Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/mZJdTDwr4bTZ53K06YynaaSUK3I.roa
File: mZJdTDwr4bTZ53K06YynaaSUK3I.roa (raw, json)
Hash identifier: C64yhP97Rm9+Xx3ONtfwPlrXfyCUZXk3hQoBqT8iMwc=
Subject key identifier: 99:92:5D:4C:3C:2B:E1:B4:D9:E7:72:B4:E9:8C:A7:69:A4:94:2B:72
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3DC91C08
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/mZJdTDwr4bTZ53K06YynaaSUK3I.roa
Signing time: Sat 01 Jan 2022 08:56:55 +0000
ROA not before: Sat 01 Jan 2022 08:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30880
IP address blocks: 194.236.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036590088 (0x3dc91c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 08:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99925d4c3c2be1b4d9e772b4e98ca769a4942b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:e6:93:c2:55:c4:8b:c2:cd:e0:15:e4:a6:
44:c4:9b:32:dd:6c:e3:c5:e7:8f:e4:c5:cf:3f:59:
1f:7c:de:fe:0f:a8:63:82:45:34:b9:45:87:a6:4a:
a1:90:61:6f:2a:92:51:8a:6c:cf:26:42:68:74:b9:
14:69:51:d8:cb:32:61:09:3c:46:c4:59:59:17:76:
d4:8c:ce:07:f4:c6:6f:1e:eb:a2:46:35:6e:bf:66:
1f:18:12:7b:df:66:f5:e2:19:13:d6:48:d9:bb:7c:
12:32:32:1d:7f:a9:a5:1b:65:34:3a:ca:3c:56:fd:
3f:0a:10:6c:84:90:e8:62:24:de:56:74:a4:ef:0f:
c1:a8:da:08:42:79:2e:7b:a5:55:11:96:4b:98:7b:
35:59:67:a9:cd:35:3f:6b:bc:94:ad:42:7f:ce:c8:
c1:d3:a8:97:13:4d:d2:ed:cb:3d:bc:6c:aa:26:0c:
71:17:10:d0:93:3b:ca:c6:f6:34:0b:62:29:9b:25:
62:d0:15:ac:16:d5:a2:cd:df:91:fd:88:7b:e9:51:
a3:d7:97:f3:76:82:0f:58:02:b2:56:db:aa:22:9d:
df:2c:43:f5:56:34:83:59:d3:e3:32:84:d1:d3:23:
dc:32:2b:fc:17:da:f1:f2:f7:fd:10:81:28:47:1c:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:5D:4C:3C:2B:E1:B4:D9:E7:72:B4:E9:8C:A7:69:A4:94:2B:72
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/mZJdTDwr4bTZ53K06YynaaSUK3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.236.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:da:94:a0:0a:a8:38:b1:9e:db:73:97:29:f4:55:9d:a3:79:
3c:51:ce:d5:3f:8b:cd:69:85:ac:f7:cb:24:45:f1:16:c9:5c:
2b:78:c7:05:bb:c6:a7:a7:40:7e:be:9e:51:87:b1:81:5d:37:
03:88:50:3b:80:8a:58:04:12:49:d6:d8:b0:92:40:f2:29:c0:
7f:fa:47:b2:8f:09:0d:a1:1f:b4:ed:ca:2b:96:89:99:45:53:
93:cf:93:59:32:d4:de:d8:fa:93:d3:a8:be:27:69:2a:f2:9b:
21:f3:57:13:9d:ff:dd:b0:e5:ca:0b:b5:1f:96:14:f4:1e:90:
a9:1f:f2:d0:70:04:db:0a:d0:c3:2c:10:cc:55:03:d8:0e:6d:
70:f9:91:8e:04:04:81:95:36:ee:16:eb:bf:7f:42:7c:7b:49:
fb:52:6e:ae:61:d2:31:5a:5a:c0:20:5d:64:50:0e:e4:a7:f4:
37:26:9f:6f:7a:04:04:d8:e8:ea:2d:b5:e3:e6:3c:87:43:44:
93:10:13:0d:20:1d:3b:ac:b9:53:c2:80:8d:0a:e9:d1:4c:94:
e8:f2:15:78:bf:2f:c7:19:6a:6d:0f:b8:32:20:39:a3:f1:d6:
73:85:e6:a7:39:ae:69:c3:89:bb:0f:15:c2:ac:38:fd:07:b6:
26:85:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:50 2025 by rpki-client