Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mzntl9UTYmqjqRYCRkHtgGiwSzA.roa
File: mzntl9UTYmqjqRYCRkHtgGiwSzA.roa (raw, json)
Hash identifier: Sd8wAbr6B1lHEzONef1LMDVxiWWtl6CgDBVIFRY6CFs=
Subject key identifier: 9B:39:ED:97:D5:13:62:6A:A3:A9:16:02:46:41:ED:80:68:B0:4B:30
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1551CCDD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mzntl9UTYmqjqRYCRkHtgGiwSzA.roa
Signing time: Tue 07 Jun 2022 15:51:03 +0000
ROA not before: Tue 07 Jun 2022 15:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35346
IP address blocks: 91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 24
91.242.112.0/21 maxlen: 24
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
45.67.116.0/24 maxlen: 24
91.242.64.0/18 maxlen: 24
2a07:5540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357682397 (0x1551ccdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 7 15:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b39ed97d513626aa3a916024641ed8068b04b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:aa:7c:ff:4b:b0:5a:cb:05:f4:57:1a:e0:
45:0d:33:95:62:67:cd:1b:84:71:55:6e:e0:ef:76:
1b:41:65:99:96:28:43:b6:22:bd:d6:15:83:fe:32:
84:6a:59:6b:2a:aa:20:98:2d:32:5a:d2:a8:26:2a:
12:a3:d6:63:8a:01:5f:32:4c:5c:03:e9:69:c4:13:
4c:c2:f6:43:43:5b:73:75:ea:33:c0:19:af:81:6e:
8c:f2:50:99:07:23:77:cd:9c:18:77:96:26:59:7a:
01:8e:a2:9e:d2:8b:a2:e9:92:bb:51:8f:07:1d:00:
8d:20:00:60:65:0c:57:80:88:89:db:4e:5f:71:a6:
a9:23:03:9d:9e:4d:bc:25:e6:a1:4c:90:3c:d8:98:
0f:77:88:b3:2d:2d:b0:70:fc:20:d2:86:d0:df:30:
a6:c2:22:61:5c:87:de:a5:00:ff:2f:6a:8d:c5:e6:
0d:3a:b8:89:0d:e1:68:60:40:70:5a:e0:64:80:3f:
de:8d:28:74:4a:9c:c1:ba:15:cb:ee:f3:8d:ce:26:
88:1e:64:09:aa:90:73:4f:75:fa:90:5c:07:cf:38:
1d:25:89:ee:32:da:e9:20:0b:fd:e8:d8:eb:23:27:
07:71:39:6b:5f:bc:ec:4c:f8:55:10:a1:fc:1e:34:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:ED:97:D5:13:62:6A:A3:A9:16:02:46:41:ED:80:68:B0:4B:30
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mzntl9UTYmqjqRYCRkHtgGiwSzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
91.242.64.0/18
194.114.144.0/24
IPv6:
2a07:5540::/29
Signature Algorithm: sha256WithRSAEncryption
3b:4f:20:f4:58:81:b5:15:85:c0:bd:f0:f0:6a:a3:d7:ff:63:
ad:cd:f1:d5:b2:df:a5:7a:8b:c2:ec:85:a0:14:4f:3a:c6:1f:
ac:8f:8d:a1:4d:3a:07:b0:7d:c9:fd:7a:c3:6f:02:57:38:54:
94:0f:53:6b:0c:04:3b:02:12:24:c2:f9:cc:df:ca:f8:d9:fa:
d7:fc:7a:3b:47:08:d8:5e:37:1e:9a:e5:ee:e8:3e:36:e2:b0:
03:e8:51:88:8d:1f:98:26:a2:2f:b8:3f:0b:0f:1b:ab:43:c9:
5d:4a:c5:3e:0f:4d:68:62:79:91:cf:ec:7a:82:87:8a:5c:73:
a8:37:1f:97:0e:71:66:52:cc:cd:29:5f:03:15:f2:21:1d:b6:
41:ad:82:83:2b:af:a6:76:cc:0d:77:0a:4f:b3:cf:f1:e4:a7:
56:18:c5:e7:89:a1:07:6a:0a:a5:92:ef:61:3d:79:e2:ff:f8:
97:bc:f7:17:7c:83:f6:9b:22:48:ef:fc:06:f3:db:da:70:9c:
fc:53:60:96:49:64:98:51:e2:c7:ea:ba:55:17:f6:a9:d0:3d:
3e:13:a1:75:f3:e3:89:f4:30:7d:e3:71:79:03:36:c8:07:c9:
37:70:5d:d8:6e:78:f7:8d:51:ba:0e:e0:e1:22:de:2c:5c:b2:
b1:c6:c9:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org