Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/mYvfzC50SX8CWlHLZ10lXNDsOZc.roa
File: mYvfzC50SX8CWlHLZ10lXNDsOZc.roa (raw, json)
Hash identifier: CVW7NFRafyUcyDNFcFY7f3FHAMcKlE1hwzGAZPLKPhQ=
Subject key identifier: 99:8B:DF:CC:2E:74:49:7F:02:5A:51:CB:67:5D:25:5C:D0:EC:39:97
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 01F72C5E
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/mYvfzC50SX8CWlHLZ10lXNDsOZc.roa
Signing time: Sat 01 Jan 2022 05:05:41 +0000
ROA not before: Sat 01 Jan 2022 05:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32975966 (0x1f72c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jan 1 05:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=998bdfcc2e74497f025a51cb675d255cd0ec3997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:ac:65:fe:28:31:14:a6:52:50:ca:26:c1:
6c:fc:a3:74:81:cb:fe:1a:0a:18:13:76:70:9b:20:
f2:38:90:4d:f9:15:12:3a:70:a1:9b:1a:77:57:b1:
60:a2:24:b9:ac:c2:4b:39:4d:2f:6b:dc:43:57:72:
27:17:fb:b9:50:01:8f:05:8a:e8:dd:d6:b6:91:7a:
a3:71:86:5f:b0:32:e2:00:eb:44:e5:42:95:83:b0:
8f:f9:6e:c9:d7:8a:18:61:e3:d5:16:9f:c5:b1:43:
82:80:cb:6b:73:0f:1c:a7:aa:46:d1:1e:9a:35:8c:
4b:2f:94:6f:38:06:5e:0b:87:0a:3a:2c:2b:bd:65:
ea:6a:e1:23:38:22:d9:b9:65:6c:eb:b0:c6:63:59:
c6:a0:1a:bf:7a:3b:6c:2b:a9:72:27:7a:2f:3a:d9:
42:78:8c:f4:2f:69:e6:7b:c4:4e:87:50:9e:37:46:
d3:dc:78:92:cb:ec:b3:4d:c3:6e:b3:99:50:63:e4:
ae:da:60:62:cf:c2:01:45:50:bb:31:53:7f:c7:79:
14:aa:5a:fb:09:64:ec:26:ec:5b:fc:1e:ac:94:3e:
10:cc:98:05:c4:fb:50:e0:ad:48:30:39:19:52:03:
3c:db:21:6a:a1:05:6c:e7:8b:90:42:ea:60:37:e4:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:DF:CC:2E:74:49:7F:02:5A:51:CB:67:5D:25:5C:D0:EC:39:97
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/mYvfzC50SX8CWlHLZ10lXNDsOZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
51:23:79:17:af:1f:14:88:84:b5:5a:15:57:ff:7f:59:b5:29:
97:ea:50:f0:65:af:6a:da:cb:e9:01:b1:d0:d4:02:21:e2:d0:
82:84:a0:e6:7e:09:ec:cc:a5:46:d9:c6:e2:55:cd:a1:50:19:
a0:3b:13:aa:78:96:81:20:58:04:f4:e6:be:20:5c:1e:e8:6a:
93:17:11:41:da:d7:f8:e3:b7:fb:b6:2a:62:19:02:65:d7:40:
fd:7e:7a:06:b1:58:f3:36:36:dc:2b:16:51:31:02:2e:08:6d:
5d:66:68:51:90:e7:39:f6:04:b5:08:5e:f9:8e:d1:17:0e:37:
17:e0:e5:f7:d8:95:9c:14:19:af:02:d1:1a:c6:c7:20:83:65:
d9:0d:59:d3:fb:74:ac:57:8b:87:77:80:89:cb:37:3b:4a:07:
ce:01:03:58:45:0c:26:82:17:81:07:64:31:02:03:f7:14:92:
87:a8:7c:e9:42:18:5e:5d:85:80:42:d7:2f:fa:7c:e1:77:e2:
b9:0a:d1:05:0b:42:bd:fb:2b:b4:74:7c:3e:1b:cb:02:ac:59:
04:20:c1:0a:d8:4c:e6:7f:52:8a:14:53:65:ee:75:70:7f:b4:
54:00:47:71:af:2a:5b:3a:21:50:21:a7:ed:e3:4a:3f:2e:99:
f6:8e:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org