Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mV7IbBY1FOdzCx47jXcPqzN4iXc.roa
File: mV7IbBY1FOdzCx47jXcPqzN4iXc.roa (raw, json)
Hash identifier: k67EUxCmT/lmU5kN24VgEpZ0EBCANTNW2a3Lg1Mxyag=
Subject key identifier: 99:5E:C8:6C:16:35:14:E7:73:0B:1E:3B:8D:77:0F:AB:33:78:89:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018456EBCB73A5F58188363EE3C635A9A6BB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mV7IbBY1FOdzCx47jXcPqzN4iXc.roa
Signing time: Tue 08 Nov 2022 11:06:44 +0000
ROA not before: Tue 08 Nov 2022 11:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50321
IP address blocks: 194.135.30.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:eb:cb:73:a5:f5:81:88:36:3e:e3:c6:35:a9:a6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 8 11:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=995ec86c163514e7730b1e3b8d770fab33788977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:2b:aa:5e:65:5e:47:16:d0:df:29:92:31:
08:66:fc:fd:76:c6:3d:6d:79:fb:69:e8:98:d1:1e:
ed:bf:6e:a2:9e:50:42:30:f5:5d:8f:bf:8e:7d:ef:
b4:9e:06:9c:1c:64:aa:5f:33:9d:15:c1:0a:50:87:
42:b1:34:fc:d5:83:62:96:bd:bf:33:13:c7:96:be:
cd:76:80:76:a8:af:7d:a9:22:90:e3:d4:0c:2b:1e:
8b:e9:f4:58:c8:29:f3:0d:1d:26:e4:43:18:48:13:
67:b0:39:54:c7:47:f5:18:14:c2:d2:fb:27:7b:90:
da:29:5e:ea:1c:b1:6d:f5:3e:99:1a:69:d4:ee:17:
7e:1a:77:ce:08:df:e1:3c:ce:cd:23:44:b2:31:ec:
5a:1d:86:ac:0e:6c:f6:a6:ba:0f:cb:ff:59:d4:4d:
c6:bd:f7:de:a0:a3:ab:f4:05:d0:4b:33:fa:07:01:
96:f4:06:1a:b7:9b:bf:e8:d4:36:3a:16:ea:3f:d5:
19:dd:cc:a9:19:62:cc:ea:64:44:97:1a:45:69:0c:
2d:12:1b:aa:ef:7f:28:33:64:a2:e2:6a:a7:d7:f3:
30:15:be:0e:ff:ad:44:ec:fc:ec:94:e2:a2:03:34:
45:c8:4b:6d:38:22:0a:f6:cf:08:37:31:cf:10:4f:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:C8:6C:16:35:14:E7:73:0B:1E:3B:8D:77:0F:AB:33:78:89:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mV7IbBY1FOdzCx47jXcPqzN4iXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.182.0/24
194.135.30.0/24
212.192.0.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:d9:7a:b3:32:2d:c0:ad:23:5e:88:eb:18:a1:f2:2d:b3:74:
fa:db:c5:c5:6a:22:1d:02:47:c4:2d:a6:26:c0:8a:eb:47:b9:
bf:ff:bb:28:e7:20:a2:60:7e:8c:73:07:92:34:64:8f:0c:99:
a2:1f:53:2a:c5:84:67:b3:d3:da:ec:de:33:b0:a6:10:8d:58:
02:9b:46:2a:2f:0d:b6:64:4a:8a:50:94:84:68:d4:70:26:d7:
40:42:87:3f:5c:54:63:43:a7:91:0c:2e:56:a6:0e:e7:ff:4f:
0f:45:9c:2a:ae:fa:26:13:e8:c5:a5:08:95:b1:72:63:c6:32:
42:06:01:7b:a9:75:ea:60:d3:a0:48:b0:0d:48:e7:f6:15:3f:
78:81:8b:55:d0:14:f5:9f:00:19:77:0f:23:68:fc:8e:b0:ec:
95:6a:6e:43:45:63:c1:16:82:2e:0a:92:af:d7:6a:d5:3d:b2:
b2:77:9d:7b:f4:da:41:13:b7:9b:c4:85:cd:7b:d8:59:d6:c1:
90:aa:88:56:7a:32:2f:c9:7c:c8:5d:2e:b8:1d:f6:7d:de:4b:
3b:49:91:88:e1:ff:83:5f:42:88:b7:ef:3f:ff:ec:2c:b9:5e:
fd:14:1d:78:fb:8e:d5:ee:ab:7d:64:03:15:ca:26:ae:4f:8b:
1a:a0:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org