Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/MJFMHRpJDDVZJs3bYlmc01mYkdo.roa
File: MJFMHRpJDDVZJs3bYlmc01mYkdo.roa (raw, json)
Hash identifier: Fz8JOPECkcWqRuiHY8Gi0q5YpA/xuegKHEr9D1R0PZs=
Subject key identifier: 30:91:4C:1D:1A:49:0C:35:59:26:CD:DB:62:59:9C:D3:59:98:91:DA
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 0B5EB8D6
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/MJFMHRpJDDVZJs3bYlmc01mYkdo.roa
Signing time: Sat 01 Jan 2022 13:59:42 +0000
ROA not before: Sat 01 Jan 2022 13:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57915
IP address blocks: 194.1.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190757078 (0xb5eb8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Jan 1 13:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30914c1d1a490c355926cddb62599cd3599891da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:80:67:3f:d0:f3:18:8c:74:08:c7:d3:bb:
dd:e8:d8:07:ff:7b:ff:a8:7d:59:41:77:79:03:11:
7c:1c:9b:9c:72:4a:9b:f1:3b:d1:62:3e:8d:e9:eb:
6f:28:d4:dc:23:ee:cd:64:0f:1f:60:12:1a:7f:ce:
c0:f5:83:bb:d3:a1:8d:d6:d9:df:65:3f:20:76:da:
1b:77:f5:bf:2c:1f:92:1f:82:33:35:52:9e:97:a1:
ee:20:63:a2:0e:49:c9:5c:53:59:8f:54:ce:b3:46:
5a:7a:ba:31:5c:77:78:03:60:15:88:63:02:ae:38:
e8:be:71:0d:c2:8a:75:b4:6e:22:63:73:8f:d4:a9:
e7:aa:ad:02:55:db:fd:a7:37:e8:72:42:d7:f5:3b:
f0:60:32:20:6f:0f:5b:8b:8c:5c:de:81:3b:db:ee:
d8:a5:21:bf:c5:a7:c7:b3:ca:76:90:14:4c:04:8e:
49:03:fd:4f:88:77:92:95:3f:1b:69:e7:2f:7b:67:
82:01:cf:ec:5a:21:87:03:72:27:e7:3f:ab:6a:2e:
72:5e:84:c4:fc:96:dc:bb:b2:1b:bd:4b:7e:16:c2:
08:9a:59:35:96:d2:a6:c9:7a:2b:db:20:b9:de:c9:
bb:34:a1:a8:4d:c8:88:75:c2:d7:0d:c5:0c:3a:13:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:4C:1D:1A:49:0C:35:59:26:CD:DB:62:59:9C:D3:59:98:91:DA
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/MJFMHRpJDDVZJs3bYlmc01mYkdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:84:a1:13:01:4c:6c:b8:4f:bd:29:7d:2d:5b:c0:43:5a:73:
93:09:cd:aa:0c:37:4f:93:36:1f:da:fa:76:1a:4d:25:e9:9d:
d0:fb:bd:27:83:b7:a5:77:88:7a:61:9e:1a:aa:10:08:cb:5d:
5d:96:09:87:58:01:c0:1c:78:b0:2c:a4:e8:e9:ea:43:c3:5b:
8f:cf:a3:1e:d9:4e:6d:c4:03:2e:30:c2:ab:af:17:e6:13:20:
26:55:8e:71:92:7e:2c:5f:4a:5b:6a:96:f9:76:c5:17:08:32:
42:f6:0d:1d:78:29:48:83:cf:a6:30:18:15:32:24:a4:87:6d:
28:e8:86:ca:db:d8:1f:fb:4e:3f:67:57:90:e6:61:d6:b8:eb:
91:d6:37:c0:1e:e0:b3:05:e4:33:cc:84:a0:ac:c2:18:a9:47:
1d:3f:4d:9a:35:03:74:13:53:34:e2:be:8b:d5:47:d1:96:50:
b1:a3:fc:bf:25:4c:ae:db:a2:d8:56:be:69:c1:78:0b:2d:c6:
33:16:1c:7f:2f:e1:6a:a1:80:59:70:50:2c:fd:00:7c:9e:29:
28:b6:4c:59:1f:95:5a:5f:4a:d8:b3:99:c4:41:a9:12:f1:2d:
da:32:e0:14:b5:f6:aa:55:34:92:36:4f:c1:75:2b:aa:fe:c3:
64:58:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net