Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mRFXKSs47RCokYpLRMAqL6jMMyo.roa
File: mRFXKSs47RCokYpLRMAqL6jMMyo.roa (raw, json)
Hash identifier: MbtncHY/NtCQaH1hJ+4NQpTTXxUgkJZ3xp4ZWuljsiM=
Subject key identifier: 99:11:57:29:2B:38:ED:10:A8:91:8A:4B:44:C0:2A:2F:A8:CC:33:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C6AB7A6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mRFXKSs47RCokYpLRMAqL6jMMyo.roa
Signing time: Sat 01 Jan 2022 01:02:34 +0000
ROA not before: Sat 01 Jan 2022 01:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44901
IP address blocks: 94.156.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476755878 (0x1c6ab7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=991157292b38ed10a8918a4b44c02a2fa8cc332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:ee:d2:0d:53:f3:bf:e8:d1:cc:da:87:82:
86:99:85:e5:4f:e3:91:07:08:8a:1e:65:22:2c:c1:
4e:f4:df:f0:60:28:03:85:03:6c:31:82:04:3b:99:
58:91:7c:fc:95:a2:43:a2:7a:2a:13:2f:5a:de:a1:
43:54:82:b8:86:13:9d:32:f9:d4:34:b9:a6:16:be:
e3:65:de:96:08:9a:c9:56:16:13:0d:19:63:40:6b:
6b:ae:78:9d:98:46:12:c6:95:71:ae:2b:3f:db:45:
82:2e:f3:10:b7:bc:02:ab:7b:d3:e8:d0:6f:ee:4a:
ce:bc:90:e1:26:ef:06:bb:42:a6:c6:53:fe:6b:6c:
e1:5f:4b:e0:a8:cf:60:d2:b2:81:ef:f7:bd:64:ec:
c9:16:62:07:92:45:75:6c:74:2a:13:dd:b1:fc:ba:
0b:42:c9:8f:9f:94:9e:76:d8:2e:45:7c:f6:44:c6:
c3:8c:ab:16:a5:ae:d3:9c:b4:a4:31:19:b6:73:89:
00:7c:71:cb:20:3f:0b:cb:98:1e:ed:f9:42:cd:13:
e0:ca:2d:97:21:9c:7b:71:38:71:05:6c:f3:ac:3e:
35:52:c1:86:0c:02:7c:98:ae:b3:4c:79:3a:df:c9:
60:ec:ae:97:fc:f7:f1:54:99:47:12:0a:93:70:45:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:57:29:2B:38:ED:10:A8:91:8A:4B:44:C0:2A:2F:A8:CC:33:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mRFXKSs47RCokYpLRMAqL6jMMyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:98:9d:e8:f9:a4:fc:f9:4e:21:0b:d0:cf:df:38:06:72:c1:
64:f4:65:0f:68:17:75:6b:3a:39:10:51:6d:d0:7c:3b:d0:57:
7a:60:64:fd:4d:da:c9:35:bf:86:16:05:8e:a6:2f:68:ed:2c:
6d:7f:38:6a:2d:78:06:08:e2:3d:06:d1:19:5f:32:09:ff:c4:
57:ce:b2:1d:3e:eb:c8:14:0c:06:c7:67:a6:72:8b:b4:03:18:
66:a0:46:6e:9f:b8:ea:dd:9a:a6:c8:f0:46:b1:50:de:51:71:
86:f8:a1:dd:ae:00:da:d0:af:15:7b:5f:71:d6:e6:0b:19:69:
f0:42:8b:21:a0:40:65:61:78:dc:34:e6:93:ba:23:ed:e5:40:
eb:65:48:a2:e5:6c:8b:5d:98:1e:f5:fc:d1:61:e0:b7:38:b4:
eb:5f:b2:7c:5a:4e:17:1a:a9:aa:a1:c7:2f:47:a1:33:4a:51:
0b:d8:65:3a:f8:9b:d2:1d:3c:b2:17:45:34:a1:cc:a2:48:55:
2c:07:e6:89:42:fe:90:32:10:1d:20:cd:b8:04:65:0c:da:11:
5e:75:36:6a:4c:e3:97:47:8f:f2:04:a0:fe:12:a0:08:83:df:
de:0a:7c:c1:70:7c:cb:e8:28:3a:92:9f:5b:d7:23:c6:b8:b4:
64:85:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org