Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mcMjT2hOrkVuV5TM8oumqvjKFXA.roa
File: mcMjT2hOrkVuV5TM8oumqvjKFXA.roa (raw, json)
Hash identifier: azCb354o7GvmFF5M6KBYvR9pCFMeXYo1xcc86kmVLDI=
Subject key identifier: 99:C3:23:4F:68:4E:AE:45:6E:57:94:CC:F2:8B:A6:AA:F8:CA:15:70
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD00F385BA1D00EBC4472B6DD4EAF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mcMjT2hOrkVuV5TM8oumqvjKFXA.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 194.71.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d0:0f:38:5b:a1:d0:0e:bc:44:72:b6:dd:4e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99c3234f684eae456e5794ccf28ba6aaf8ca1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:2f:0b:c7:9d:5c:fb:82:b7:20:19:35:cf:
1f:41:a6:4d:9d:1f:1d:bd:0e:3d:7c:61:d3:a7:c4:
3c:f1:ac:9f:40:1a:44:87:45:f9:06:6c:49:51:0a:
bd:8c:ec:2c:37:cd:a1:64:7f:cb:38:7c:9e:5e:23:
4b:77:31:d8:e1:d0:db:78:9d:81:14:6d:a1:cf:57:
51:d8:63:8d:af:49:77:01:7d:14:b4:3b:2d:67:3d:
5c:1a:bd:59:07:57:38:a4:54:31:e7:b8:be:4d:96:
19:35:a1:53:c9:2d:3a:f7:a8:5d:a3:8e:28:c9:1d:
15:54:ef:df:32:5e:ab:01:65:bd:58:da:85:87:e9:
02:2e:05:5d:b0:a3:84:62:9b:a3:17:de:24:10:f8:
cd:69:64:24:fe:63:07:dd:05:c0:79:19:a6:ee:f5:
bd:ec:1e:f3:ac:b8:5b:fe:dd:1a:63:c9:7e:87:eb:
f5:c7:c9:cf:6b:a5:f1:f8:a5:4b:80:8b:e9:10:4c:
70:7e:8c:c6:b5:3d:e6:fd:a0:07:48:1a:c0:8f:ff:
ca:1b:d3:89:ab:07:35:ad:1a:10:9f:84:12:88:f5:
06:7f:9f:9c:b5:2c:e3:60:22:4e:3b:35:d8:9c:a2:
f3:23:62:0f:0a:96:9d:cb:bf:45:57:70:d0:43:08:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C3:23:4F:68:4E:AE:45:6E:57:94:CC:F2:8B:A6:AA:F8:CA:15:70
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mcMjT2hOrkVuV5TM8oumqvjKFXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.130.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e0:61:58:b7:0e:2d:73:d2:2f:1a:86:87:81:f4:69:72:32:
67:ba:35:21:58:d7:b6:13:c1:96:88:5b:23:06:f5:a9:ab:87:
17:90:ba:28:b0:6d:8a:88:1a:f7:a5:eb:40:02:5b:1e:cd:b3:
ee:34:22:60:a8:14:f3:f4:c3:9b:44:8f:bf:e9:14:cf:20:57:
24:94:84:7d:50:2b:7b:f8:86:d4:a8:5c:1a:9e:3d:68:50:c3:
45:37:be:a6:3a:1c:78:cb:25:64:67:00:13:e6:47:78:c6:00:
52:2f:e6:33:79:9b:0d:b4:45:3c:93:a2:af:68:13:46:48:34:
78:af:bd:c3:41:48:20:58:91:6e:c1:27:b8:8d:85:69:5c:10:
6c:f6:6f:01:a7:de:d3:e5:ef:b6:b4:88:71:75:87:8f:8e:22:
f5:a6:72:bf:69:7c:1f:65:78:a2:9e:46:f9:09:41:36:e6:ee:
1a:5e:0c:19:49:d7:df:11:4c:11:81:48:1f:b1:66:99:80:0c:
2b:41:f2:34:f6:b4:3f:af:cd:66:9d:35:39:70:66:ea:0b:41:
20:b5:95:0b:b8:b4:b4:53:90:b5:af:ce:36:85:33:47:3d:9b:
de:d4:91:fa:c0:b9:7e:78:d3:04:59:6b:8b:e0:e8:f4:69:83:
4f:46:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:44 2025 by rpki-client