Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/1rMkjmH9TJM34zUjimn2YuOZDoI.roa
File: 1rMkjmH9TJM34zUjimn2YuOZDoI.roa (raw, json)
Hash identifier: JToHjD48TStYwhdST3eFxlJbuloX/vguspBgKuH2eLM=
Subject key identifier: D6:B3:24:8E:61:FD:4C:93:37:E3:35:23:8A:69:F6:62:E3:99:0E:82
Certificate issuer: /CN=5e7e445904943e99830cb094988720fc977b1fbc
Certificate serial: 06BA447A
Authority key identifier: 5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/1rMkjmH9TJM34zUjimn2YuOZDoI.roa
Signing time: Sat 01 Jan 2022 07:58:45 +0000
ROA not before: Sat 01 Jan 2022 07:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205473
IP address blocks: 194.113.196.0/24 maxlen: 24
194.113.197.0/24 maxlen: 24
194.113.198.0/24 maxlen: 24
194.113.196.0/22 maxlen: 22
194.113.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112870522 (0x6ba447a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7e445904943e99830cb094988720fc977b1fbc
Validity
Not Before: Jan 1 07:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6b3248e61fd4c9337e335238a69f662e3990e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:58:0c:84:88:99:67:bf:4a:7d:b6:10:d1:
3b:3b:67:f5:0f:dc:f7:f4:34:8e:b3:fe:e0:40:03:
8d:04:b6:32:0b:93:8a:d6:bf:6c:98:ec:09:9f:78:
94:76:61:8e:fb:1b:4a:33:7e:d9:b8:82:44:a1:64:
1c:2a:1a:66:9c:39:19:59:db:72:42:74:0d:4e:09:
35:82:cd:33:c0:d5:53:00:0e:07:d0:70:b7:a3:d5:
28:07:1d:44:20:9d:2d:e4:1d:97:36:12:fc:cb:7c:
3d:6e:41:e8:a8:05:b9:c4:e4:5a:cb:3c:d2:31:4c:
a2:27:20:32:4e:c9:23:14:80:b5:e8:82:4b:2a:c6:
55:b4:4c:62:99:49:0d:53:4b:a5:1f:40:4f:85:58:
f0:97:c1:25:5c:f2:4e:b8:89:84:80:f8:5a:81:58:
56:8c:8d:9d:6f:ad:92:ea:50:1c:4f:30:16:06:05:
96:96:0a:36:e4:0c:77:f0:98:ba:9c:fb:11:f9:ce:
1b:25:58:0b:ce:80:87:e7:a1:5e:fe:82:22:1a:b1:
80:8c:c3:db:30:3a:53:51:04:9e:05:6b:e0:a0:df:
7a:e7:39:7a:5d:0d:92:61:b5:ba:d2:db:35:dc:e8:
9d:0f:60:81:1f:e0:64:34:50:93:5b:f9:5a:5f:b8:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:24:8E:61:FD:4C:93:37:E3:35:23:8A:69:F6:62:E3:99:0E:82
X509v3 Authority Key Identifier:
keyid:5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/1rMkjmH9TJM34zUjimn2YuOZDoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.196.0/22
Signature Algorithm: sha256WithRSAEncryption
34:0e:f8:2b:6a:04:a5:62:71:68:4f:44:d2:b1:c6:b9:c7:35:
dc:8a:c5:4b:34:fc:47:aa:32:17:4d:2d:aa:4d:79:02:1a:a1:
5d:a1:0b:54:aa:cb:aa:e7:72:bf:94:7c:0d:f9:89:8d:3c:64:
23:6e:b1:fc:2c:84:60:d4:5f:52:f5:51:32:78:f7:e8:54:34:
cd:42:b1:b0:e1:cc:74:a3:9c:d4:e5:85:01:31:33:48:7f:9c:
aa:a0:94:0f:81:f9:30:42:d2:95:22:d8:03:7f:43:ff:ea:89:
57:68:9d:d2:db:08:d7:e6:b1:33:77:ad:04:c1:b0:5a:43:ec:
ba:5d:92:29:06:2e:4c:10:d2:40:d3:ec:6b:1d:38:da:dd:88:
01:1e:c3:40:1c:a3:c5:5a:ba:03:7c:65:98:fc:c4:f4:ae:74:
83:d5:70:c1:f8:a4:ca:74:a8:3c:f0:15:c1:50:99:3d:2a:90:
e4:99:32:7d:6e:40:9f:b7:76:e0:88:09:58:e4:c8:33:65:79:
d4:e2:14:51:3b:78:44:70:97:0f:ee:1a:4e:1f:d2:09:6f:7f:
26:22:6e:02:d1:39:c5:5a:5b:6d:01:0b:cb:4c:8d:88:c0:c7:
c0:31:de:55:cc:01:ee:d8:8c:bb:cf:9c:b4:09:bc:7a:1f:0d:
0d:5c:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-ams.rpki-client.org