Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/41ZcX0pM-y9HyacliB9JDaUohBU.roa
File: 41ZcX0pM-y9HyacliB9JDaUohBU.roa (raw, json)
Hash identifier: VE2AordvugPw8kyU3PcHWVCJWMuWlFkctTWpqo77S0Q=
Subject key identifier: E3:56:5C:5F:4A:4C:FB:2F:47:C9:A7:25:88:1F:49:0D:A5:28:84:15
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 06938E61
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/41ZcX0pM-y9HyacliB9JDaUohBU.roa
Signing time: Sat 01 Jan 2022 08:57:49 +0000
ROA not before: Sat 01 Jan 2022 08:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200387
IP address blocks: 194.49.11.0/24 maxlen: 24
194.49.8.0/24 maxlen: 24
194.49.9.0/24 maxlen: 24
194.49.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110333537 (0x6938e61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jan 1 08:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3565c5f4a4cfb2f47c9a725881f490da5288415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:9c:af:73:7a:a8:fc:8c:1d:2a:a8:8a:44:
e3:64:f6:ce:ef:b2:45:ba:c6:60:14:bb:16:c1:ce:
03:f2:f4:42:54:e0:fb:ba:cc:a7:63:43:87:fb:0e:
24:1a:1d:05:b4:57:68:c2:dd:ff:0f:48:f8:8c:e6:
31:bf:bf:8b:81:58:9e:4a:ed:04:0b:0f:96:51:25:
18:fe:2b:75:70:49:d5:0c:8a:96:35:6c:7d:f1:c0:
e1:a7:d7:70:b4:4c:7f:f9:33:28:be:39:cc:26:c6:
e7:6b:ec:ca:5d:4e:67:7a:97:f8:14:08:37:d3:de:
6f:54:9e:f9:24:ac:e2:db:d7:81:8b:1e:6d:9c:7c:
7e:06:69:1b:d7:a4:a3:df:ab:95:0d:b5:0b:14:d3:
d9:52:e7:37:f2:3c:7f:37:fc:8e:4b:d2:40:a0:0d:
21:20:e0:70:6f:eb:53:d4:7a:62:77:3e:74:99:6a:
a1:b7:0f:94:b8:11:b9:bc:05:fc:e8:db:78:37:53:
b8:89:32:f6:f2:1f:d6:d9:6c:f1:e4:44:81:31:e6:
53:c3:c5:60:a7:0e:ed:8c:d8:7a:79:63:3b:b1:09:
4a:64:b6:69:92:bb:7e:65:02:98:93:d9:d6:a5:1a:
7b:7e:ee:64:b6:bb:90:6b:be:0c:fb:95:6a:81:07:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:5C:5F:4A:4C:FB:2F:47:C9:A7:25:88:1F:49:0D:A5:28:84:15
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/41ZcX0pM-y9HyacliB9JDaUohBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.8.0/22
Signature Algorithm: sha256WithRSAEncryption
25:87:dc:79:a6:51:2e:cd:35:3c:05:1a:ed:d8:25:a4:fd:4e:
38:8a:b5:9a:05:ff:26:33:ec:92:6d:15:f5:62:c4:96:f1:de:
25:7f:93:0c:7d:d2:1f:2d:e5:3d:29:25:55:ca:f8:d5:fb:d1:
3d:a2:ce:c8:96:aa:26:73:d4:56:f1:9d:cc:e2:a1:d6:c8:a0:
a6:82:d3:8d:f3:2e:80:b6:10:b1:da:55:8e:5e:13:78:04:e9:
0b:4c:0b:c3:37:36:9e:48:0f:33:79:2f:e2:ec:bc:5a:b2:64:
63:7b:05:98:09:af:71:7a:d2:f8:72:39:02:c7:68:e1:2e:11:
18:91:cb:68:96:e1:23:74:c2:6b:5d:04:ab:28:fe:02:d6:29:
61:ab:00:b8:4b:6a:67:46:37:82:9d:fb:2b:a1:45:70:66:4a:
bf:f8:12:d2:19:df:ff:f9:88:55:75:ee:99:46:88:f8:9c:85:
c7:1e:39:a9:18:83:56:d7:8d:a5:72:72:b7:d6:a7:8a:a1:f5:
ae:d7:99:11:62:a6:e1:05:4d:fa:dd:09:69:db:80:85:71:40:
44:89:e2:20:53:e4:a4:95:7d:5e:ee:8b:8e:40:22:1d:db:64:
82:b3:96:af:55:cb:e7:bd:99:6b:fd:06:01:93:a6:24:11:49:
3e:ce:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-ams.rpki-client.org