Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/McrxSt6LbbD_tGSAlwkUhQUczxQ.roa
File: McrxSt6LbbD_tGSAlwkUhQUczxQ.roa (raw, json)
Hash identifier: tuk/NMTV3mDq4kaN9P19ShTM/3rfmNcDbAFm0TAAOAI=
Subject key identifier: 31:CA:F1:4A:DE:8B:6D:B0:FF:B4:64:80:97:09:14:85:05:1C:CF:14
Certificate issuer: /CN=ba3c124548e2bdf66110264ce97ea4fa231f30d6
Certificate serial: 0134DA
Authority key identifier: BA:3C:12:45:48:E2:BD:F6:61:10:26:4C:E9:7E:A4:FA:23:1F:30:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujwSRUjivfZhECZM6X6k-iMfMNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/McrxSt6LbbD_tGSAlwkUhQUczxQ.roa
Signing time: Wed 27 Apr 2022 08:18:38 +0000
ROA not before: Wed 27 Apr 2022 08:18:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51202
IP address blocks: 91.218.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79066 (0x134da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba3c124548e2bdf66110264ce97ea4fa231f30d6
Validity
Not Before: Apr 27 08:18:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31caf14ade8b6db0ffb4648097091485051ccf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:2b:79:df:06:82:e3:40:6f:64:e3:45:be:
37:58:ef:8b:de:c6:90:ae:9e:5c:42:3e:51:eb:fd:
b6:3e:d0:f0:f3:f5:a2:3e:c5:51:37:d7:80:d3:33:
82:e9:56:fe:20:65:e6:8a:ad:ff:79:95:91:7a:d6:
fc:8b:d9:27:c4:31:c9:08:8b:50:d7:f2:27:8d:39:
79:7e:f8:54:5a:f5:1f:a6:75:21:c5:79:7e:f5:27:
03:05:42:67:6e:9f:ad:5b:e9:41:20:67:af:c1:31:
4d:f2:ee:66:1e:31:3f:82:36:ad:ca:16:8b:44:00:
fc:94:40:6d:34:22:de:fb:81:31:78:c3:4c:4f:83:
67:69:13:ba:27:cd:5f:5f:dc:53:df:1e:ee:a6:34:
53:ad:5d:4b:32:b8:45:e4:b7:c0:d3:bf:e9:fe:b6:
df:de:25:25:e3:8d:7b:f0:a9:5d:16:9f:57:7a:46:
b7:4b:82:bc:4d:8c:f6:75:2e:64:f1:78:24:b7:7e:
61:b6:46:85:81:68:73:bf:34:08:66:fd:35:4d:a6:
6c:a2:f8:df:06:ac:54:fd:99:e5:c3:14:f3:45:c3:
49:1d:12:60:7b:70:db:0e:8b:a5:b4:ac:f3:72:12:
5d:e5:0d:22:4c:6a:5f:09:86:6b:ef:a5:e4:a8:68:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CA:F1:4A:DE:8B:6D:B0:FF:B4:64:80:97:09:14:85:05:1C:CF:14
X509v3 Authority Key Identifier:
keyid:BA:3C:12:45:48:E2:BD:F6:61:10:26:4C:E9:7E:A4:FA:23:1F:30:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujwSRUjivfZhECZM6X6k-iMfMNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/McrxSt6LbbD_tGSAlwkUhQUczxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/ujwSRUjivfZhECZM6X6k-iMfMNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.0.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f6:55:10:da:0a:61:a3:3d:22:c4:1f:62:ba:de:e7:e0:60:
fb:34:3a:6c:9b:b0:9c:64:54:e1:7b:28:56:c2:6b:1f:2f:b9:
74:31:15:43:a5:86:b1:78:2c:29:2c:50:aa:7c:74:d0:94:e8:
b3:2c:20:f3:e3:e9:50:87:64:fa:49:e5:34:fe:a0:33:b7:48:
a5:78:1f:0d:46:1a:b9:5e:9f:4f:5c:58:63:2a:c4:c1:91:14:
85:e9:3a:7d:69:60:de:98:5e:3d:35:ab:76:46:7b:b9:fd:98:
c3:c1:36:b7:88:f1:8a:2b:10:ce:1a:d5:7c:76:cd:4d:a2:f6:
c1:c4:3d:1e:77:26:a5:6b:13:1d:65:27:5f:3e:38:32:e4:5a:
80:f9:d8:7e:10:6f:ee:97:51:b0:f7:43:89:7d:fa:fc:ea:8b:
31:28:c1:7d:93:d0:55:c7:30:2a:34:60:ab:d9:1a:99:03:56:
bd:cf:80:7c:df:66:e5:19:4d:05:f4:1c:ce:14:cb:e9:72:21:
92:af:12:2e:92:23:fa:7d:79:e5:44:53:14:32:5d:50:e9:e5:
90:e9:07:5e:18:69:ed:dd:db:3d:48:66:98:41:9e:65:10:43:
5b:e8:92:1f:53:2b:f7:bb:da:e1:9c:70:0c:71:63:b0:b6:93:
ef:d8:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:31 2024 by rpki-client on console-ams.rpki-client.org