Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/H-MvjpiG6AyZWX9KQROmlR4vcEk.roa
File: H-MvjpiG6AyZWX9KQROmlR4vcEk.roa (raw, json)
Hash identifier: 5I7VkTWZdWw3SbwQb2fGOyJTP1l214+9zzGk421GXwA=
Subject key identifier: 1F:E3:2F:8E:98:86:E8:0C:99:59:7F:4A:41:13:A6:95:1E:2F:70:49
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 0305D51F
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/H-MvjpiG6AyZWX9KQROmlR4vcEk.roa
Signing time: Sat 01 Jan 2022 04:57:06 +0000
ROA not before: Sat 01 Jan 2022 04:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200776
IP address blocks: 194.11.128.0/24 maxlen: 24
194.11.128.0/22 maxlen: 22
194.11.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50713887 (0x305d51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 1 04:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fe32f8e9886e80c99597f4a4113a6951e2f7049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:83:7d:b3:a3:4d:50:a1:51:58:b7:4e:7b:
05:aa:24:25:94:4e:0b:13:83:8b:82:91:58:86:f4:
0c:7b:97:40:74:81:6a:b8:5d:5e:25:71:03:60:eb:
1c:52:3e:b5:ae:37:f4:e9:90:11:e8:75:2f:a9:bc:
0d:d4:eb:6c:cf:2c:e8:f3:6c:ff:cf:13:28:81:85:
d7:ef:24:ed:2e:6b:70:9f:c3:14:37:85:bd:c3:51:
a7:b7:26:9b:7a:ee:f8:10:5f:88:78:d9:eb:93:5c:
2f:34:27:e1:f4:1e:2d:81:8e:d4:18:40:55:0d:25:
da:32:73:8a:a5:0b:2f:71:0b:3f:67:8b:fe:97:ce:
32:b6:e9:65:8a:f4:27:ea:56:91:61:3d:7a:d5:86:
f7:67:2a:c5:c7:de:5b:91:28:8c:a5:e1:17:a2:05:
f7:79:63:51:dd:03:60:31:19:dc:93:05:97:e4:5e:
1c:b5:6c:36:c8:ae:4d:39:ef:ec:ba:a7:49:27:b1:
b0:bf:7f:ab:bc:34:a4:26:a3:44:d8:b8:c7:8d:0b:
9d:92:3e:03:2b:73:af:42:56:ab:fe:db:f1:59:ec:
96:f2:81:b0:31:a6:af:71:b9:ce:bd:01:98:ca:c6:
4c:a7:64:36:dd:6a:09:13:bf:df:2d:aa:23:5e:25:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E3:2F:8E:98:86:E8:0C:99:59:7F:4A:41:13:A6:95:1E:2F:70:49
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/H-MvjpiG6AyZWX9KQROmlR4vcEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.128.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f8:ef:a7:8c:52:93:3e:3f:59:a1:c8:01:79:aa:4f:74:32:
01:ef:4e:6b:01:eb:c0:70:28:8d:6e:be:89:fe:52:f7:55:16:
c8:d1:db:59:50:e5:9d:9e:e4:0b:73:be:78:90:97:d3:d4:89:
85:37:dc:78:01:97:42:fe:7a:b2:6a:11:ce:29:33:fe:58:f2:
91:3c:c5:6a:c5:b3:f7:e6:4a:da:0c:31:fa:51:55:49:fa:28:
7f:b0:b0:ec:1b:5f:61:ea:ec:9e:9a:91:3c:df:ba:a1:c0:09:
77:e9:00:d3:19:86:86:7b:bc:01:eb:61:a0:77:9b:69:c6:7d:
ec:62:13:af:20:fb:df:39:05:f6:83:4b:5b:9c:e8:50:c9:4c:
0c:48:22:b0:0e:36:ec:c4:0c:83:44:53:89:4b:71:3a:f6:0e:
63:1e:2e:1b:e9:d4:a0:37:24:68:82:ec:c0:1a:bb:85:45:94:
5c:a2:2c:1b:f8:db:c8:c7:7f:34:11:b5:f1:f3:36:ee:42:cb:
1f:c8:69:92:18:65:24:c2:0a:e9:62:83:33:b5:4f:83:79:fd:
a3:ab:84:fe:19:6c:27:ba:e9:ee:d7:ad:a0:48:77:a6:1f:55:
d7:63:a0:3f:8c:cc:0f:3c:2f:d1:0c:10:96:23:d9:35:6e:00:
1e:3e:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:44 2024 by rpki-client on console-ams.rpki-client.org