:85:d8:d3:52:
70:e1:96:dd:7b:84:b8:45:5b:7f:ce:e6:a4:ca:68:
dd:c2:7b:df:10:3b:1a:ad:09:02:9a:7d:e0:c3:9e:
43:c3:46:cf:7d:ed:f7:8d:d9:3b:95:0e:02:4d:31:
fc:8e:2b:b2:a1:11:56:7a:0e:64:63:72:99:13:f3:
45:36:83:29:e2:01:c4:29:16:07:0a:b0:b7:86:7c:
cd:0d:97:f7:36:a0:1d:db:52:f8:67:26:1c:11:ca:
58:6f:c7:e7:bf:e9:b7:be:ce:66:9f:ff:ff:85:8b:
60:d4:22:c7:ca:b0:09:3a:cd:f2:59:fc:ca:ea:0b:
64:3f:a7:50:5d:41:10:c3:f2:97:fe:2e:81:59:15:
f7:cf:11:69:b4:cc:14:c5:46:58:ad:c1:62:90:f1:
e7:60:03:06:9e:0a:ef:b7:ce:09:6d:0b:dd:6d:97:
b1:c2:a4:76:27:55:cf:5c:93:d2:60:c1:20:1f:f9:
a2:cb:bd:b4:39:bf:3e:d9:9c:ea:ba:92:26:98:23:
36:4e:db:62:59:3a:97:7e:5e:3b:5f:fd:d1:1d:6f:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:4C:16:B6:CB:43:82:19:EA:88:A7:5A:8C:31:46:19:8D:5B:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m0VMFrbLQ4IZ6oinWowxRhmNW2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.17.0/24
194.87.91.0/24
194.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bb:65:b3:f0:bc:84:0e:a0:f9:fe:45:e7:d8:54:0f:b3:e9:
11:75:29:80:2e:22:e3:93:4d:3d:4e:80:c3:94:23:f0:2b:7f:
2b:52:22:50:20:22:b9:f0:68:a3:85:c6:77:a0:ce:81:4e:ed:
ed:0e:50:47:33:10:bc:67:fd:25:09:9a:0d:6e:fb:db:1b:19:
86:02:ff:73:e1:d9:99:c0:86:25:de:7c:4a:43:fd:b8:fc:90:
b1:bf:b0:48:10:d8:79:e7:27:69:15:d7:1a:8b:6c:4d:4e:fe:
e9:71:08:46:e4:6c:d5:85:76:2c:1b:b1:54:c3:9c:21:af:75:
7e:f8:66:a4:66:b0:8a:5f:7e:2e:29:c1:a8:2f:e3:08:05:86:
ae:8c:b7:e7:d8:c3:64:93:f7:60:73:42:b9:6a:02:59:fb:ee:
d3:d1:05:8a:18:a6:5d:d4:f6:3b:6c:b4:f5:6c:0f:e8:c0:7a:
53:91:df:88:eb:08:74:6e:d6:23:87:e2:de:10:c5:d6:a9:63:
00:4a:7e:da:1e:6b:e4:7f:14:50:48:46:30:48:31:28:2f:a4:
15:cf:af:a7:3e:c8:18:a8:71:ee:1b:e0:82:c9:a4:69:42:5a:
f4:2b:cd:67:e4:78:84:a0:17:ff:3c:8e:4d:24:7f:f6:7f:98:
9c:45:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org