Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/MvwRqArFtl5c7kwgpT_-DBiwFYE.roa
File: MvwRqArFtl5c7kwgpT_-DBiwFYE.roa (raw, json)
Hash identifier: izQhCssUKjKangtkQScwV3YeMAWt5seZJkmlzw907IA=
Subject key identifier: 32:FC:11:A8:0A:C5:B6:5E:5C:EE:4C:20:A5:3F:FE:0C:18:B0:15:81
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 34B2B5C3
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/MvwRqArFtl5c7kwgpT_-DBiwFYE.roa
Signing time: Tue 21 Jun 2022 07:46:47 +0000
ROA not before: Tue 21 Jun 2022 07:46:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47159
IP address blocks: 91.83.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884127171 (0x34b2b5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jun 21 07:46:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32fc11a80ac5b65e5cee4c20a53ffe0c18b01581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:06:29:d5:ac:6b:25:fc:e2:63:f4:35:cd:
fb:3d:ac:9b:50:b4:fa:68:2d:16:fe:0d:6c:9a:f8:
73:d2:90:43:5f:fe:05:d4:43:c3:a6:f1:d0:58:9c:
66:33:0b:c0:4f:2d:af:32:00:5c:42:fa:84:cc:e3:
b2:49:fe:c7:b9:a0:dd:fd:f5:55:a7:c1:c0:fb:99:
47:18:36:62:37:e2:ca:83:f6:2c:54:46:16:37:9a:
20:25:d4:96:98:dc:09:9a:a0:ea:73:92:65:d4:2e:
4a:0a:bb:14:67:c6:a9:4f:34:d7:17:7a:71:64:14:
f0:8d:24:03:a2:d1:58:4c:d1:90:b8:05:c9:87:9f:
28:31:5b:e3:88:46:f7:20:08:01:68:62:fd:6c:68:
2c:cf:05:b7:24:b2:ad:0c:e7:7d:83:4a:4e:fe:82:
aa:08:9a:fe:aa:4a:6a:b9:ee:9f:43:47:4c:e9:8f:
f2:cc:e8:64:1c:29:ac:64:f1:83:d0:23:08:76:81:
ae:fd:d8:f0:50:a6:a1:0d:4f:a6:c9:49:3c:9c:2b:
9b:d0:54:bc:86:3c:64:3e:6e:96:89:d2:27:c4:8d:
9f:9f:26:71:52:97:14:76:a6:b6:4b:a3:b4:61:33:
89:92:99:ca:bc:9d:d0:7c:1a:e1:31:26:ce:03:21:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:11:A8:0A:C5:B6:5E:5C:EE:4C:20:A5:3F:FE:0C:18:B0:15:81
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/MvwRqArFtl5c7kwgpT_-DBiwFYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.83.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:7b:ba:77:d9:f9:f4:b8:dd:13:14:42:27:c4:de:3b:38:1a:
95:e9:28:ea:dc:5c:75:0c:0b:3a:ab:19:37:81:cb:ae:4f:9a:
48:9b:df:77:12:0b:17:9c:84:f7:d3:8a:0e:64:e1:32:1d:ed:
dd:e1:7d:71:1b:80:c0:b4:53:06:05:49:78:58:1a:4e:89:bb:
78:de:dd:b6:7f:80:b2:be:86:24:ab:7d:64:b2:bb:dd:76:d8:
af:22:c3:d7:d4:35:ad:22:90:6c:de:2e:b1:3b:87:60:6c:ef:
a0:e3:26:29:92:21:b1:b2:27:69:db:2b:83:86:3f:f4:0e:4b:
7c:89:21:38:9d:c2:31:bf:3e:fb:f8:36:87:52:8d:c4:5c:39:
f3:88:a3:5d:11:cf:b9:13:7c:aa:a2:d6:ba:00:ad:82:f1:a0:
aa:ae:5c:6a:4b:af:cd:f7:8a:b5:d2:8b:ba:7d:41:aa:a6:af:
c9:cf:f0:48:e6:fb:52:fa:bc:29:7d:48:49:6e:01:af:45:4c:
70:dc:30:2e:ad:f2:e7:d4:80:5b:5e:da:bb:d3:8f:0b:0c:4b:
88:fa:dc:01:6c:e5:fa:44:d2:10:4c:7c:b6:db:c9:90:22:24:
55:13:0b:79:85:d6:0e:38:08:72:34:97:4d:d0:bb:25:4a:83:
90:4c:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:14 2025 by rpki-client