Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/mn-YotgVqoVOrQdcTxQxoyoFGvs.roa
File: mn-YotgVqoVOrQdcTxQxoyoFGvs.roa (raw, json)
Hash identifier: ubasZHXTRcIQfbSbhC47dub1QYu83L+A9fK7ARDo1rA=
Subject key identifier: 9A:7F:98:A2:D8:15:AA:85:4E:AD:07:5C:4F:14:31:A3:2A:05:1A:FB
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0183E0A9F2A0A1061CFF0BB6CF4D6C1BC50F
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/mn-YotgVqoVOrQdcTxQxoyoFGvs.roa
Signing time: Sun 16 Oct 2022 11:59:37 +0000
ROA not before: Sun 16 Oct 2022 11:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62229
IP address blocks: 178.22.78.0/24 maxlen: 24
178.22.77.0/24 maxlen: 24
178.22.79.0/24 maxlen: 24
45.157.245.0/24 maxlen: 24
45.157.244.0/24 maxlen: 24
45.157.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:a9:f2:a0:a1:06:1c:ff:0b:b6:cf:4d:6c:1b:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Oct 16 11:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a7f98a2d815aa854ead075c4f1431a32a051afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:3e:1f:89:d1:7a:18:52:69:64:57:68:47:
2f:3c:6e:2c:b3:b0:c9:13:29:6d:9a:ca:cb:88:5c:
8f:ba:a1:0a:32:b5:74:85:af:48:f6:92:b9:75:05:
f8:25:e2:ee:e8:58:61:3b:df:10:1c:44:a8:16:88:
6d:0c:cb:59:f2:47:10:e1:7a:ac:14:ff:eb:8b:b3:
89:c4:50:41:3d:bd:15:c9:fa:4a:06:5f:99:cc:c1:
4a:d1:a5:5c:07:cb:2b:49:56:56:4f:ad:3e:3e:ad:
e3:f0:22:07:92:ac:96:47:2c:c7:0b:5b:67:02:26:
51:01:28:bd:5a:45:7b:77:7f:e8:4e:b8:e0:ef:f0:
d6:32:97:b9:40:91:40:fc:8c:59:5b:d7:41:34:32:
a0:c2:ed:ec:24:c2:7c:b0:f5:6a:bb:12:e8:c6:67:
36:e4:d7:ec:0e:8a:8a:b6:8d:30:cb:a5:c8:27:bb:
02:b8:b7:bc:02:b9:d9:7a:a3:2d:bc:ac:3c:2f:3e:
25:db:fe:a9:c7:57:41:65:93:e3:4c:13:dd:57:05:
23:1b:b1:18:95:a8:9f:19:fe:a4:c5:e1:19:5a:71:
56:fa:9c:40:48:2e:66:47:50:a7:dd:0a:10:43:33:
f5:eb:8d:54:88:d7:7d:f5:2a:dd:6d:3c:5b:56:65:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:98:A2:D8:15:AA:85:4E:AD:07:5C:4F:14:31:A3:2A:05:1A:FB
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/mn-YotgVqoVOrQdcTxQxoyoFGvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0-45.157.246.255
178.22.77.0-178.22.79.255
Signature Algorithm: sha256WithRSAEncryption
67:15:3e:7c:1b:69:bd:3d:ba:3e:6c:86:a7:78:ce:7f:15:10:
a0:e8:d0:ef:ec:48:f9:ea:4f:2e:49:23:88:8d:ab:98:3a:78:
78:54:1b:e3:28:94:a3:b4:63:52:af:f5:99:f9:f4:d5:1e:ae:
79:9c:02:5d:8d:8d:90:48:e9:57:7f:60:e2:9b:c1:b8:2b:6f:
07:8b:e1:b0:f8:74:a5:62:91:f6:cc:2f:6f:e4:84:0b:6d:57:
ed:70:74:ce:3c:72:19:41:4a:cb:c4:5b:d7:91:e8:29:11:73:
63:a8:12:df:a5:83:88:a0:ed:a4:d2:3d:fb:93:b8:01:f6:7c:
f3:c7:4e:78:f8:dd:6d:e7:7c:5c:f9:83:90:88:02:33:4a:c5:
b3:1f:b8:5c:e9:1d:fe:06:17:50:18:67:e8:9f:50:d2:fd:b2:
1b:69:aa:ab:15:2e:29:ec:58:21:4e:77:f0:15:38:30:18:92:
c4:65:fa:5a:99:f6:2d:5c:64:f1:2c:89:ef:e9:d6:b1:56:0f:
76:24:ce:ac:27:96:c9:78:b0:28:bd:0c:be:26:2a:31:d5:6a:
69:b0:60:2c:c5:d9:e4:2e:ea:96:2c:05:c4:75:a8:8f:79:0f:
bf:fd:e8:f7:60:de:bb:e2:6f:6d:ab:f7:8b:eb:8c:05:1a:7f:
52:cd:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:00 2024 by rpki-client on console-ams.rpki-client.org