Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/mXvFAsxmZ2w3Fryz_ddsKmxYqZM.roa
File: mXvFAsxmZ2w3Fryz_ddsKmxYqZM.roa (raw, json)
Hash identifier: 30Cg9jFzCrwwtb6oIJZ1yGnjV5mkXtsiKCpvrDHzqWM=
Subject key identifier: 99:7B:C5:02:CC:66:67:6C:37:16:BC:B3:FD:D7:6C:2A:6C:58:A9:93
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 332379D5
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/mXvFAsxmZ2w3Fryz_ddsKmxYqZM.roa
Signing time: Sat 01 Jan 2022 10:59:08 +0000
ROA not before: Sat 01 Jan 2022 10:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49090
IP address blocks: 82.144.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857962965 (0x332379d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=997bc502cc66676c3716bcb3fdd76c2a6c58a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:44:30:b7:93:53:31:2d:3d:03:04:5f:04:
cd:46:c3:9d:33:82:7d:95:39:10:e4:dc:da:52:e2:
d4:14:58:c2:0e:62:28:e1:f2:28:e4:40:db:b9:ce:
d0:6b:40:8d:d2:80:d6:45:cf:2d:95:69:83:8b:52:
b9:36:7e:3a:df:ec:69:f1:88:5d:d4:9e:c2:e6:8a:
9a:f2:a4:c2:ea:d1:b2:a3:56:46:63:08:0a:77:43:
75:2f:f6:e8:05:00:fa:4d:03:dd:97:87:46:85:ff:
3b:75:88:da:20:f9:89:a1:db:ca:d7:47:c5:2e:a4:
b8:04:e0:5e:49:bb:0a:39:dc:69:22:24:41:60:21:
27:10:9c:bd:30:d6:92:bd:80:06:21:07:95:b7:47:
6c:94:7f:7b:ee:09:d8:5e:30:81:10:ba:e6:e3:2c:
5e:97:64:c9:9d:41:ba:a8:40:9e:42:89:7d:21:92:
f6:01:3f:cb:e5:0b:be:c6:b3:a0:63:e5:52:cd:9f:
d9:32:db:0b:17:be:cc:d5:32:79:23:a1:a1:24:a4:
a5:bc:ae:ad:83:47:aa:8f:3c:cd:4f:2f:c9:ec:37:
cb:c7:6e:aa:b7:43:70:f3:73:65:6e:12:5f:a8:b1:
57:e4:c8:37:0c:11:c1:ac:4c:35:93:ae:8c:17:8d:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7B:C5:02:CC:66:67:6C:37:16:BC:B3:FD:D7:6C:2A:6C:58:A9:93
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/mXvFAsxmZ2w3Fryz_ddsKmxYqZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fc:d2:3b:75:02:a1:0b:2f:ee:1d:f8:a3:62:b8:a1:ee:fc:
49:70:2b:4b:08:fa:db:e0:17:f2:77:64:84:f2:70:bf:ea:c7:
af:7a:a8:1e:d8:0b:24:0d:4e:e0:d1:48:6e:45:39:0c:5e:af:
ef:c2:3b:9b:e2:af:1c:05:2d:4c:41:de:79:41:78:f7:c1:1e:
11:21:31:53:74:82:f1:37:0f:aa:69:19:88:b2:66:4c:20:ae:
d6:b2:72:53:5a:06:2c:a6:f5:ea:bd:6b:95:8b:44:4d:c5:69:
3e:8f:31:56:27:ba:aa:7c:30:ed:24:5b:05:10:40:b4:f7:e7:
13:03:10:9a:0f:35:be:0e:9a:3c:c3:04:54:99:74:1e:b9:ba:
8d:24:36:90:f5:48:5d:ff:ae:02:9e:55:33:c6:73:90:74:77:
54:37:4e:39:4e:3c:a9:96:3c:92:95:33:47:de:7d:d0:9a:a2:
e4:fc:11:60:ee:8c:30:8b:9a:b9:7e:14:14:3d:5c:31:c9:85:
8a:a6:28:2d:fe:29:14:95:ea:c0:d6:f9:83:22:4e:1b:11:0c:
03:cc:ae:26:25:5c:74:a4:7b:2a:9d:3a:af:5b:fe:df:7b:fc:
b4:fa:08:53:b4:d1:61:12:2f:97:18:c0:2c:43:1a:17:19:50:
3e:32:51:0c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMyN51TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MB4XDTIyMDEw
MTEwNTkwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTk3YmM1MDJjYzY2
Njc2YzM3MTZiY2IzZmRkNzZjMmE2YzU4YTk5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMp/RDC3k1MxLT0DBF8EzUbDnTOCfZU5EOTc2lLi1BRYwg5i
KOHyKORA27nO0GtAjdKA1kXPLZVpg4tSuTZ+Ot/safGIXdSewuaKmvKkwurRsqNW
RmMICndDdS/26AUA+k0D3ZeHRoX/O3WI2iD5iaHbytdHxS6kuATgXkm7CjncaSIk
QWAhJxCcvTDWkr2ABiEHlbdHbJR/e+4J2F4wgRC65uMsXpdkyZ1BuqhAnkKJfSGS
9gE/y+ULvsazoGPlUs2f2TLbCxe+zNUyeSOhoSSkpbyurYNHqo88zU8vyew3y8du
qrdDcPNzZW4SX6ixV+TINwwRwaxMNZOujBeNGZsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSZe8UCzGZnbDcWvLP912wqbFipkzAfBgNVHSMEGDAWgBS/sJejbCMl0QMf
9AkboAqGRZ1CiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y3Q1hvMndqSmRFREhfUUpHNkFLaGtXZFFvZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8x
L21YdkZBc3htWjJ3M0ZyeXpfZGRzS214WXFaTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRF
REhfUUpHNkFLaGtXZFFvZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFKQuDANBgkqhkiG9w0BAQsFAAOC
AQEAnfzSO3UCoQsv7h34o2K4oe78SXArSwj62+AX8ndkhPJwv+rHr3qoHtgLJA1O
4NFIbkU5DF6v78I7m+KvHAUtTEHeeUF498EeESExU3SC8TcPqmkZiLJmTCCu1rJy
U1oGLKb16r1rlYtETcVpPo8xVie6qnww7SRbBRBAtPfnEwMQmg81vg6aPMMEVJl0
Hrm6jSQ2kPVIXf+uAp5VM8ZzkHR3VDdOOU48qZY8kpUzR9590Jqi5PwRYO6MMIua
uX4UFD1cMcmFiqYoLf4pFJXqwNb5gyJOGxEMA8yuJiVcdKR7Kp06r1v+33v8tPoI
U7TRYRIvlxjALEMaFxlQPjJRDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org