Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/Mrf0qd7uyNsONcwlPv671VQb7B0.roa
File: Mrf0qd7uyNsONcwlPv671VQb7B0.roa (raw, json)
Hash identifier: GmGmIb21kkz3Dciu1QAknfK8WefB0/71OJj4yERiwD4=
Subject key identifier: 32:B7:F4:A9:DE:EE:C8:DB:0E:35:CC:25:3E:FE:BB:D5:54:1B:EC:1D
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 7275D2
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/Mrf0qd7uyNsONcwlPv671VQb7B0.roa
Signing time: Sat 01 Jan 2022 03:01:16 +0000
ROA not before: Sat 01 Jan 2022 03:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61163
IP address blocks: 94.158.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7501266 (0x7275d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Jan 1 03:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b7f4a9deeec8db0e35cc253efebbd5541bec1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:7a:05:44:bd:a9:33:7b:bc:d4:ca:73:69:
10:39:fd:fd:b4:07:c6:fc:c7:97:24:66:22:fb:b8:
22:32:94:01:f8:34:d2:d9:82:a1:0e:90:4b:20:ea:
2f:4c:5a:8f:17:4e:fb:33:62:3f:37:4f:87:7a:f7:
b0:a2:39:48:d4:00:90:15:09:15:e7:26:50:dc:ff:
1d:d9:a1:e2:26:d1:57:c8:88:31:b2:c7:0f:f7:44:
46:55:c8:4e:48:e7:c3:52:7a:c0:ee:67:73:80:6e:
e5:4b:8d:94:1d:a0:81:03:a7:6d:c1:d2:79:6e:d8:
9d:9a:c5:31:ec:cb:f7:2e:2b:d6:c6:41:c9:7e:0a:
92:25:a6:9a:91:a3:0a:6a:9a:b5:d7:02:47:35:2a:
a8:f6:2e:8e:1e:83:d0:59:12:3e:4d:a0:08:df:d1:
4d:65:da:4d:8a:c7:40:ea:a7:ba:46:c2:23:c5:f4:
b9:ba:49:52:3d:35:71:70:13:b3:e4:46:5d:08:da:
2c:3c:16:49:b6:16:1b:99:05:ba:32:ab:40:31:2e:
73:df:72:24:11:12:48:52:87:cb:1f:34:cf:2b:b5:
47:8e:b9:82:90:8f:ee:cf:08:57:64:03:e2:dd:cc:
86:7c:8d:0d:1e:dd:61:6a:37:ba:d2:d3:45:e9:a0:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:F4:A9:DE:EE:C8:DB:0E:35:CC:25:3E:FE:BB:D5:54:1B:EC:1D
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/Mrf0qd7uyNsONcwlPv671VQb7B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.176.0/22
Signature Algorithm: sha256WithRSAEncryption
58:0c:ab:1e:88:8c:9a:c7:d8:bb:9e:71:ea:e4:a0:af:2a:ae:
62:87:c2:ab:c2:f8:f9:f3:99:c3:4c:64:37:6b:31:69:09:33:
94:66:b1:fc:9d:4c:c1:64:70:43:9f:29:38:c8:00:fd:0b:a4:
e7:89:54:a9:64:98:1d:b1:79:1d:8c:8e:ed:7f:e8:ea:d7:e6:
f9:a9:b3:2a:78:eb:b9:6e:a9:39:61:8e:10:0c:4f:3c:f2:6b:
79:7e:2e:f1:5f:b0:92:17:4c:d2:4b:96:fd:bf:e2:5e:29:aa:
43:e6:4e:25:64:4d:44:b4:5a:26:ce:d8:4b:e0:41:4e:c1:ac:
26:bc:9f:d0:b1:32:33:7d:94:71:d0:61:72:7d:67:2d:c1:94:
ca:44:f2:0b:81:6c:60:ae:10:f1:3d:d9:2f:61:87:84:cc:b5:
ad:de:38:c7:ef:b3:7f:fb:d8:ff:43:54:df:83:a8:14:2d:cd:
46:ea:1f:16:38:85:a3:93:27:79:ea:46:4c:59:9e:a8:f8:53:
8c:51:b8:a1:9c:2d:8d:ec:89:00:c3:41:0e:3c:50:1a:bc:a2:
ca:ca:a1:40:bb:92:37:3d:20:48:cf:ae:1c:ba:5c:d7:e6:d2:
4b:80:cb:75:92:24:0a:d4:1a:de:27:0a:12:f2:c8:86:eb:a8:
aa:b3:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:57 2024 by rpki-client on console-ams.rpki-client.org