Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/mGNlWwCmlBXPJU5qqOeoG6jn2ic.roa
File: mGNlWwCmlBXPJU5qqOeoG6jn2ic.roa (raw, json)
Hash identifier: m2S3nuLmkwnd+3NRgFskbzyG1JduTzOpVuGf7S2UK94=
Subject key identifier: 98:63:65:5B:00:A6:94:15:CF:25:4E:6A:A8:E7:A8:1B:A8:E7:DA:27
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 2FBC305F
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/mGNlWwCmlBXPJU5qqOeoG6jn2ic.roa
Signing time: Sat 01 Jan 2022 10:04:51 +0000
ROA not before: Sat 01 Jan 2022 10:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31537
IP address blocks: 194.151.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800862303 (0x2fbc305f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 1 10:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9863655b00a69415cf254e6aa8e7a81ba8e7da27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:54:8e:ae:99:3f:fb:11:07:a2:2d:ad:10:
d4:90:c9:66:28:7b:d3:6c:1d:e6:09:fe:7b:b9:2c:
e4:3f:01:ee:b3:12:83:44:8c:aa:df:65:76:b9:07:
c8:74:0b:a7:dd:45:87:e2:04:0c:26:84:2f:56:c5:
6c:4e:1e:78:9c:87:5f:11:4e:ee:60:be:40:cb:31:
d2:c4:67:0f:3b:60:6d:f9:1b:95:f5:94:e3:b8:fc:
ae:3d:f5:73:f4:e3:8c:16:eb:81:0f:7b:53:41:3c:
95:d8:c2:e5:c1:7e:1d:a5:60:ae:a2:32:bb:b0:88:
66:1f:40:4d:97:6f:a5:25:6d:bb:61:67:6d:8d:3e:
77:fd:db:5d:e0:6e:d9:1f:70:cd:93:6a:dc:09:48:
91:07:89:b4:22:8b:a3:41:ee:94:12:20:12:ee:cf:
ea:98:08:1f:93:b4:3d:65:7d:e8:54:5e:6a:6a:74:
ef:87:00:6f:48:f0:02:c4:0c:3a:31:89:bc:ae:62:
b8:8d:ca:c5:57:fd:ba:2e:16:69:d6:c2:b5:89:c1:
f1:97:64:1c:d6:e7:97:c3:e5:56:2f:1f:40:2b:c1:
fc:d0:dd:3e:c9:84:bb:37:f4:7e:4d:0d:7a:7a:0b:
8e:e9:b3:af:c5:ce:f4:65:49:ab:20:1e:60:4e:36:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:65:5B:00:A6:94:15:CF:25:4E:6A:A8:E7:A8:1B:A8:E7:DA:27
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/mGNlWwCmlBXPJU5qqOeoG6jn2ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.151.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:b6:d3:60:89:3c:f0:d4:ec:46:29:7c:c0:93:77:28:64:
21:a2:cd:2b:d7:38:9d:cd:3d:d7:10:23:e6:91:72:dc:d1:2c:
21:db:cf:0c:e8:37:47:d7:34:7f:df:cd:24:7c:04:77:31:71:
df:a3:fe:bd:ad:e9:c4:13:34:23:25:00:39:01:86:df:ff:cc:
13:73:93:17:8c:1a:00:0e:d6:6f:1b:fa:73:75:53:e2:d0:a3:
ea:a2:d4:a5:92:0a:fe:aa:fc:6e:89:c7:fc:cb:83:88:7b:93:
c3:43:32:12:05:d8:e5:c8:ec:2d:e1:78:dc:26:f3:9f:3d:8a:
31:3f:8c:1a:20:9e:53:ff:83:0b:10:06:d8:b5:cf:87:42:fd:
45:c5:3d:8f:59:2f:77:bd:4b:c6:b3:64:98:60:18:82:b7:80:
b6:fa:64:28:11:ea:c8:ae:64:76:3c:bd:3d:2d:49:a2:be:f5:
52:42:f5:8a:ff:6a:4c:0f:57:33:5b:ca:e8:36:25:5c:be:19:
9a:79:4a:2b:58:68:c2:2b:dc:8c:15:1b:65:ed:a0:97:1c:ba:
e0:84:cd:b1:30:3d:7f:13:39:ef:59:82:e3:c2:cb:5c:61:70:
ed:3f:37:8e:33:90:0c:c4:28:a5:2e:cc:cf:50:21:82:fa:31:
06:23:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org