Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/m6uKqo8XyJelm4EPP4nShe6tuqo.roa
File: m6uKqo8XyJelm4EPP4nShe6tuqo.roa (raw, json)
Hash identifier: 8xleL9IpRqAOFbZwspskl8xriKP3izFypWAR3t0o1m8=
Subject key identifier: 9B:AB:8A:AA:8F:17:C8:97:A5:9B:81:0F:3F:89:D2:85:EE:AD:BA:AA
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 1783D83F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/m6uKqo8XyJelm4EPP4nShe6tuqo.roa
Signing time: Sat 05 Mar 2022 21:55:20 +0000
ROA not before: Sat 05 Mar 2022 21:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39131
IP address blocks: 194.190.253.0/24 maxlen: 24
194.190.251.0/24 maxlen: 24
194.190.252.0/24 maxlen: 24
194.190.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394516543 (0x1783d83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Mar 5 21:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bab8aaa8f17c897a59b810f3f89d285eeadbaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:02:86:03:c0:c9:ea:2d:e0:8d:2d:c3:b2:
ee:ce:e4:3c:45:a5:82:c5:33:a9:0d:6e:ea:02:25:
f1:10:cc:1c:82:ab:5e:52:b0:5f:61:71:73:74:32:
4e:d7:d5:8d:fe:7b:5d:bb:4c:e6:ad:3a:ae:0d:7d:
22:ab:f7:8b:18:94:f9:96:a5:4f:ed:2c:da:d7:fa:
db:55:35:86:11:f9:e0:70:83:45:05:b8:4a:95:d6:
40:a8:aa:84:00:2a:64:ca:e9:c8:e8:02:9a:37:b7:
db:c1:bf:eb:b4:61:c1:41:33:5f:80:78:1d:bc:db:
51:3a:f6:71:15:71:80:ad:ae:10:3c:6e:6a:e9:62:
a6:9d:95:c9:55:43:42:eb:7a:e1:5f:17:5d:19:a4:
3a:73:0f:71:f0:e7:2b:f6:93:ca:9c:24:d5:a9:3c:
7a:ee:92:46:06:ed:56:a5:3b:65:5d:e7:1f:3c:93:
e7:10:be:a8:a4:87:a2:7a:a9:6d:a5:17:0c:cd:ab:
14:3f:be:7e:3c:b2:6e:73:92:7e:a3:75:2f:8a:60:
3a:89:63:e6:9e:03:61:3d:cd:a3:b4:33:c5:c7:2d:
8d:07:19:87:77:44:d6:2c:45:8e:fa:b8:35:f2:07:
30:a6:e8:4d:9b:ae:ee:c1:4e:c7:20:a8:f0:0c:c6:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:8A:AA:8F:17:C8:97:A5:9B:81:0F:3F:89:D2:85:EE:AD:BA:AA
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/m6uKqo8XyJelm4EPP4nShe6tuqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.250.0-194.190.253.255
Signature Algorithm: sha256WithRSAEncryption
20:7d:7c:9d:4e:6a:95:2d:6e:c3:02:cf:0c:13:fc:df:61:30:
9a:76:7c:02:58:bb:a6:64:26:63:3b:6a:00:da:7e:75:db:e7:
de:17:c4:f5:d7:0b:76:bd:5e:d9:51:2b:79:e5:e2:da:00:1d:
a7:74:cc:92:af:fe:2c:71:12:b5:86:f9:ab:52:f1:88:4d:4c:
f0:49:f3:76:cd:28:02:d1:fb:11:86:81:4a:a7:ab:48:90:29:
7a:c8:16:26:25:16:09:5e:13:2b:b8:2a:d7:39:96:83:fc:bf:
65:3c:8e:b9:b0:36:39:a0:d3:ab:dd:ea:ad:3c:36:75:1e:e3:
c2:d5:b3:e4:2e:ba:6f:40:31:05:46:85:e2:58:37:3e:66:38:
07:72:d4:02:e3:50:9f:54:eb:28:47:00:1b:f4:da:de:98:9a:
b3:45:3c:8c:bd:bf:75:2c:97:3a:cf:16:b7:59:63:43:b2:7d:
fe:e0:1f:e4:37:c3:0b:cd:67:d2:ad:2a:23:fa:19:2d:16:a0:
98:ab:57:ec:31:64:5f:fc:50:77:77:ec:b8:8e:4d:04:41:7c:
42:91:54:54:33:be:4f:aa:e2:d1:f3:15:cb:61:89:28:2d:d5:
f8:25:ac:21:33:09:13:9a:32:31:b9:c3:b9:8c:04:38:9f:09:
3e:ec:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org