Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MK54mUZRVwxXiiibtGCd01UC-Eg.roa
File: MK54mUZRVwxXiiibtGCd01UC-Eg.roa (raw, json)
Hash identifier: IY+2Vm1sz38NNsIkX9aJTpn9yzlp0O8Nf0uTeuGxJ50=
Subject key identifier: 30:AE:78:99:46:51:57:0C:57:8A:28:9B:B4:60:9D:D3:55:02:F8:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182AB4F9E8AE718B4CCE9C3BE781B01778C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MK54mUZRVwxXiiibtGCd01UC-Eg.roa
Signing time: Wed 17 Aug 2022 10:18:17 +0000
ROA not before: Wed 17 Aug 2022 10:18:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
87.121.122.0/23 maxlen: 24
193.47.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:4f:9e:8a:e7:18:b4:cc:e9:c3:be:78:1b:01:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 17 10:18:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30ae78994651570c578a289bb4609dd35502f848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:30:07:58:d1:d6:06:33:95:93:80:b9:a2:
f5:d7:e7:16:c5:37:ca:c3:ed:af:0c:c3:2a:4d:30:
89:d7:85:e5:8f:c9:8e:f2:78:56:be:f9:f3:dd:a9:
1e:ab:da:a3:9a:5a:4b:7e:68:86:7e:95:65:d9:fa:
ac:3c:04:55:2d:7c:99:0a:37:91:cb:1b:dd:03:7e:
94:78:b7:17:4f:8f:ee:d4:71:f7:df:f5:78:8b:84:
03:50:1b:15:33:10:86:7f:dd:08:53:08:01:5b:21:
9d:9f:a9:21:5d:48:d0:cf:57:71:15:38:51:19:35:
8f:6e:27:2a:74:34:da:8e:42:af:c4:c0:14:55:d5:
c9:08:7f:1d:c3:e9:bc:7a:bc:11:4b:d5:20:02:e6:
d3:9a:94:77:a9:78:27:81:ad:6a:f1:30:61:29:29:
27:9e:82:fe:28:b2:01:8b:b4:73:63:7d:7b:56:57:
e4:24:08:85:2d:73:02:ca:e1:a6:f7:47:d9:79:a2:
ee:2b:27:e0:4d:03:ed:b1:4d:29:51:6f:b2:dc:f8:
9c:db:67:a8:59:89:09:d1:3e:cc:eb:19:10:bc:e6:
80:01:15:17:e7:bf:5f:cb:22:9b:bf:d8:8d:c7:78:
b0:56:45:27:c2:5a:55:33:ef:0d:49:f5:bc:75:38:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:78:99:46:51:57:0C:57:8A:28:9B:B4:60:9D:D3:55:02:F8:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MK54mUZRVwxXiiibtGCd01UC-Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.122.0-87.121.125.255
193.47.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3b:c1:97:6c:47:a5:dd:28:cd:fe:1f:95:03:da:ac:bb:d9:
14:5f:5b:bd:ed:bd:d8:32:f8:96:41:ee:d5:e9:25:dd:62:5a:
c5:74:67:ff:db:19:e8:4f:d1:02:2a:18:33:b6:f7:f5:c2:25:
1f:e1:18:fc:79:ee:5b:93:96:f4:e5:54:70:68:d0:c2:9b:7a:
d0:15:2a:f3:1c:ae:90:a4:64:29:db:e9:65:cc:b5:56:ee:44:
f2:c6:b6:59:10:17:3c:03:f1:3f:0a:10:4f:d0:63:1c:ee:6f:
61:9e:8c:d3:52:7b:c3:92:1b:36:7a:dd:c0:24:6b:7f:c3:4a:
0f:bc:73:55:8d:8b:7c:dd:74:65:ef:3c:f7:73:d6:56:82:ea:
cf:90:1d:29:a1:ea:2e:5b:0a:05:80:9f:bb:51:ae:08:4c:81:
e1:df:04:ff:71:39:42:14:d2:b9:49:1c:cc:ff:bc:df:b5:01:
7b:77:63:e9:2b:80:8d:1f:37:dd:75:1e:bd:11:c1:46:3a:5b:
7b:21:5b:57:73:26:99:d1:fe:a3:1d:c7:fa:e2:ca:37:cf:b0:
58:d0:0f:f9:b2:26:9f:49:58:94:01:3b:e0:96:76:97:58:19:
be:75:e7:51:2a:b9:95:78:65:80:62:7b:dc:b7:63:1d:81:8a:
c0:9f:da:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org