Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/M91Nalrc2cFn5pzsYRU8w0kV7To.roa
File: M91Nalrc2cFn5pzsYRU8w0kV7To.roa (raw, json)
Hash identifier: 1Oe0Wd9j96Tdb1J5467dT1aIkAEsYHjgNG1mkzvij54=
Subject key identifier: 33:DD:4D:6A:5A:DC:D9:C1:67:E6:9C:EC:61:15:3C:C3:49:15:ED:3A
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 01847600076AD27E70E084F318079C35281F
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/M91Nalrc2cFn5pzsYRU8w0kV7To.roa
Signing time: Mon 14 Nov 2022 11:57:04 +0000
ROA not before: Mon 14 Nov 2022 11:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202373
IP address blocks: 194.55.96.0/22 maxlen: 22
194.55.97.0/24 maxlen: 24
194.55.98.0/24 maxlen: 24
2a0c:cac6:1000::/36 maxlen: 36
2a0c:cac6:2000::/36 maxlen: 36
2a0c:cac0::/29 maxlen: 29
2a0c:cac2::/32 maxlen: 32
2a0c:cac1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:00:07:6a:d2:7e:70:e0:84:f3:18:07:9c:35:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Nov 14 11:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33dd4d6a5adcd9c167e69cec61153cc34915ed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:ce:8e:8b:f6:a6:c0:59:9c:aa:b4:0d:77:
a6:61:82:97:f9:8c:c4:91:f6:a9:b8:da:32:a0:42:
30:b3:1e:f8:14:01:88:d9:5d:49:f1:65:82:fb:21:
a2:24:90:82:b5:8e:af:d3:2e:32:29:c3:b2:d0:9b:
e6:e9:1e:5d:44:99:c0:c4:df:92:28:4f:1b:e6:83:
99:1d:1c:89:4d:65:be:ab:63:6f:38:45:95:1d:18:
7b:2f:41:3b:81:55:f5:b8:84:39:36:4a:fe:61:2f:
06:9b:1d:35:e0:d0:73:c4:ac:f2:6a:b1:be:af:6d:
d2:46:22:d3:b0:ef:36:61:3b:9f:51:8b:0a:92:7a:
94:e2:0f:ea:36:e9:e0:42:18:54:7a:38:60:88:e7:
2e:53:be:ca:2b:f9:42:82:bd:26:d2:a2:57:77:ec:
5f:0d:27:a0:a1:13:c2:4b:ff:bc:46:c5:ae:7f:00:
cc:5e:1b:f7:80:26:e3:ea:6b:79:88:4d:c3:27:c7:
af:ef:ba:97:ca:d1:ae:9b:dc:e8:c1:e5:e0:96:20:
db:ab:6d:65:05:55:52:b8:06:d9:77:07:00:95:ce:
df:0f:4d:cf:99:21:19:58:7b:4b:43:af:b8:d3:9b:
95:c4:1e:cf:ed:24:e6:2c:2c:ca:f1:1e:0b:74:b2:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DD:4D:6A:5A:DC:D9:C1:67:E6:9C:EC:61:15:3C:C3:49:15:ED:3A
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/M91Nalrc2cFn5pzsYRU8w0kV7To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.96.0/22
IPv6:
2a0c:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
07:aa:de:d1:29:04:6f:87:77:37:04:6f:52:a9:96:23:62:3b:
36:8c:77:6b:17:af:45:c4:bf:24:67:c1:a3:06:77:1a:67:72:
42:7a:72:3d:20:f4:4f:b3:38:6e:46:cf:b2:02:86:2b:5a:5a:
7e:ba:90:bf:df:75:04:cb:4e:c5:7c:93:85:5e:d3:7b:8d:b8:
d9:2a:88:c0:04:ab:dd:f5:e1:ef:78:c8:48:2f:18:99:c2:21:
e9:b7:77:69:53:31:99:f9:11:90:e4:3e:d2:70:12:79:60:0f:
55:a8:af:40:52:70:41:fe:0f:e6:9b:3f:e3:77:ab:18:bf:0a:
b0:34:16:9e:57:91:73:1a:4f:62:41:89:2e:6e:9a:27:98:90:
d6:ba:b4:86:b6:f7:1a:2a:1d:25:64:66:7e:a3:be:34:55:c4:
05:2b:e3:1f:2e:7c:39:60:82:82:19:b2:fe:a7:31:0f:5b:ab:
29:38:91:be:7d:51:d3:2f:15:82:15:b2:56:9f:3d:48:f4:70:
27:cc:e4:09:15:8f:0d:f4:e0:bd:1c:44:05:61:9e:16:09:75:
3b:9c:7a:9e:75:56:b7:89:c6:18:8e:e7:8b:85:a0:03:49:11:
f4:42:76:61:de:bf:22:31:cd:f4:3b:74:be:1b:98:d5:da:35:
d4:b6:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:17 2024 by rpki-client on console-fra.rpki-client.org