Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Mn9cv1WWr1FlKEegL4bUG9rq00g.roa
File: Mn9cv1WWr1FlKEegL4bUG9rq00g.roa (raw, json)
Hash identifier: CeUVH249rpUYXu3YE+Mhq6t6rKofLLkgBne7TBRxZAE=
Subject key identifier: 32:7F:5C:BF:55:96:AF:51:65:28:47:A0:2F:86:D4:1B:DA:EA:D3:48
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 144B7FF2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Mn9cv1WWr1FlKEegL4bUG9rq00g.roa
Signing time: Wed 23 Mar 2022 12:21:17 +0000
ROA not before: Wed 23 Mar 2022 12:21:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212552
IP address blocks: 82.115.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340492274 (0x144b7ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 23 12:21:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=327f5cbf5596af51652847a02f86d41bdaead348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:53:b3:94:30:dd:4b:b7:dd:c6:e0:fd:20:
62:18:1f:b4:a5:61:bd:26:36:87:cf:d6:3e:1b:77:
db:ad:2e:52:61:df:10:90:fd:b0:a3:04:6b:5d:c6:
75:1d:de:49:be:c7:e0:a6:c6:31:f5:02:6b:8a:92:
66:e1:c8:fd:3c:79:c3:3a:c1:2b:22:b4:4a:a1:be:
22:11:ae:62:65:67:18:61:3f:a7:12:84:85:0c:ca:
ff:7b:3d:47:5d:3e:45:c9:0c:6a:7e:b8:61:d9:be:
fa:c4:fb:85:da:c5:75:84:22:15:c0:5e:2c:0c:98:
f3:bf:5b:5b:e1:94:ff:71:67:f8:9d:e8:d1:ed:ac:
2d:c0:8c:ab:f3:c3:e5:58:ec:13:d9:4a:ef:cd:21:
3a:fb:e6:6b:4e:58:9b:1f:2b:82:d6:d8:5a:b0:bc:
30:78:30:42:e5:9e:f1:6a:91:dd:fa:0a:12:ae:b0:
59:ca:53:4c:41:28:32:d9:14:58:72:7d:89:d6:98:
9d:c3:ff:f3:91:7e:b2:39:5d:49:97:65:d2:bb:9f:
f1:8b:b3:bd:20:43:a7:2e:13:35:cb:c9:93:5b:f5:
c5:c5:1b:c5:88:2b:ab:78:65:04:20:d4:88:4d:58:
e8:f8:c4:96:e4:6f:85:f8:fd:b2:a7:74:be:b6:22:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:5C:BF:55:96:AF:51:65:28:47:A0:2F:86:D4:1B:DA:EA:D3:48
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Mn9cv1WWr1FlKEegL4bUG9rq00g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:25:8e:74:f7:31:58:fc:0a:43:9d:25:16:ad:61:ce:32:7f:
6e:be:4b:5d:66:d1:7d:69:bb:5b:ed:2f:27:2d:68:d8:17:f0:
95:20:3b:7d:8c:75:28:f7:86:e2:8c:0d:5d:c2:b6:ff:2a:3c:
1f:e1:d5:eb:18:ae:2f:fc:62:9b:81:28:8a:59:3c:6c:9a:84:
7c:63:5b:da:d5:bf:9c:06:1c:24:30:10:29:56:30:2f:24:5c:
c4:b5:3e:ee:dc:71:8e:66:aa:20:55:75:07:4f:82:96:30:65:
b7:2f:39:e6:7c:1b:70:4c:e5:3c:7c:c4:be:66:01:75:09:f8:
c4:01:2e:95:25:85:39:ea:2d:b3:28:5b:32:18:f8:8a:c6:b0:
a9:6e:db:e0:79:ff:b6:0c:b4:9d:c5:f1:42:87:56:67:68:7c:
c5:1b:07:fc:72:7a:8c:12:84:b6:74:92:53:1e:f2:34:3c:3a:
a3:bb:dd:a9:fe:cd:21:d6:30:87:06:eb:a7:38:ed:49:9b:62:
0e:a2:4e:3e:d9:62:cb:e7:89:1a:de:59:45:f7:be:f0:69:ca:
08:e9:67:75:13:da:7b:fd:09:c4:4c:20:39:35:e0:f8:65:dd:
20:ab:85:b4:e8:25:5b:5c:a3:d1:44:ff:12:f6:c2:b1:79:39:
1e:2b:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:16 2024 by rpki-client on console-ams.rpki-client.org