Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/MnaNqtCNQw158V6lz-1FcvniT3M.roa
File: MnaNqtCNQw158V6lz-1FcvniT3M.roa (raw, json)
Hash identifier: krslqMe81YPGvBw6kf6CkW293/mePjxGqBX0NVvxRf4=
Subject key identifier: 32:76:8D:AA:D0:8D:43:0D:79:F1:5E:A5:CF:ED:45:72:F9:E2:4F:73
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 049F0CE3
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/MnaNqtCNQw158V6lz-1FcvniT3M.roa
Signing time: Sat 01 Jan 2022 10:04:16 +0000
ROA not before: Sat 01 Jan 2022 10:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 193.163.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77532387 (0x49f0ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jan 1 10:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32768daad08d430d79f15ea5cfed4572f9e24f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:ae:74:1f:e6:9e:85:20:b5:12:bf:73:8b:
7f:71:cc:17:14:38:46:27:08:c3:71:f9:59:f0:54:
8c:8b:6b:cc:e1:b9:4f:ce:74:6b:50:fa:11:49:54:
29:dc:10:da:04:10:72:1d:c0:d4:9b:06:39:30:f3:
1a:4f:45:02:11:7e:c6:14:05:a7:2a:c5:1e:2a:f7:
cb:ae:bb:27:e5:a8:78:5a:2e:17:77:91:08:6f:65:
cd:a4:03:55:42:ab:50:7f:5c:02:be:91:0d:e8:ff:
0f:dc:e3:24:e9:3c:6e:95:0e:56:86:34:86:3e:12:
8c:ab:ae:9d:76:6d:b0:22:79:c4:e0:18:8f:f7:7c:
19:e9:30:18:f2:ba:62:27:a2:d9:f1:12:0c:a7:d1:
14:23:05:61:f9:24:45:17:46:9e:78:8b:64:0c:6b:
93:d0:a2:11:bf:28:96:02:39:fc:84:d6:78:a4:d4:
0e:51:23:45:aa:5c:61:c1:5b:3d:96:b9:e4:42:72:
cb:49:0e:e3:19:ac:ef:5e:c6:42:13:6f:37:07:a7:
4f:34:9b:98:10:87:42:0f:e4:79:2c:84:37:11:0a:
1e:1a:89:c0:9f:b7:65:7e:36:39:8a:da:77:a7:c4:
33:86:7a:8a:ba:8e:64:db:a8:3a:06:df:10:4d:38:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:8D:AA:D0:8D:43:0D:79:F1:5E:A5:CF:ED:45:72:F9:E2:4F:73
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/MnaNqtCNQw158V6lz-1FcvniT3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2a:58:b9:be:bb:0e:fd:61:2b:9c:6b:f5:33:2a:b2:51:59:
a6:ad:53:2e:0e:68:6a:eb:6a:18:17:0e:b4:17:91:61:fd:d9:
3e:bc:87:01:3a:2e:67:f8:0a:a8:c1:02:a1:93:57:01:ce:a3:
35:dd:7f:07:13:05:b2:84:73:d7:42:a0:ed:db:90:a1:7d:a6:
94:2c:52:87:56:07:85:c6:65:02:b1:f2:4a:4c:d0:4a:61:5f:
79:bb:53:8b:36:cd:2d:71:6b:d4:69:ae:38:2b:e1:d0:7f:b5:
2d:5b:61:e4:93:33:01:62:95:ec:e4:64:6d:52:5c:4e:15:b5:
8c:55:e4:50:5c:e8:af:97:23:5f:09:66:28:13:51:f4:47:92:
37:14:76:5b:36:c2:c8:ca:63:c8:2a:a2:0b:cd:c1:11:e8:15:
bc:2d:12:34:3a:aa:72:af:b1:a8:37:d9:8c:d8:61:f6:b9:c2:
a6:2f:25:cb:13:4c:70:64:cd:2c:6e:b7:42:e6:a9:63:dd:0f:
e2:36:12:6f:0b:d6:95:45:c3:ea:de:37:cf:f0:77:89:03:cd:
71:79:3a:8c:9d:d8:72:87:de:1c:ce:35:28:e6:ca:cc:66:b9:
ca:8d:8f:cf:f3:1c:97:d2:72:f1:b4:0e:8f:17:51:13:aa:86:
28:3c:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-fra.rpki-client.org