Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/MBX3YOmYRmgjhDZGqpi0myYTBzg.roa
File: MBX3YOmYRmgjhDZGqpi0myYTBzg.roa (raw, json)
Hash identifier: ixt87GQRw4P95UmZW4ROEz6tvj7S5moAG9lhFfyozA0=
Subject key identifier: 30:15:F7:60:E9:98:46:68:23:84:36:46:AA:98:B4:9B:26:13:07:38
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018A6A367357C1119E767A048192BD7D98EF
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/MBX3YOmYRmgjhDZGqpi0myYTBzg.roa
Signing time: Wed 06 Sep 2023 11:17:47 +0000
ROA not before: Wed 06 Sep 2023 11:17:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206747
IP address blocks: 213.248.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:36:73:57:c1:11:9e:76:7a:04:81:92:bd:7d:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 6 11:17:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3015f760e998466823843646aa98b49b26130738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:f4:28:3c:8a:c9:54:eb:78:f7:8b:b1:30:
9f:43:9b:82:5f:b5:81:36:f9:ba:13:db:68:fe:d5:
dd:51:21:f0:3d:68:82:e6:e6:07:2e:fc:62:05:ec:
7f:79:95:89:e0:d1:5d:db:2f:5d:49:53:cf:c5:f9:
3b:00:c7:a9:fb:23:c8:2f:55:27:ad:da:69:d4:87:
ec:c4:b1:05:17:59:b6:e3:b0:75:2f:88:a6:59:98:
4a:f8:c9:33:55:6e:79:aa:47:11:5b:4d:d3:82:97:
98:33:9b:1b:07:ee:89:c8:c5:6e:bb:96:43:ca:8b:
5d:05:b5:df:85:00:57:3f:59:ae:07:45:63:28:45:
1e:42:e6:3f:13:22:91:5d:e9:d9:7b:4e:e0:61:85:
b1:84:f7:0b:24:70:6d:9b:a0:09:28:c9:9a:aa:18:
d3:fa:39:1d:5b:91:45:80:60:dc:4f:d3:ab:52:50:
23:4b:e4:ca:ea:36:ec:fe:ac:30:f5:6c:40:7e:8d:
84:ab:0c:16:26:34:27:6f:f5:40:05:fa:e6:f2:97:
76:36:9b:2b:41:84:2c:8f:cb:ca:97:a0:63:34:65:
d8:98:a6:24:5e:ea:d6:ce:15:53:66:62:ae:5d:9d:
cb:60:76:5e:46:8f:cd:dd:a5:59:96:12:67:43:52:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:F7:60:E9:98:46:68:23:84:36:46:AA:98:B4:9B:26:13:07:38
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/MBX3YOmYRmgjhDZGqpi0myYTBzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:18:e2:1b:43:26:90:00:ee:57:0e:12:dd:05:c6:04:87:9a:
7e:5e:f1:d6:3d:aa:6a:0d:e8:fe:cf:d2:0c:0f:9e:41:70:2f:
bd:68:5b:a8:85:8b:3f:98:7a:99:b8:ef:e7:28:55:64:09:64:
7e:51:a4:c3:96:5f:2a:e0:b0:8a:d3:c0:3f:95:88:fe:11:3a:
2c:c9:32:e9:25:44:1d:8c:f6:01:17:80:23:89:2c:44:5b:ee:
f8:6d:09:2a:63:4c:55:87:05:e8:b3:84:67:aa:02:bd:94:6b:
6c:7b:02:e5:ef:de:94:e3:12:8b:74:fb:b5:cd:38:7e:97:f9:
f9:a0:2b:51:77:7a:c6:5b:e7:28:05:f3:88:fa:bf:90:1e:f5:
f7:c1:7f:3c:7e:a7:79:83:29:ac:7d:2c:b7:c6:3e:2e:c2:56:
1f:1c:cc:e9:69:0d:09:54:66:41:d2:6f:5d:ea:38:53:fa:64:
5a:c6:e3:9f:0e:f8:76:19:d7:85:8b:60:fa:0f:22:c6:6a:68:
00:90:69:8d:2a:7d:41:cb:b0:0c:7d:6c:a1:a8:00:b6:b4:87:
92:56:5b:66:74:8e:f2:6b:12:4a:c2:d5:db:2f:e2:8d:11:82:
3b:68:ea:d8:d0:10:d9:43:cb:49:02:fb:4c:48:c7:ae:9a:e8:
39:b6:a1:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpqNnNXwRGednoEgZK9fZjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjMwOTA2MTExNzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDE1Zjc2MGU5OTg0NjY4MjM4NDM2NDZhYTk4YjQ5YjI2MTMwNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/0KDyKyVTrePeLsTCfQ5uCX7WB
Nvm6E9to/tXdUSHwPWiC5uYHLvxiBex/eZWJ4NFd2y9dSVPPxfk7AMep+yPIL1Un
rdpp1IfsxLEFF1m247B1L4imWZhK+MkzVW55qkcRW03TgpeYM5sbB+6JyMVuu5ZD
yotdBbXfhQBXP1muB0VjKEUeQuY/EyKRXenZe07gYYWxhPcLJHBtm6AJKMmaqhjT
+jkdW5FFgGDcT9OrUlAjS+TK6jbs/qww9WxAfo2EqwwWJjQnb/VABfrm8pd2Npsr
QYQsj8vKl6BjNGXYmKYkXurWzhVTZmKuXZ3LYHZeRo/N3aVZlhJnQ1JgrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAV92DpmEZoI4Q2RqqYtJsmEwc4MB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvTUJYM1lPbVlSbWdqaERaR3FwaTBteVlUQnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1fjAMA0G
CSqGSIb3DQEBCwUAA4IBAQAOGOIbQyaQAO5XDhLdBcYEh5p+XvHWPapqDej+z9IM
D55BcC+9aFuohYs/mHqZuO/nKFVkCWR+UaTDll8q4LCK08A/lYj+ETosyTLpJUQd
jPYBF4AjiSxEW+74bQkqY0xVhwXos4RnqgK9lGtsewLl796U4xKLdPu1zTh+l/n5
oCtRd3rGW+coBfOI+r+QHvX3wX88fqd5gymsfSy3xj4uwlYfHMzpaQ0JVGZB0m9d
6jhT+mRaxuOfDvh2GdeFi2D6DyLGamgAkGmNKn1By7AMfWyhqAC2tIeSVltmdI7y
axJKwtXbL+KNEYI7aOrY0BDZQ8tJAvtMSMeumug5tqEZ
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:06 2025 by rpki-client