Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/MBlvG-dwgLOJpgrH9PjQ7udIM7w.roa
File: MBlvG-dwgLOJpgrH9PjQ7udIM7w.roa (raw, json)
Hash identifier: RA04NCkQwWDOD9XbLj6q1GRrNWHWyYO/dD3nCKaumxE=
Subject key identifier: 30:19:6F:1B:E7:70:80:B3:89:A6:0A:C7:F4:F8:D0:EE:E7:48:33:BC
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 0695AE1E
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/MBlvG-dwgLOJpgrH9PjQ7udIM7w.roa
Signing time: Sat 01 Jan 2022 08:58:17 +0000
ROA not before: Sat 01 Jan 2022 08:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 194.24.8.0/24 maxlen: 24
194.24.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110472734 (0x695ae1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Jan 1 08:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30196f1be77080b389a60ac7f4f8d0eee74833bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:06:92:3b:f0:79:35:bc:99:9c:cb:e1:74:
f2:b4:61:a1:07:eb:ab:6b:a0:c7:c4:4c:4f:e8:0a:
bc:6b:af:69:1d:d9:4f:94:77:d0:55:e4:fe:72:3b:
6e:22:b8:d3:72:97:79:7b:9b:bb:76:cd:a2:bd:0a:
19:d1:69:d4:a1:17:f9:98:b9:f0:24:32:2d:4a:9c:
53:9d:25:34:84:59:3d:72:7e:c1:80:60:77:61:a5:
ed:28:e4:8c:82:d7:81:dc:50:e3:91:e5:a6:76:18:
33:6a:05:22:13:a5:08:7f:9c:8e:70:5f:6c:b6:69:
2a:47:fa:9b:31:c9:3c:06:c8:94:55:24:3b:db:61:
45:50:ba:82:45:33:4d:3b:c4:05:e6:c3:be:f8:21:
b3:62:e7:48:48:89:05:b0:b0:e1:1d:c2:19:a1:f8:
6d:8f:77:b4:2b:cd:4f:09:ba:38:f6:63:96:88:50:
78:a0:13:75:f0:a3:ac:98:f2:a5:8c:e7:95:2c:4f:
45:d4:63:24:88:88:8c:fb:e5:e8:96:03:b7:cd:10:
f2:48:ab:6c:e8:48:6a:56:00:c6:8f:b0:8c:5b:64:
9a:d2:f9:49:ef:55:41:5b:52:de:68:38:31:2b:9c:
e1:1c:81:fa:32:41:21:59:d7:4f:3a:d7:70:90:70:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:6F:1B:E7:70:80:B3:89:A6:0A:C7:F4:F8:D0:EE:E7:48:33:BC
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/MBlvG-dwgLOJpgrH9PjQ7udIM7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.8.0/24
194.24.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b0:0f:1f:9e:7f:f6:2c:aa:af:40:6a:cc:e0:61:37:79:ff:
30:29:a8:bb:fe:2c:0f:b9:9f:86:84:ee:c5:23:9f:cd:ed:54:
bd:40:51:ce:e7:36:5c:c7:15:fe:fd:68:00:a3:e4:6b:32:93:
2a:a6:6c:15:c1:d6:74:f7:47:74:cb:a5:6b:f8:0e:be:c7:e8:
c1:73:fa:94:2e:6e:dc:86:aa:65:a5:09:8d:8b:f4:56:bd:0c:
c0:d4:66:a4:de:37:67:15:ea:86:31:1d:2a:71:7a:dd:56:88:
f7:a7:bf:41:76:36:07:32:92:53:bf:89:1f:99:5b:88:7d:53:
a6:2a:b5:1d:6a:ff:ea:a7:13:fc:85:bf:c3:a8:a3:53:9a:07:
75:19:45:13:69:02:2b:9e:f4:c9:07:12:e8:8f:33:e7:b0:16:
4e:ff:42:fb:ae:62:41:19:da:05:5d:22:c8:c1:19:03:01:67:
0d:f8:9a:b4:84:86:12:5a:17:50:9a:1d:6e:3f:67:08:17:05:
3c:e7:9d:91:44:34:dc:73:ec:37:d3:8c:62:4c:f2:8f:f3:3b:
37:ce:96:cc:23:08:5f:74:fa:77:c3:07:d1:f1:a4:b6:68:b5:
c7:54:6f:f7:68:1a:e5:62:dc:e1:95:73:1d:41:55:59:8f:10:
b4:ab:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org