Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/8MluUDYHMzIVAq7TF3VVB9IbteE.roa
File: 8MluUDYHMzIVAq7TF3VVB9IbteE.roa (raw, json)
Hash identifier: 0amo9dxwGEz3Mr+jwafW9r5Uy+z/Jc8b6DXTcdmh1LY=
Subject key identifier: F0:C9:6E:50:36:07:33:32:15:02:AE:D3:17:75:55:07:D2:1B:B5:E1
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 0181D2690BC3033A79334051513E470D01D5
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/8MluUDYHMzIVAq7TF3VVB9IbteE.roa
Signing time: Wed 06 Jul 2022 07:28:28 +0000
ROA not before: Wed 06 Jul 2022 07:28:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49771
IP address blocks: 194.242.24.0/24 maxlen: 24
194.242.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:69:0b:c3:03:3a:79:33:40:51:51:3e:47:0d:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jul 6 07:28:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0c96e50360733321502aed317755507d21bb5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:98:d2:91:e5:c7:64:c4:2c:db:60:0e:6a:
36:fd:37:14:c1:46:a6:35:79:01:b3:64:fb:44:45:
32:52:51:17:6d:06:e6:1c:d4:f1:00:7a:ad:3b:9d:
12:c0:6d:7d:d2:47:e0:5f:27:d4:44:7f:26:da:96:
13:71:00:67:d9:56:82:ac:46:cb:ba:72:75:5b:4c:
05:77:8b:41:92:4d:11:bd:20:7b:51:a8:9e:57:06:
66:24:2b:0b:4e:7a:bb:12:42:27:7e:f7:48:6f:5d:
9a:a2:37:c0:b5:06:4c:3f:7b:45:1d:16:c5:ba:f8:
48:83:37:8e:1b:14:13:f9:bb:b6:71:e8:2e:de:d8:
85:89:cf:7a:9d:aa:61:92:1b:42:3a:85:1d:79:0f:
44:84:41:5d:f4:87:1e:8e:64:7a:9d:56:80:81:f4:
47:6a:38:c6:7a:42:0e:8b:88:54:42:a7:d1:f9:d4:
7f:ef:28:7d:ac:5a:8f:b8:c7:1c:86:34:09:4f:2f:
45:d1:91:f2:c0:74:cd:c3:56:5a:30:8d:57:f7:bc:
4c:c0:39:5e:08:6e:18:45:ab:a0:f2:38:75:c5:53:
3b:6d:07:e9:f7:f4:3f:56:2d:c3:78:d0:b7:8a:16:
82:4e:10:f5:ff:09:71:2b:bf:24:07:e1:18:55:0f:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:6E:50:36:07:33:32:15:02:AE:D3:17:75:55:07:D2:1B:B5:E1
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/8MluUDYHMzIVAq7TF3VVB9IbteE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.24.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:a5:21:ee:30:08:32:b0:e8:fc:b2:b4:fa:4c:5e:ae:9d:b9:
cb:2a:65:58:9d:d0:e9:f2:7a:e3:e1:ec:7d:87:85:02:d3:b3:
d3:5a:42:46:11:b8:be:2f:60:49:67:58:04:9f:b2:54:8f:c7:
f8:e3:cc:c7:b8:c0:67:9e:c3:ad:c5:48:c5:04:f1:4e:7a:63:
5b:f8:bc:13:d1:d4:46:ca:4d:d6:ed:6a:dd:c2:9f:34:74:52:
13:fc:36:ad:61:6a:25:e4:09:e5:e3:d5:59:06:68:6f:f8:a1:
ce:b4:e1:cd:07:6c:f8:be:50:07:76:94:45:65:ea:02:ea:4d:
fc:cb:f5:21:69:98:7e:41:fa:3a:ad:ac:7c:77:98:42:e0:76:
22:33:ca:d3:6b:93:86:37:f3:40:02:fe:26:67:1d:c9:6e:83:
39:3c:a9:88:ef:85:34:cb:09:29:8b:f0:f2:44:be:dc:13:c6:
97:8e:61:fd:40:b9:c6:bd:1e:f0:4a:09:7c:16:7c:2c:8f:a6:
77:be:b5:e8:d0:b9:c0:7b:85:6c:35:e7:e3:47:fa:aa:27:9d:
0d:aa:46:74:3c:d9:65:93:54:02:7d:5a:91:e2:4f:76:32:72:
ed:a1:bd:2c:57:37:1a:39:a7:8a:37:4f:85:d8:40:26:46:2f:
af:0a:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-ams.rpki-client.org