Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MqBeguOl1Z2ZNgRY-qp6i4OQqps.roa
File: MqBeguOl1Z2ZNgRY-qp6i4OQqps.roa (raw, json)
Hash identifier: 6afDVS23b8dpuo0kzi6uKGtf5ToZ0QB2nlP24bT1Xxo=
Subject key identifier: 32:A0:5E:82:E3:A5:D5:9D:99:36:04:58:FA:AA:7A:8B:83:90:AA:9B
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B580053
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MqBeguOl1Z2ZNgRY-qp6i4OQqps.roa
Signing time: Sat 01 Jan 2022 08:58:34 +0000
ROA not before: Sat 01 Jan 2022 08:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31674
IP address blocks: 212.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190316627 (0xb580053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32a05e82e3a5d59d99360458faaa7a8b8390aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:37:ef:e5:af:7f:9e:25:31:b2:2b:52:58:
69:b5:56:15:62:34:18:be:fe:65:3d:31:96:ba:df:
11:49:30:6f:a9:33:f6:1d:af:e6:60:3b:1c:0e:dd:
78:62:97:ee:09:1e:9c:ac:06:fd:88:cf:8a:2e:78:
85:a6:5b:98:29:a5:5e:6e:9b:10:c7:93:c5:29:43:
cd:5c:01:35:28:75:2b:db:8d:70:87:1e:8c:17:25:
25:e6:de:aa:e8:50:d9:81:e4:30:c8:88:02:23:e5:
25:b0:5e:6d:1c:64:4e:bc:12:65:cc:b2:11:11:54:
53:ee:93:03:ed:d7:bd:e0:bc:fb:c6:d4:d2:d8:b8:
21:d1:27:0a:77:d5:d6:0e:66:5c:2c:fb:2d:e9:f6:
2e:b8:5c:5a:4a:6b:81:ca:6c:44:8f:10:59:35:34:
56:b9:25:76:5d:d4:35:e6:c4:83:cf:35:58:64:e2:
ec:e5:a7:06:b6:fd:0c:07:e4:d1:d2:43:6d:26:a0:
82:a7:1e:e0:28:5e:4a:0a:1d:4c:a6:fa:68:89:00:
61:6b:85:d5:52:be:f7:d0:6d:0c:4b:75:b1:b9:dc:
f7:c4:00:e1:c2:d3:5b:97:c1:a4:be:a7:bd:28:2e:
94:1c:6d:a1:be:fa:50:e2:86:36:82:4d:19:27:d6:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:5E:82:E3:A5:D5:9D:99:36:04:58:FA:AA:7A:8B:83:90:AA:9B
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MqBeguOl1Z2ZNgRY-qp6i4OQqps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
68:cc:14:d8:2c:30:86:e7:e7:0d:d3:a0:48:c5:98:50:a4:d8:
06:c1:86:8d:c5:5d:c4:36:88:b2:98:2f:69:b8:ca:52:e2:6a:
66:f5:0c:c0:bd:73:23:10:2b:f5:f3:21:8f:30:6d:2f:66:79:
3d:e7:08:69:ea:67:69:da:35:10:81:8c:a3:74:85:4b:ac:1b:
bb:b9:37:9a:79:56:bd:2b:1c:9f:d6:d3:07:bf:bb:f5:5a:c2:
51:78:58:5b:b7:f8:19:08:8c:59:6e:dc:2d:43:bf:4f:f7:fc:
e2:6e:4c:58:a3:d1:5d:15:03:64:f6:13:68:8f:af:6f:82:46:
44:a9:c9:40:25:ef:4f:05:2b:e2:0e:cb:56:7a:a3:ae:88:3e:
72:2a:59:82:03:42:99:2c:88:d5:9f:37:b7:f8:45:92:a5:b4:
4d:21:4c:b5:a1:ba:05:da:74:ec:f4:bb:e3:1f:d9:f5:75:5a:
7e:9d:58:ba:79:68:65:98:67:25:40:36:a3:c9:e6:af:d3:a8:
7e:5d:2f:9c:f5:dc:98:db:c5:89:1c:7c:56:86:cf:4e:ea:3c:
13:18:fa:01:6a:5d:ff:c5:5f:05:71:4d:12:2d:cc:de:e2:38:
f7:fb:1c:44:ee:61:cb:e5:1b:9d:f9:c6:d1:43:d7:dd:d0:18:
16:c4:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org