Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/mRPkc5kHUMp7B-CVovvWtrA-u7M.roa
File: mRPkc5kHUMp7B-CVovvWtrA-u7M.roa (raw, json)
Hash identifier: Sq8LH7XKpMKICg7AB1FTPVBWk0hE8Z0HeYCT2ipWwN0=
Subject key identifier: 99:13:E4:73:99:07:50:CA:7B:07:E0:95:A2:FB:D6:B6:B0:3E:BB:B3
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0E25CC2F
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/mRPkc5kHUMp7B-CVovvWtrA-u7M.roa
Signing time: Mon 14 Feb 2022 08:16:46 +0000
ROA not before: Mon 14 Feb 2022 08:16:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210336
IP address blocks: 195.242.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237358127 (0xe25cc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Feb 14 08:16:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9913e473990750ca7b07e095a2fbd6b6b03ebbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:fd:27:f9:18:6e:1a:14:af:b7:10:9a:c8:
3f:71:c3:9e:be:14:09:40:9f:69:a9:7a:2d:a2:59:
b5:5f:be:e7:0e:10:86:8f:6b:28:39:25:7d:a3:0f:
3a:a8:33:54:10:e2:7a:c5:3f:e2:2a:1c:e3:ab:15:
e9:cb:fa:22:55:17:cf:f7:0b:e5:94:11:d9:ff:99:
82:42:e7:97:21:7a:56:ed:ce:99:bd:4b:5a:23:ed:
ac:ec:ed:6d:26:db:93:ac:bc:11:29:2c:88:5a:e8:
77:f6:6d:5f:0b:39:b9:14:6b:2b:dc:55:bb:1f:61:
48:95:25:5f:d7:cd:ac:9a:8d:19:77:f1:3e:3f:02:
3c:67:2c:3b:16:ff:1a:ae:8f:81:82:45:5d:8c:a2:
f8:b6:24:85:7b:55:9f:4f:ad:80:3c:1d:3b:c1:22:
04:65:38:31:b0:a4:74:b9:9c:cc:ca:5f:1f:f6:6b:
05:04:2f:97:ef:69:de:ff:e0:9d:d6:0d:bc:16:d8:
e7:6c:43:2c:e8:21:14:a7:04:1a:a5:d8:12:1c:82:
a9:e7:16:1d:13:a1:76:9a:78:46:11:68:7a:4d:a6:
4b:29:45:b9:68:88:dd:7d:19:3e:57:80:7d:00:64:
80:5d:78:d4:d4:d6:db:12:10:b6:d2:05:ba:e4:2f:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:E4:73:99:07:50:CA:7B:07:E0:95:A2:FB:D6:B6:B0:3E:BB:B3
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/mRPkc5kHUMp7B-CVovvWtrA-u7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.90.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:52:9e:56:26:e3:4e:34:40:e7:2c:0a:d7:33:af:8a:d2:8f:
4a:29:7a:51:ee:89:d5:8c:f9:bc:4e:cb:b7:a0:aa:3c:e1:03:
5d:94:54:0c:b5:ae:ae:ed:5c:3b:cf:75:3d:66:1b:67:6d:1c:
a7:c3:4d:9a:42:1f:cd:70:6b:f3:7f:da:e5:2a:8c:41:b5:0a:
2f:37:dd:37:f3:1c:79:bc:6b:3d:30:a5:78:1b:e6:90:f6:81:
d5:c6:bb:5f:a0:e5:a9:70:f6:7c:7e:48:13:5b:12:ea:3d:5b:
4f:fc:48:95:46:b7:08:d8:bb:2c:2d:8e:d1:ab:3e:0d:55:5d:
a2:de:3d:2e:67:a8:33:ef:fe:66:c8:c7:c4:8f:e6:f3:4c:b5:
21:4f:21:5b:b9:87:f3:22:1d:d7:38:f0:b6:44:dc:ae:99:c2:
ca:aa:f6:18:b5:37:e8:4d:8a:45:cf:a5:14:91:80:8c:10:5c:
24:73:f2:1f:d0:32:1a:57:57:3d:2c:dd:72:96:6d:37:11:4e:
a4:e4:4c:1b:e2:e2:94:0f:5a:40:6d:8e:7a:67:57:4c:13:f0:
a4:ff:e9:0a:a1:20:0a:2b:89:e8:fa:f1:57:f0:8a:bf:50:4c:
ad:4e:d8:07:75:85:38:5b:33:64:8e:57:f8:75:de:55:f4:4b:
71:c7:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org