Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/MrMgX2Vhq95pSIgX6n6wFw_uzNg.roa
File: MrMgX2Vhq95pSIgX6n6wFw_uzNg.roa (raw, json)
Hash identifier: 11bfWsYS7gASi3WucccAcNBKDQ0CVoYP6ylCqvdGBXk=
Subject key identifier: 32:B3:20:5F:65:61:AB:DE:69:48:88:17:EA:7E:B0:17:0F:EE:CC:D8
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 04A5A239
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/MrMgX2Vhq95pSIgX6n6wFw_uzNg.roa
Signing time: Thu 28 Apr 2022 08:49:39 +0000
ROA not before: Thu 28 Apr 2022 08:49:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5606
IP address blocks: 109.205.91.0/24 maxlen: 24
194.105.1.0/24 maxlen: 24
2001:4d80::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77963833 (0x4a5a239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Apr 28 08:49:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b3205f6561abde69488817ea7eb0170feeccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:26:e3:60:83:04:75:96:07:bf:96:84:27:
69:48:29:f3:69:1a:3e:2b:d3:95:a5:de:6b:89:3f:
f6:58:24:e6:ef:7f:8d:b3:44:dd:ac:6f:97:05:0c:
6d:ba:d7:4b:6d:23:a8:80:da:a0:bc:89:ea:ba:1f:
46:20:5d:65:4a:c1:e2:68:16:3b:25:80:7f:9b:47:
39:8b:33:5b:a7:92:a3:2a:5e:fc:38:84:56:e0:66:
f7:02:84:d2:01:14:db:95:f1:3d:6c:f0:02:1a:5a:
dc:5e:77:60:7a:cd:2d:62:61:c8:b4:02:48:ac:84:
65:ff:8a:32:93:da:ec:5f:be:e7:d3:f4:3e:b9:56:
f9:15:ea:7c:d1:31:fa:ba:17:c4:5b:43:31:de:40:
b6:bf:b9:1f:88:69:a0:2c:a8:14:6d:13:f5:14:52:
28:ef:24:25:c1:f7:cc:74:3e:99:84:7d:3b:cb:f2:
ec:86:d8:8d:3e:2d:db:82:6e:f0:4c:c1:06:d4:f2:
ed:d8:ef:84:b2:aa:16:f1:96:fc:3b:ce:11:70:b0:
50:a3:b9:d6:ed:b3:29:7e:71:96:fa:e5:9a:f1:8a:
c6:b6:74:56:10:59:5c:dd:ea:86:7b:21:6c:53:8d:
8c:76:4d:28:ad:61:01:a0:13:41:bc:3b:9a:9e:2a:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:20:5F:65:61:AB:DE:69:48:88:17:EA:7E:B0:17:0F:EE:CC:D8
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/MrMgX2Vhq95pSIgX6n6wFw_uzNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.91.0/24
194.105.1.0/24
IPv6:
2001:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
60:b2:6b:f5:b9:b7:3b:57:9e:cc:9d:03:5b:4d:84:40:4b:95:
7e:f3:8c:82:61:b9:4a:d3:fd:f1:63:fe:71:43:8d:c5:ca:60:
b5:82:84:d4:b0:5e:57:3c:68:ab:76:2b:3e:ae:fa:af:a2:67:
20:4b:9c:c6:20:a0:2d:db:f6:8d:bf:d6:f5:b4:51:28:9e:2a:
ae:e7:3b:7d:f9:d7:03:d9:7f:55:b9:75:0e:91:e6:de:28:30:
62:fc:a4:18:53:99:79:6a:02:39:0b:19:22:1f:67:07:6a:86:
a2:4f:e0:91:a1:ba:27:da:09:a5:ba:d9:a9:96:f4:ad:9a:db:
7c:4f:8b:81:a8:dc:73:b3:8f:21:d1:a6:74:58:b5:3e:2d:28:
f8:49:b7:a4:bc:53:f5:fd:d9:1d:64:6e:9c:f7:6b:76:c0:e3:
5a:2c:88:a1:14:f7:89:c3:8d:3b:47:a8:17:8d:c3:96:f5:1d:
2d:d8:07:c4:84:16:22:67:17:23:3a:c8:ab:15:71:b8:3c:4d:
39:4c:71:4d:b2:d4:fc:9e:3a:1b:ce:07:32:53:eb:13:96:fd:
d3:ce:a4:78:e9:8c:1e:f2:e1:f2:86:c8:35:88:39:60:f6:ac:
e6:bf:d0:3a:26:29:f1:bc:2e:ba:92:a2:71:b7:6c:5a:a5:48:
8c:d6:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:41 2023 by rpki-client on console-fra.rpki-client.org