Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/Mp_sb5pbK27-j8dTS4768oOG0zY.roa
File: Mp_sb5pbK27-j8dTS4768oOG0zY.roa (raw, json)
Hash identifier: KGQWsZ3LMsn7AsFxZQwBq4A4J3ZiEIPmMfT/OL+CP+0=
Subject key identifier: 32:9F:EC:6F:9A:5B:2B:6E:FE:8F:C7:53:4B:8E:FA:F2:83:86:D3:36
Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial: 05D2BADE
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/Mp_sb5pbK27-j8dTS4768oOG0zY.roa
Signing time: Tue 04 Jan 2022 09:53:31 +0000
ROA not before: Tue 04 Jan 2022 09:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 193.107.92.0/22 maxlen: 24
91.206.16.0/23 maxlen: 24
2001:678:68c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97696478 (0x5d2bade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Validity
Not Before: Jan 4 09:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=329fec6f9a5b2b6efe8fc7534b8efaf28386d336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:65:11:d4:09:0e:93:b3:2e:ef:76:e8:bc:
be:39:b2:8e:46:39:cc:ad:16:17:8c:60:43:16:1f:
2a:4e:8c:08:d3:6a:38:5b:02:c6:c9:37:be:27:f3:
13:ad:4a:76:54:c2:33:a8:fe:94:7b:13:30:5b:4f:
d1:8d:29:ce:13:9c:ac:2e:08:c1:64:28:6f:ed:6f:
9f:5e:91:18:c2:3d:83:38:86:29:18:c6:9a:02:9c:
59:c0:88:f3:64:4c:f0:a8:e7:91:db:66:28:2b:07:
22:e9:f7:5e:76:9c:12:cb:8a:d3:01:29:fa:8c:a9:
aa:e6:0d:09:7d:da:11:f4:c4:5f:b1:46:a1:23:4e:
4a:ee:42:6b:78:a3:8c:70:15:83:60:d5:15:c8:77:
63:c6:49:b8:f8:71:96:3f:56:31:d5:2e:8e:a5:ae:
0c:77:3f:3a:63:d4:77:13:0c:18:b0:cf:bc:19:ee:
aa:a4:b7:c8:de:f9:86:c2:16:6a:cf:2e:bf:a7:90:
fa:56:13:ed:1a:9d:aa:20:89:2d:a3:d9:b2:8b:3e:
0b:29:a0:41:40:2b:1d:c9:1a:db:a0:d5:2c:a6:eb:
1c:d7:16:7a:11:eb:b7:64:47:67:0a:b3:a7:a5:9a:
76:9b:61:39:7f:30:3b:1b:58:7f:ac:5c:9d:f1:c5:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:EC:6F:9A:5B:2B:6E:FE:8F:C7:53:4B:8E:FA:F2:83:86:D3:36
X509v3 Authority Key Identifier:
keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/Mp_sb5pbK27-j8dTS4768oOG0zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.16.0/23
193.107.92.0/22
IPv6:
2001:678:68c::/48
Signature Algorithm: sha256WithRSAEncryption
41:1d:ff:f2:eb:86:6b:d7:c1:5d:66:09:28:e7:ca:7b:40:97:
3d:ac:a4:ad:8a:7d:f9:ce:b0:a9:d6:6a:d7:46:7a:36:27:13:
71:14:65:25:bf:6c:36:99:e3:93:72:5c:c6:32:0b:38:13:00:
d9:71:ca:dc:db:af:69:48:77:26:9d:4c:7b:01:35:fe:45:ea:
87:88:68:b7:6d:38:d1:58:d3:75:f3:f2:a6:9f:05:a1:f2:10:
48:5c:5f:0e:9c:d8:74:bd:f1:79:b9:e0:a5:87:d1:c6:1b:b4:
22:66:40:3b:08:26:5a:b9:12:c0:9a:6e:38:10:0f:26:77:cb:
90:db:62:88:d3:a7:26:ae:07:38:68:8c:83:e5:52:fc:df:6e:
4a:61:15:52:cd:13:32:7c:c1:46:aa:ca:63:49:76:43:23:92:
93:8b:86:d5:7e:94:d6:b9:10:36:ab:c9:77:a6:f8:0b:59:b5:
0e:40:3d:23:3e:b5:1c:09:cc:c8:05:11:d6:9e:82:6f:c6:ca:
1d:d4:84:49:74:09:0b:0f:d6:49:07:4f:f0:d7:01:55:9c:18:
fe:82:3c:b9:a6:bf:68:1a:a0:c5:43:fe:af:30:4a:c2:02:68:
b0:96:4d:be:c3:c4:c3:2a:1b:e1:b9:62:aa:82:d1:ac:25:79:
6a:7d:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:51 2023 by rpki-client on console-ams.rpki-client.org