Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/MJu7PR3_EWnf4EEBE0FTY9vcQvw.roa
File: MJu7PR3_EWnf4EEBE0FTY9vcQvw.roa (raw, json)
Hash identifier: V/D4Zd1ZlhNhuTXPMuwzAeyu/tKHYFq/TkaMf9QQ+nI=
Subject key identifier: 30:9B:BB:3D:1D:FF:11:69:DF:E0:41:01:13:41:53:63:DB:DC:42:FC
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 3D337A9F
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/MJu7PR3_EWnf4EEBE0FTY9vcQvw.roa
Signing time: Sat 01 Jan 2022 14:56:08 +0000
ROA not before: Sat 01 Jan 2022 14:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42
IP address blocks: 194.0.42.0/24 maxlen: 24
2001:678:60::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026783903 (0x3d337a9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Jan 1 14:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=309bbb3d1dff1169dfe0410113415363dbdc42fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:17:eb:1d:c7:63:fd:a4:0c:65:6c:3b:9c:
db:7e:1a:ec:22:49:b3:99:d5:2b:a2:a6:09:94:f6:
14:0b:61:08:dd:bf:ef:5c:05:22:b8:52:ab:87:36:
af:cc:60:e6:0f:c5:1a:ff:63:fb:1d:0d:da:4c:06:
0b:2f:0a:84:4a:60:cf:10:dd:a5:10:8a:1f:f8:68:
a1:f5:24:45:15:51:da:7b:8c:b4:0d:61:5b:aa:62:
0a:f4:7c:d9:73:ac:34:63:5a:4c:8c:c5:8a:c3:d0:
2c:65:01:a6:66:29:df:4c:4e:37:36:ee:41:64:5c:
9c:57:1b:8c:c0:aa:07:b1:a3:e2:d1:ab:73:29:d5:
e4:b1:19:c2:99:e1:45:47:4e:ca:d2:8d:87:a9:3d:
1b:98:e0:d1:77:93:65:5d:22:ad:a2:fb:0e:21:d5:
a1:67:61:94:c4:ba:6e:19:33:d1:30:64:45:72:7e:
7b:13:8d:88:49:f5:b8:b7:50:bc:f6:17:c7:44:d4:
d7:e6:3e:3f:7f:16:c9:f1:47:bd:3f:8d:4c:98:dd:
85:9d:dc:04:3b:2d:73:d4:4d:26:ce:bb:eb:22:90:
d0:cc:e9:c0:bd:be:75:df:fb:09:88:3c:da:95:18:
7f:ff:c5:0d:a5:86:a1:63:e1:59:b5:be:18:99:24:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:BB:3D:1D:FF:11:69:DF:E0:41:01:13:41:53:63:DB:DC:42:FC
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/MJu7PR3_EWnf4EEBE0FTY9vcQvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.42.0/24
IPv6:
2001:678:60::/48
Signature Algorithm: sha256WithRSAEncryption
97:9e:6f:50:ba:e6:bf:85:fb:35:67:a6:88:c1:8e:f8:d2:97:
7a:bf:8e:19:94:b4:c3:ae:12:56:73:4e:e5:9c:23:16:97:dd:
1c:f9:e5:0f:40:03:8c:36:b0:95:35:5f:67:f1:34:32:a6:fe:
52:16:a8:47:dd:56:c6:86:f4:15:c6:5a:c6:d2:00:bf:e4:9f:
95:4c:ff:21:16:63:98:66:6b:e1:4d:e8:c5:f8:73:58:06:5e:
c3:b0:ea:40:cb:fc:91:87:73:e3:af:39:a6:cd:6e:6e:f3:ca:
72:d8:49:4d:25:46:cc:17:ce:4a:7d:57:0d:f7:ec:74:61:ac:
21:69:b3:b4:69:79:e8:4e:2f:4d:e7:6d:29:af:ca:62:e0:96:
e3:a7:26:48:1a:5b:9e:71:37:25:ff:b8:0f:83:f0:97:4e:07:
bc:f6:49:fb:63:ad:72:f2:5e:51:7a:3d:ee:7b:9b:51:70:31:
56:4c:61:81:e5:03:f9:78:e5:f4:a6:34:ef:40:ab:d4:d0:3f:
c6:9f:a4:2d:4b:ef:c8:55:1c:d7:aa:d0:7d:38:e9:8f:81:98:
02:73:77:bb:dd:90:80:0b:da:2a:be:05:be:f8:3a:fc:45:1d:
87:97:c1:05:1e:56:84:4c:be:f0:f7:07:a7:fb:01:9f:e2:b2:
ba:c0:65:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEPTN6nzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NTM0ODM4YmIzMTdiODE4NjY5OWYwYTQ0ODVkYjZkOWRhMTkwOGQyMB4XDTIyMDEw
MTE0NTYwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzA5YmJiM2QxZGZm
MTE2OWRmZTA0MTAxMTM0MTUzNjNkYmRjNDJmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIRF+sdx2P9pAxlbDuc234a7CJJs5nVK6KmCZT2FAthCN2/
71wFIrhSq4c2r8xg5g/FGv9j+x0N2kwGCy8KhEpgzxDdpRCKH/hoofUkRRVR2nuM
tA1hW6piCvR82XOsNGNaTIzFisPQLGUBpmYp30xONzbuQWRcnFcbjMCqB7Gj4tGr
cynV5LEZwpnhRUdOytKNh6k9G5jg0XeTZV0iraL7DiHVoWdhlMS6bhkz0TBkRXJ+
exONiEn1uLdQvPYXx0TU1+Y+P38WyfFHvT+NTJjdhZ3cBDstc9RNJs676yKQ0Mzp
wL2+dd/7CYg82pUYf//FDaWGoWPhWbW+GJkkoV0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQwm7s9Hf8Rad/gQQETQVNj29xC/DAfBgNVHSMEGDAWgBQVNIOLsxe4GGaZ
8KRIXbbZ2hkI0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZUU0RpN01YdUJobW1mQ2tTRjIyMmRvWkNOSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvMTRjMWNhLTE4NzQtNDdhYy1hMThlLTNhMTQ0YzcwZTBiMC8x
L01KdTdQUjNfRVduZjRFRUJFMEZUWTl2Y1F2dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
MTRjMWNhLTE4NzQtNDdhYy1hMThlLTNhMTQ0YzcwZTBiMC8xL0ZUU0RpN01YdUJo
bW1mQ2tTRjIyMmRvWkNOSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMIAKjAPBAIAAjAJAwcAIAEGeABg
MA0GCSqGSIb3DQEBCwUAA4IBAQCXnm9Quua/hfs1Z6aIwY740pd6v44ZlLTDrhJW
c07lnCMWl90c+eUPQAOMNrCVNV9n8TQypv5SFqhH3VbGhvQVxlrG0gC/5J+VTP8h
FmOYZmvhTejF+HNYBl7DsOpAy/yRh3PjrzmmzW5u88py2ElNJUbMF85KfVcN9+x0
YawhabO0aXnoTi9N520pr8pi4JbjpyZIGluecTcl/7gPg/CXTge89kn7Y61y8l5R
ej3ue5tRcDFWTGGB5QP5eOX0pjTvQKvU0D/Gn6QtS+/IVRzXqtB9OOmPgZgCc3e7
3ZCAC9oqvgW++Dr8RR2Hl8EFHlaETL7w9wen+wGf4rK6wGWn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:06 2023 by rpki-client on console-fra.rpki-client.org