Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1m5VPvX9b1txjqLsqz9gafZE4EU.roa
File: 1m5VPvX9b1txjqLsqz9gafZE4EU.roa (raw, json)
Hash identifier: gupc0rWH5Et7GgY8tGGthxWpj+WwW8IPtmEB3iiPMiM=
Subject key identifier: D6:6E:55:3E:F5:FD:6F:5B:71:8E:A2:EC:AB:3F:60:69:F6:44:E0:45
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0184F0A427F85C51B267B720EEB7C7422CD6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1m5VPvX9b1txjqLsqz9gafZE4EU.roa
Signing time: Thu 08 Dec 2022 07:30:00 +0000
ROA not before: Thu 08 Dec 2022 07:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203025
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.184.0/23 maxlen: 23
2a09:ef40::/29 maxlen: 29
2a02:c580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:a4:27:f8:5c:51:b2:67:b7:20:ee:b7:c7:42:2c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 8 07:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d66e553ef5fd6f5b718ea2ecab3f6069f644e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:4e:a9:07:77:81:ab:bb:77:4e:46:b6:2c:
e4:03:f3:34:aa:2f:c0:69:17:af:61:b6:f9:68:ea:
78:61:a2:bb:f0:2d:dd:18:fd:d9:63:2a:78:67:50:
7e:f8:1e:fc:fe:98:4c:76:57:25:b3:4a:e3:c9:3e:
37:87:68:ae:8c:44:7b:f2:e6:34:cd:27:31:8f:8e:
c7:b3:f2:40:e5:99:82:e0:d4:b0:2d:d2:df:9c:a9:
d2:70:14:77:d0:31:87:c7:33:a7:b9:75:cf:53:0b:
28:42:b0:e3:ea:7f:46:16:0f:b5:f1:8f:ac:1a:ff:
fa:89:d8:c7:7d:25:82:ca:23:09:53:59:07:0a:5f:
9e:a1:e1:a1:37:d8:d5:e1:2a:cc:ef:e9:68:87:30:
6c:61:37:95:c4:15:d7:db:8f:fc:84:85:89:b8:39:
60:cb:0f:56:78:eb:e1:f9:34:82:0a:12:d7:c3:04:
26:4d:52:e6:3f:ed:db:a5:68:55:bb:9f:a4:41:65:
d3:5d:7a:0f:e7:95:45:35:0f:bb:d7:31:14:1a:e9:
77:a3:91:4b:7b:f0:0f:17:d8:72:5d:f6:78:98:0d:
be:05:e8:9f:27:1c:2b:ee:8f:62:1a:84:1a:cf:e5:
20:47:f5:21:33:21:da:39:18:42:c1:7b:73:99:00:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:55:3E:F5:FD:6F:5B:71:8E:A2:EC:AB:3F:60:69:F6:44:E0:45
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1m5VPvX9b1txjqLsqz9gafZE4EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.184.0/23
194.50.188.0/23
IPv6:
2a02:c580::/29
2a09:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
56:99:81:3e:10:30:b8:67:80:3e:3e:73:9d:a5:42:d1:d1:6b:
5c:be:63:5d:14:ca:79:30:5a:a1:87:5d:58:27:51:a6:74:13:
6f:32:27:12:77:42:6e:25:f3:3d:27:9c:8f:de:8d:32:8a:c4:
fb:3a:87:9d:33:c2:d4:7f:9a:3b:16:46:34:f3:6a:73:58:8a:
c7:f5:4b:17:09:1f:e5:bb:c9:bb:8c:b6:ab:d2:f5:b5:69:17:
76:8c:a2:56:9f:3b:d4:b9:5e:6b:1a:df:69:5b:9f:64:40:64:
c7:c1:c8:e1:18:fd:18:7b:a5:62:cb:35:99:80:2a:08:86:47:
c5:05:61:1e:55:bf:47:ff:8b:6d:96:45:5b:21:08:19:91:1e:
bc:75:ab:67:98:b1:fa:9d:37:74:bd:d3:b9:81:b1:c6:bd:23:
3a:b4:19:34:7a:82:1e:b6:e6:7c:2b:cd:92:bd:8b:4b:bd:2e:
ef:da:a9:3c:78:06:68:62:18:3f:77:7d:60:44:94:c4:bf:b5:
77:68:35:fb:29:ca:2e:fc:de:ac:75:78:59:e0:5d:38:e7:eb:
7c:b7:b5:d8:e1:b7:8b:ca:a5:6d:31:c9:1a:54:06:44:8d:a6:
5d:25:32:ae:90:3d:28:64:3f:14:32:19:1a:b0:2d:bc:5d:5d:
fa:82:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:35 2023 by rpki-client on console-ams.rpki-client.org