Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/MWvUmoCB-QemDZLz7wqnnFrTt7k.roa
File: MWvUmoCB-QemDZLz7wqnnFrTt7k.roa (raw, json)
Hash identifier: GdCe3chDvvnXmUKyRCzLL83peweaWheIQmKTOksPxgk=
Subject key identifier: 31:6B:D4:9A:80:81:F9:07:A6:0D:92:F3:EF:0A:A7:9C:5A:D3:B7:B9
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0183C8BB3B151B93DDC5516BE6EBD4E38AE1
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/MWvUmoCB-QemDZLz7wqnnFrTt7k.roa
Signing time: Tue 11 Oct 2022 20:27:37 +0000
ROA not before: Tue 11 Oct 2022 20:27:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 193.239.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:bb:3b:15:1b:93:dd:c5:51:6b:e6:eb:d4:e3:8a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Oct 11 20:27:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=316bd49a8081f907a60d92f3ef0aa79c5ad3b7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:a7:8e:e5:39:78:fd:51:13:33:21:6b:c0:
49:8c:0b:39:36:33:eb:e1:3f:6f:ee:ef:a0:17:39:
b5:36:70:75:13:d9:71:2d:47:65:36:0b:ee:5d:3d:
d2:b1:a2:3d:a8:69:58:74:e6:1f:a1:d0:83:60:fe:
d7:05:48:90:5a:6e:a9:ef:ac:1f:57:e4:7f:a7:b6:
66:b9:8c:65:7b:02:a4:d8:a9:2c:2b:31:92:b5:1a:
33:be:85:ba:e1:59:16:47:56:c9:e9:e0:f7:e5:89:
72:cb:9e:d9:83:08:46:b0:de:9a:d8:15:21:12:12:
5e:45:87:41:9a:cb:88:db:3f:ec:c4:22:73:63:ff:
2a:61:f4:62:a1:53:ff:69:c4:5c:1d:92:6d:b4:c4:
c7:0d:63:c0:d7:68:98:a8:82:61:78:30:7e:94:6d:
cf:15:d6:16:94:7b:ed:17:a9:d6:41:3e:b9:03:9a:
8d:c5:bd:e9:84:3d:77:0f:5f:df:9c:b8:ce:86:65:
67:f7:94:28:e7:b8:b1:0a:5c:6e:db:a8:13:cc:7b:
ef:25:a2:0b:e1:a9:b9:e3:ee:93:23:7f:61:3b:c7:
63:60:ed:26:d5:b4:a7:90:3e:df:5d:dd:ce:91:7b:
a3:c0:8d:c2:06:41:42:c7:64:1f:94:89:74:cc:c0:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6B:D4:9A:80:81:F9:07:A6:0D:92:F3:EF:0A:A7:9C:5A:D3:B7:B9
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/MWvUmoCB-QemDZLz7wqnnFrTt7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
98:79:1f:b4:f0:d7:c4:e9:6a:20:5a:f2:6f:85:7e:ff:7b:30:
3a:31:51:b1:fa:1b:7b:6d:86:81:19:c8:e4:5e:f0:64:3a:cc:
45:d8:1e:b2:d3:74:41:6b:c0:21:e0:cc:38:02:85:09:1f:ce:
f4:98:fa:c9:95:e9:16:bf:57:c2:eb:87:5a:16:4e:b8:c1:f8:
af:be:bb:f8:3f:2e:9b:00:02:ff:3d:3e:ff:07:7f:70:6d:ea:
af:4b:fd:38:29:46:a1:b9:27:34:69:28:f0:c7:c0:b4:4e:47:
c0:15:0f:b2:49:05:b1:62:e4:7f:58:c1:c1:2a:a0:8c:63:dc:
7f:dc:7f:83:6c:b1:87:48:c8:5e:d8:c6:d2:d4:45:8c:b0:32:
7d:9d:ab:c1:c4:78:b5:04:45:75:9b:ff:48:56:40:c2:7d:62:
e2:20:41:27:6d:5b:d3:be:94:bb:c4:6d:63:55:d0:4d:af:45:
e5:04:89:39:d1:05:0c:41:c4:1b:f6:ee:99:fc:8e:f4:ae:f0:
de:ce:03:d1:98:43:5a:8b:20:b7:c6:e3:25:e4:15:6f:45:08:
55:83:8e:66:23:51:41:5f:6d:9e:60:8a:a1:3d:a1:f7:ef:32:
97:b1:b0:14:61:0c:b0:53:3e:52:e2:98:a9:61:43:d2:23:78:
58:b8:07:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPIuzsVG5PdxVFr5uvU44rhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjIxMDExMjAyNzM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTZiZDQ5YTgwODFmOTA3YTYwZDkyZjNlZjBhYTc5YzVhZDNiN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht2njuU5eP1REzMha8BJjAs5NjPr
4T9v7u+gFzm1NnB1E9lxLUdlNgvuXT3SsaI9qGlYdOYfodCDYP7XBUiQWm6p76wf
V+R/p7ZmuYxlewKk2KksKzGStRozvoW64VkWR1bJ6eD35Ylyy57ZgwhGsN6a2BUh
EhJeRYdBmsuI2z/sxCJzY/8qYfRioVP/acRcHZJttMTHDWPA12iYqIJheDB+lG3P
FdYWlHvtF6nWQT65A5qNxb3phD13D1/fnLjOhmVn95Qo57ixClxu26gTzHvvJaIL
4am54+6TI39hO8djYO0m1bSnkD7fXd3OkXujwI3CBkFCx2QflIl0zMA1QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFr1JqAgfkHpg2S8+8Kp5xa07e5MB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvTVd2VW1vQ0ItUWVtRFpMejd3cW5uRnJUdDdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/EMA0G
CSqGSIb3DQEBCwUAA4IBAQCYeR+08NfE6WogWvJvhX7/ezA6MVGx+ht7bYaBGcjk
XvBkOsxF2B6y03RBa8Ah4Mw4AoUJH870mPrJlekWv1fC64daFk64wfivvrv4Py6b
AAL/PT7/B39wbeqvS/04KUahuSc0aSjwx8C0TkfAFQ+ySQWxYuR/WMHBKqCMY9x/
3H+DbLGHSMhe2MbS1EWMsDJ9navBxHi1BEV1m/9IVkDCfWLiIEEnbVvTvpS7xG1j
VdBNr0XlBIk50QUMQcQb9u6Z/I70rvDezgPRmENaiyC3xuMl5BVvRQhVg45mI1FB
X22eYIqhPaH37zKXsbAUYQywUz5S4pipYUPSI3hYuAfJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org