Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MtNG6uOnhPG-ORmyjNAIRPou23w.roa
File: MtNG6uOnhPG-ORmyjNAIRPou23w.roa (raw, json)
Hash identifier: HFoLUFIZxzr6acAJ8aNGMFMetwL3A+nk+oPR9Yw3jEY=
Subject key identifier: 32:D3:46:EA:E3:A7:84:F1:BE:39:19:B2:8C:D0:08:44:FA:2E:DB:7C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08F5EDE4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MtNG6uOnhPG-ORmyjNAIRPou23w.roa
Signing time: Fri 25 Mar 2022 22:26:27 +0000
ROA not before: Fri 25 Mar 2022 22:26:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59554
IP address blocks: 194.146.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150334948 (0x8f5ede4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 25 22:26:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32d346eae3a784f1be3919b28cd00844fa2edb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:94:3f:be:f7:21:5d:cd:b3:4a:20:df:d7:
c6:53:7b:07:ed:a6:28:6a:fc:72:02:67:fd:3d:23:
e2:b0:73:0f:ed:0d:69:d9:ff:99:40:12:86:59:38:
fb:42:40:21:c3:2c:f3:ba:39:d8:75:dd:c0:fe:61:
fe:68:c7:a2:d3:8a:fb:ba:76:8a:c5:d9:23:8b:e6:
e0:a9:bc:fa:d6:d0:9e:68:03:7b:44:88:b6:11:44:
6c:be:4d:0a:fd:26:88:66:28:5c:96:8e:25:2e:af:
89:b8:e8:9a:a1:7c:ba:2e:c4:80:5d:cf:99:34:54:
c1:1d:84:69:0d:12:f3:2c:ee:e2:88:26:c3:52:76:
81:cb:4a:49:ca:fd:85:9b:b2:e0:bc:c3:24:ba:f1:
50:19:c8:b5:6e:66:5e:ba:f8:bf:37:99:ed:c8:81:
1b:5c:79:a5:59:50:a5:24:2f:be:44:93:2f:ae:7c:
77:5d:95:19:71:4a:0c:53:4d:04:61:68:21:85:4b:
7c:35:f6:2f:95:ce:48:c9:6a:94:5b:57:c3:aa:56:
63:8b:b4:b6:9a:00:8f:93:c9:bf:5a:4a:66:0b:e8:
01:e0:30:2b:07:63:e9:33:3d:a8:b6:41:25:f8:20:
32:fa:81:dd:1a:83:39:18:6e:2b:d8:8c:36:d7:df:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:46:EA:E3:A7:84:F1:BE:39:19:B2:8C:D0:08:44:FA:2E:DB:7C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MtNG6uOnhPG-ORmyjNAIRPou23w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.45.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9e:da:df:53:33:5d:65:69:cd:64:0c:f2:2c:73:f3:d4:f0:
2e:a6:43:28:cc:c7:be:91:6c:a9:78:76:6b:d1:ff:63:12:0b:
1c:80:30:47:c4:19:97:e6:1d:0c:85:b2:5f:b0:63:f4:b2:29:
d5:eb:f5:f8:93:52:92:94:76:41:a4:3c:7e:5d:3a:43:ee:a9:
89:17:2d:fd:64:99:7e:4b:fa:fe:6d:20:8e:91:dd:02:f0:94:
e2:30:91:ca:47:e5:e9:07:73:b8:68:9a:df:b9:c4:c4:c4:a6:
85:4a:4c:d5:22:ef:ad:eb:38:de:5b:f4:fc:bb:cf:6c:fc:5b:
78:c4:de:3f:10:b7:51:cd:12:14:5a:37:24:d1:b2:ea:35:7a:
c1:12:8a:f7:a8:2e:e1:8d:0c:c6:75:db:fd:fd:0e:cb:07:34:
d8:80:2a:19:87:be:0c:91:bc:4f:88:87:ed:aa:93:ce:a6:dd:
6b:f6:03:46:0d:a0:ee:d5:6e:5b:d5:e6:6a:fa:e0:7e:04:dc:
3f:35:bc:30:f7:18:6b:80:58:3b:20:70:cf:7e:2c:6c:7a:cc:
85:0c:ea:9e:1b:4e:15:34:58:e8:be:f5:a2:5b:65:08:cc:ba:
e2:a3:5e:3f:f6:6c:96:67:db:99:b4:b8:27:40:96:af:37:f9:
0d:e4:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org