Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/mGyCom5TW-TMxwIf1N5GY9bW978.roa
File: mGyCom5TW-TMxwIf1N5GY9bW978.roa (raw, json)
Hash identifier: xf3Mf/JI0b3hN7unw63tonKL4UMkgWsrS1wBLWwRQ4c=
Subject key identifier: 98:6C:82:A2:6E:53:5B:E4:CC:C7:02:1F:D4:DE:46:63:D6:D6:F7:BF
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 270115
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/mGyCom5TW-TMxwIf1N5GY9bW978.roa
Signing time: Sat 01 Jan 2022 01:53:17 +0000
ROA not before: Sat 01 Jan 2022 01:53:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9255
IP address blocks: 194.124.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2556181 (0x270115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Jan 1 01:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=986c82a26e535be4ccc7021fd4de4663d6d6f7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:39:80:9d:3b:7a:d6:a7:f9:59:e9:6d:94:
83:35:ec:02:09:4b:2a:d6:90:2f:c4:ca:a4:3f:83:
dd:31:8e:37:5b:b6:98:1b:17:69:2c:42:e3:c6:0a:
e9:14:6e:ca:70:d1:1d:53:03:9a:9f:fb:11:3b:11:
62:a6:c1:d7:00:f6:fe:47:0b:36:7d:b7:51:ef:95:
56:4d:1c:19:35:2d:db:eb:a0:26:1f:b4:b8:6a:a8:
45:4d:8d:61:b0:4d:96:bf:d5:15:39:92:33:94:f1:
f9:67:fe:f6:89:d3:99:30:b9:a0:f4:34:f1:40:43:
f8:ba:d4:2d:a4:67:1e:f7:d0:81:8f:80:58:4b:aa:
d7:47:ff:ef:da:1e:b9:9a:a1:af:7a:2e:51:95:04:
a0:aa:62:c5:50:d2:b7:c7:fa:de:85:97:4b:4c:d0:
4d:30:80:9e:23:64:00:69:83:66:c2:d0:18:40:78:
b1:9a:fe:e2:66:a6:d4:4c:48:bd:77:3d:c1:d6:9f:
e5:1e:1d:9a:7f:51:75:7c:16:af:6f:3f:4f:8d:86:
c5:0d:e8:3f:d7:97:13:75:3f:d8:1c:6f:dd:67:8b:
5f:d7:94:1a:e5:f6:18:29:a7:72:d2:f6:5a:d7:cf:
70:e9:48:a0:fd:d3:b8:59:00:20:ce:1b:f3:96:f0:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:82:A2:6E:53:5B:E4:CC:C7:02:1F:D4:DE:46:63:D6:D6:F7:BF
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/mGyCom5TW-TMxwIf1N5GY9bW978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:eb:a0:64:e7:67:b4:3d:81:e8:8a:b9:33:dc:5f:ef:b9:24:
64:07:cc:13:20:29:b6:36:fe:1e:82:c9:8a:b3:35:e9:2e:27:
96:1f:ff:06:d0:74:92:3d:20:8a:62:ec:d8:d6:d1:2f:14:cd:
e9:62:28:06:21:20:c9:fa:1b:f3:55:02:70:f1:c8:a3:38:65:
6a:b1:85:2c:eb:be:22:dc:cd:2d:c0:d9:72:60:16:3d:20:ac:
e9:68:9c:6c:33:20:5a:07:26:e6:9b:7f:b3:c7:c7:64:9d:16:
3d:bb:85:d5:31:c5:e1:5c:ea:26:74:3d:12:b0:a9:a8:94:70:
44:1e:f7:e2:aa:1e:e2:7e:e5:6a:f2:e9:5e:0a:ea:7a:f1:1f:
09:48:24:25:d6:80:09:34:4d:45:06:b7:29:1e:33:c4:c1:38:
8e:45:df:7d:b3:98:3b:d7:24:02:18:d8:74:19:ae:44:f5:47:
15:ca:ca:04:8a:48:07:86:43:ed:9d:83:d4:93:78:cd:f5:cf:
03:fb:cd:7c:64:e5:3f:84:73:74:9c:c6:34:79:94:8a:77:8a:
d7:eb:d5:b5:36:2f:16:e9:1f:e0:f7:20:f7:01:93:0e:fa:89:
2d:e1:79:83:33:07:b2:2f:f3:88:46:74:a9:2d:1a:d9:2d:ab:
c7:d5:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:48 2025 by rpki-client