Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Hmdmk-10GeH9Pok4ax0F5YUVImw.roa
File: Hmdmk-10GeH9Pok4ax0F5YUVImw.roa (raw, json)
Hash identifier: x9X5gMQUXSSf5Y88WuOinJuoRaey8P8Yn5n0CV+Rsqs=
Subject key identifier: 1E:67:66:93:ED:74:19:E1:FD:3E:89:38:6B:1D:05:E5:85:15:22:6C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185393F69F1876731975854130BD0BCCF41
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Hmdmk-10GeH9Pok4ax0F5YUVImw.roa
Signing time: Thu 22 Dec 2022 09:52:15 +0000
ROA not before: Thu 22 Dec 2022 09:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201190
IP address blocks: 194.102.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:3f:69:f1:87:67:31:97:58:54:13:0b:d0:bc:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 22 09:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e676693ed7419e1fd3e89386b1d05e58515226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:e5:66:73:82:54:61:c2:9c:55:84:d8:b5:
ef:3b:0d:21:91:9d:6a:bf:b8:49:0c:40:f9:4d:ac:
ae:3c:75:fa:69:63:c1:05:40:d7:6d:34:1f:24:f3:
7c:03:bc:cc:86:12:f6:57:a0:10:46:73:2a:62:31:
7f:91:61:ae:b4:9b:b3:e7:69:e5:6e:02:45:58:be:
c6:68:80:17:0c:63:df:c5:4f:ea:66:69:66:fc:0b:
4b:58:5a:db:60:7c:23:30:61:91:43:13:5e:8d:e7:
ba:36:bc:b4:89:01:55:be:f1:9d:ba:30:ea:91:4d:
12:95:50:5b:cc:b4:92:4c:01:2f:42:92:f3:04:52:
02:c3:4b:c1:6d:e5:e6:11:33:a7:b1:11:17:a1:83:
ec:03:da:1f:a0:eb:c1:ad:34:c2:a6:77:b5:06:d5:
51:41:d6:07:28:35:83:fc:f3:05:2d:fd:fd:b5:d9:
83:25:09:bb:18:72:7e:ba:69:d3:1f:3a:c4:f4:7a:
12:14:e2:a4:c9:49:b7:56:41:46:e0:69:a2:f4:14:
2d:16:e7:d5:2f:d5:38:bf:b3:f2:64:2f:e9:9a:be:
c8:2a:ad:d0:86:d0:ab:f9:4c:81:48:cb:48:3a:fa:
de:47:d4:01:92:d8:a2:48:93:aa:cd:7d:d6:6f:b5:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:66:93:ED:74:19:E1:FD:3E:89:38:6B:1D:05:E5:85:15:22:6C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Hmdmk-10GeH9Pok4ax0F5YUVImw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.34.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8b:20:38:4e:a8:3a:4a:7a:36:52:a5:04:d1:2b:92:04:68:
d6:20:35:2e:0c:84:7d:be:77:86:54:71:b8:be:c0:1d:4e:68:
52:94:3e:26:43:76:86:9c:6d:1f:c6:36:d7:2a:1e:11:6a:7c:
79:e0:90:4b:be:d9:38:7f:5d:f6:92:a2:51:32:6e:10:34:ca:
99:1e:f7:1a:89:e2:3f:b8:67:72:77:9b:60:1f:b7:00:8f:59:
6a:2f:69:e5:14:b7:94:a3:11:67:ae:4e:84:5e:63:12:ba:c4:
a2:a8:12:b2:80:83:78:a1:73:4c:1f:dd:9b:ed:b5:80:46:7f:
a4:f7:95:fa:89:b5:3f:59:5d:3a:0d:25:cd:00:d7:38:08:fa:
e1:ab:b3:54:dc:89:20:0c:2e:15:b5:9d:01:9d:ff:df:c7:f5:
c1:6a:a1:b5:e0:49:1e:4d:7c:f8:be:19:3b:3e:d8:ca:c7:7b:
6a:d8:69:22:0f:b9:cb:e9:58:3e:4c:97:38:bc:43:e3:e4:a1:
52:db:29:ae:9a:a9:13:f1:93:7a:7a:cc:38:b8:fb:e2:e0:be:
1f:cd:8e:9e:8b:e4:c5:e0:35:8a:ed:7e:4b:1d:55:66:05:04:
6c:2e:cb:8c:61:a1:5e:c1:31:d9:0b:ba:ca:b2:88:1f:96:09:
fe:33:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org