Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MI2rdmelC3Od8iDfe3Hp4juo5GI.roa
File: MI2rdmelC3Od8iDfe3Hp4juo5GI.roa (raw, json)
Hash identifier: 9hZelgNcPkFUXQoYxWYUJommXp2aKII8bjYHVv9HO0Q=
Subject key identifier: 30:8D:AB:76:67:A5:0B:73:9D:F2:20:DF:7B:71:E9:E2:3B:A8:E4:62
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0986746E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MI2rdmelC3Od8iDfe3Hp4juo5GI.roa
Signing time: Fri 21 Jan 2022 09:57:38 +0000
ROA not before: Fri 21 Jan 2022 09:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60522
IP address blocks: 194.62.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159806574 (0x986746e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 21 09:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=308dab7667a50b739df220df7b71e9e23ba8e462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:61:87:f2:51:50:bb:e8:10:d4:18:46:48:
c3:f0:53:30:17:ba:d9:76:df:4d:ad:8c:66:77:fb:
ad:bd:5a:e6:74:8c:ef:21:b0:77:c1:ad:04:81:8d:
a2:b0:03:f6:b7:d7:39:55:ff:19:ee:c6:dc:3b:9b:
a6:eb:b4:72:80:60:2e:89:9c:b1:40:5c:7d:ac:aa:
e1:af:3a:64:92:b8:21:54:ce:72:c9:d8:4f:31:14:
82:94:e3:74:32:ee:46:2f:77:a5:43:f1:34:77:e6:
50:64:89:27:c1:8e:b0:b4:d7:04:8e:77:a1:e8:5e:
58:20:d5:31:d9:b0:4f:80:91:86:86:04:ae:35:93:
b2:6d:bf:32:7d:73:93:14:20:c5:7b:f4:44:ea:33:
0a:e2:0c:bd:9e:c6:10:38:3c:ed:82:01:6d:48:1f:
2d:99:72:79:16:ff:31:e6:55:b0:a0:56:0c:72:4f:
3a:09:2d:48:fb:68:d4:b5:fe:2a:17:5b:46:8c:97:
d9:51:38:6d:84:3f:ee:44:89:8a:b2:05:d4:40:1f:
94:cb:92:0e:2e:6c:55:87:dc:67:a6:93:59:b1:5a:
31:85:2a:a6:1f:3a:f0:8c:3d:11:31:34:37:93:c2:
5e:f7:06:b8:46:eb:11:7c:34:54:fb:4c:d4:d2:38:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:AB:76:67:A5:0B:73:9D:F2:20:DF:7B:71:E9:E2:3B:A8:E4:62
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MI2rdmelC3Od8iDfe3Hp4juo5GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.248.0/22
Signature Algorithm: sha256WithRSAEncryption
90:eb:9d:ee:5c:3e:29:c6:13:1d:9c:9d:71:a7:87:78:d3:c5:
f4:82:64:cc:28:80:fb:20:36:ac:da:a1:8a:9a:80:44:bc:25:
0c:0f:b8:d9:b6:fa:99:05:c3:64:df:9b:6b:96:62:a5:7a:a3:
dd:4a:b4:bc:1f:2d:72:d5:cb:32:a5:77:08:f1:37:46:79:88:
37:eb:02:d9:7c:85:5d:f0:18:94:97:a8:52:e9:8d:f6:57:b7:
5c:c4:ac:ed:53:42:97:48:5f:0c:4c:ef:ab:4c:0e:13:df:c1:
62:c0:b1:c2:30:21:22:72:12:42:d7:21:c4:95:92:d3:02:a9:
34:5d:d9:6a:bd:7e:6b:6b:12:dc:99:ee:fd:d4:ee:d6:6d:fe:
89:25:af:47:dd:c1:bd:cb:7f:e6:ae:7e:84:51:e2:d2:7d:e6:
de:b7:c5:01:ea:74:a0:3d:0b:e1:ff:41:40:ea:cd:d7:9a:b1:
f3:3b:0b:94:8b:68:4c:31:59:7c:8d:ea:0b:fb:17:2d:d3:bd:
34:69:e8:e8:d7:9d:24:20:99:ce:bf:5e:91:3c:7c:19:5f:c3:
3c:de:66:c6:27:60:cc:d5:a6:97:d1:64:79:e0:c2:e8:43:56:
f7:b8:ce:75:69:6a:a3:8f:64:0c:14:27:d9:90:fe:24:78:32:
4f:60:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org