Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/MNijdx0iLvoYazKvrTmYGrEaSAw.roa
File: MNijdx0iLvoYazKvrTmYGrEaSAw.roa (raw, json)
Hash identifier: aAeEdqNnoeCkniS2M46vqt7q7wVGzzFnCChVHQun6DI=
Subject key identifier: 30:D8:A3:77:1D:22:2E:FA:18:6B:32:AF:AD:39:98:1A:B1:1A:48:0C
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17E42703
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/MNijdx0iLvoYazKvrTmYGrEaSAw.roa
Signing time: Sat 01 Jan 2022 00:54:41 +0000
ROA not before: Sat 01 Jan 2022 00:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202428
IP address blocks: 94.100.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400828163 (0x17e42703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30d8a3771d222efa186b32afad39981ab11a480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:95:d6:c1:87:dd:cb:95:f3:a3:e0:a6:bc:
d5:df:10:1e:4c:6e:14:cd:8c:de:b2:9c:de:8d:7c:
48:9c:ae:87:c1:a7:b2:ee:35:f6:27:1b:b8:21:20:
4a:e5:94:85:e3:f1:01:c9:e7:2e:f7:ef:d2:a1:28:
62:44:56:a4:17:46:28:9e:43:38:6e:be:d4:fb:f0:
a1:2e:9d:d7:be:a2:8f:7e:0c:14:93:21:e8:cc:92:
91:c0:04:f8:ff:17:40:00:34:64:9e:b7:53:89:90:
1f:c4:d1:17:9b:8d:24:ed:74:35:e9:d4:e1:58:0f:
fa:5c:7f:d4:e9:cb:d0:dc:ab:3e:f7:ab:f6:6c:a8:
cc:96:13:9e:b7:33:11:e8:a3:0b:99:22:15:30:ef:
5e:4d:99:38:8f:f2:99:8e:fb:a7:b0:fe:73:46:cf:
0b:26:4b:57:97:1f:51:cc:c7:e4:b9:71:bb:00:62:
cc:0a:4a:dd:f3:0e:c2:ae:ba:9c:c8:99:39:e6:cb:
4e:d0:18:58:a4:c6:e2:1e:10:37:7e:63:26:43:f1:
09:ef:0f:5a:e1:d6:f4:6d:19:6a:43:47:35:7d:cd:
8f:81:02:1c:8d:56:f9:30:bd:65:9f:5c:47:eb:68:
01:96:16:d5:5a:be:9a:8e:81:7c:22:35:e1:bf:a5:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:A3:77:1D:22:2E:FA:18:6B:32:AF:AD:39:98:1A:B1:1A:48:0C
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/MNijdx0iLvoYazKvrTmYGrEaSAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e8:4c:57:a8:cc:de:49:95:30:fc:63:6b:85:ec:7c:5c:62:
f6:1d:32:78:c0:77:eb:e3:ed:ac:dd:fc:6c:60:a8:6a:aa:70:
d4:ea:f1:76:b6:5f:39:87:72:be:ad:9b:16:36:98:a6:5a:3b:
11:c2:00:90:2c:83:4f:2c:bb:0a:fc:12:a0:f4:2b:a9:bc:d6:
7c:25:dc:0e:1d:df:58:45:94:3d:15:c6:e2:b7:a1:54:1e:20:
ba:cc:d2:23:f2:24:c1:87:bc:a9:a1:3f:d8:68:6f:c1:58:d1:
04:16:15:4e:01:71:f0:66:a8:7b:0f:f9:d1:af:a8:78:5d:03:
61:80:91:a0:6c:5d:b5:c2:49:ca:0d:0e:28:6f:33:bd:bf:11:
c2:51:bd:29:40:09:19:6e:d4:48:a0:f4:e4:d2:e6:5e:8b:59:
c4:bb:48:99:df:79:12:e1:2d:85:ce:81:0e:7b:31:2d:eb:63:
42:ea:49:50:4d:a0:41:75:e2:92:bc:b4:b6:e5:76:46:aa:d6:
0a:2a:92:59:78:b7:eb:d5:d6:82:b2:7a:be:91:e7:e5:e4:62:
11:34:51:4d:0a:76:1d:c6:f8:2d:67:f8:ed:64:a5:1a:5b:e8:
73:47:7f:6a:ca:00:37:d7:4e:2c:3b:45:44:61:1c:e9:09:48:
43:97:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org