Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/1MKMwd2jxwYpoaU2qDY8WqWVQWQ.roa
File: 1MKMwd2jxwYpoaU2qDY8WqWVQWQ.roa (raw, json)
Hash identifier: US/HZ/VZzqmr6q9ZMA5ORcQlO3+gg50WRndBVYvzFGA=
Subject key identifier: D4:C2:8C:C1:DD:A3:C7:06:29:A1:A5:36:A8:36:3C:5A:A5:95:41:64
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01836B0B55322D15EB510F9D1DD123C9E3AD
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/1MKMwd2jxwYpoaU2qDY8WqWVQWQ.roa
Signing time: Fri 23 Sep 2022 15:50:48 +0000
ROA not before: Fri 23 Sep 2022 15:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.50.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6b:0b:55:32:2d:15:eb:51:0f:9d:1d:d1:23:c9:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Sep 23 15:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4c28cc1dda3c70629a1a536a8363c5aa5954164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:44:15:2e:4b:49:7c:dc:87:3c:48:b2:fd:
4e:72:1f:38:5b:46:2e:bc:19:4c:0f:fb:9e:5d:0a:
23:fb:2e:7f:2f:91:63:26:c4:9f:4b:cb:33:4f:d7:
30:80:39:b1:af:0d:63:9e:f5:6a:91:59:d6:70:9f:
a4:d1:61:8f:8c:76:70:8e:e1:50:60:6f:c3:54:19:
a1:0d:34:52:4f:e4:73:6c:3a:76:d3:8b:e9:ba:34:
a2:85:84:b9:b1:83:d8:28:96:54:79:6e:05:24:cd:
28:aa:25:05:d7:a3:e0:d6:a7:e2:30:ad:53:8b:7a:
11:f3:8c:30:e3:57:da:3c:d8:c1:f6:a8:79:e0:cc:
aa:80:e7:37:eb:b6:1c:04:8b:c3:ff:d6:f8:75:a9:
11:f3:ed:90:59:f7:93:4b:0c:35:f6:5c:8d:b5:82:
8d:43:8a:57:25:16:da:07:4f:62:88:e5:5c:43:a2:
9e:49:98:a8:61:3e:78:8a:f7:68:03:b8:c6:55:87:
32:09:fd:52:e7:ec:43:0c:fc:60:67:e5:f2:27:de:
7a:13:81:a5:a0:e1:c6:ee:91:17:55:7d:a5:6d:43:
1b:76:54:7d:a5:57:f8:9f:24:15:7a:36:7f:4c:04:
0e:9b:71:51:5e:78:72:04:ce:d2:24:9a:83:c0:fa:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:8C:C1:DD:A3:C7:06:29:A1:A5:36:A8:36:3C:5A:A5:95:41:64
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/1MKMwd2jxwYpoaU2qDY8WqWVQWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6a:9f:40:41:c7:5f:42:6d:6b:02:a8:a4:30:8b:e9:b2:41:
ab:e6:d0:5d:19:53:e9:21:61:e0:9a:ab:f0:1b:bd:d4:a5:ef:
31:84:c0:56:64:df:46:af:93:3e:0e:78:c2:32:62:67:48:4e:
9b:e0:61:35:40:98:78:f1:aa:32:14:23:f7:f3:c6:65:2d:04:
90:b5:d3:ee:4b:5c:ce:b2:47:1b:b4:fd:8a:c4:a4:4b:67:29:
e8:94:fa:40:27:b1:a1:71:bc:fb:b4:96:59:45:b4:aa:9b:dc:
a2:90:01:3f:c3:69:34:d0:d0:81:93:b2:82:93:fb:d1:08:47:
19:6d:8f:15:98:0a:23:e6:ba:a1:f9:63:d1:e5:70:95:c9:ac:
ff:76:a9:56:22:05:74:44:db:74:69:af:cd:0a:39:cb:73:60:
eb:de:78:69:df:8e:f8:db:cf:ca:37:53:28:b4:00:fb:ef:24:
6b:11:53:cb:1c:ea:21:fd:a6:be:89:a3:2e:7e:4a:c4:0b:00:
1e:72:14:6c:2a:0f:6b:45:c3:3a:4d:17:ff:0a:8c:22:20:8a:
b3:88:3c:e0:11:59:8c:d2:84:89:b0:1d:59:f4:f3:c0:17:fa:
64:ef:d6:b6:4b:e6:84:71:b1:63:8b:a6:a6:dc:94:5c:f4:d1:
2c:f9:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:03 2024 by rpki-client on console-ams.rpki-client.org