Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/MgC7WQzrog9RQb5rrJQstDMb3QM.roa
File: MgC7WQzrog9RQb5rrJQstDMb3QM.roa (raw, json)
Hash identifier: MvGsIa54Lp1nMFB5/xuAk2Wjqz46sKuNRhEYbDqisZY=
Subject key identifier: 32:00:BB:59:0C:EB:A2:0F:51:41:BE:6B:AC:94:2C:B4:33:1B:DD:03
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 07CBA637
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/MgC7WQzrog9RQb5rrJQstDMb3QM.roa
Signing time: Wed 08 Jun 2022 18:14:05 +0000
ROA not before: Wed 08 Jun 2022 18:14:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 176.119.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130786871 (0x7cba637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jun 8 18:14:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3200bb590ceba20f5141be6bac942cb4331bdd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:3e:2c:55:de:11:33:55:81:cd:f9:8a:5f:
6e:10:33:13:fc:b9:1b:a4:6e:13:e6:06:44:73:9b:
af:75:5d:49:66:23:2a:73:14:82:20:a9:a7:31:9a:
e2:e0:55:9a:1b:ca:8f:24:3f:58:80:3b:39:98:77:
59:29:33:f1:39:57:8d:c8:6e:fc:3a:f8:a7:a2:bc:
a4:d0:99:a8:81:b1:e6:63:16:83:32:d6:64:43:00:
11:81:f9:e4:38:ed:ea:7f:3b:56:3a:fb:6b:e0:59:
49:47:75:3d:f7:fb:ec:30:8b:20:73:27:90:58:f5:
76:e4:0b:29:0c:f8:03:b4:62:59:99:5d:fc:4b:27:
36:de:0e:b6:5f:fc:d2:7d:0e:20:b8:7f:4f:99:13:
22:99:e1:ac:c1:75:97:85:54:ca:7d:e6:5e:92:fc:
c6:65:2c:d4:9d:cc:1c:ba:ec:8c:09:65:cd:b6:08:
1c:6a:a1:38:36:2b:ac:66:db:4c:44:ab:81:f1:91:
ad:a7:c4:e4:cb:80:73:4e:f1:0e:7d:2f:d1:95:28:
7e:43:04:f8:35:5a:d1:61:3c:44:23:34:0b:31:d6:
92:08:1c:c1:61:f1:7e:04:cc:78:19:04:03:8d:63:
27:86:40:68:68:f3:f9:61:80:18:71:d6:7a:00:0a:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:BB:59:0C:EB:A2:0F:51:41:BE:6B:AC:94:2C:B4:33:1B:DD:03
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/MgC7WQzrog9RQb5rrJQstDMb3QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ce:fe:bd:80:5a:8d:01:ae:d4:aa:11:88:42:73:ea:4c:65:
ae:c2:96:4f:1b:c4:35:65:a1:91:8e:96:d4:d2:c3:ba:dc:5f:
d5:c4:50:6e:c5:86:a1:81:3c:ab:ff:09:4d:2a:f5:14:70:34:
5b:f5:39:59:fd:d8:d4:5b:50:ed:a2:c6:f5:ef:5b:04:d1:80:
2a:a3:da:4f:4e:89:05:e2:a2:2b:81:70:b5:04:2e:37:7e:fa:
48:4b:99:b0:5e:2d:82:53:b6:ee:e5:27:b9:8e:b4:13:d3:bd:
2c:c8:cb:b7:aa:ea:9e:7d:23:88:a5:65:b2:e8:80:12:ab:ed:
4d:eb:84:78:eb:99:49:a4:32:cd:01:b6:8e:01:e9:24:39:3d:
17:27:0d:e7:d7:5c:f5:61:16:61:03:f1:87:98:66:dd:be:ec:
ea:cf:c6:2c:c4:f4:bc:d1:97:f4:35:27:c7:fc:b7:84:73:fd:
c9:47:2b:3b:8d:4a:9f:18:2a:18:97:8d:13:38:51:db:6a:41:
62:57:88:2b:83:56:91:8e:26:b8:51:83:4f:26:26:04:93:32:
9f:d6:33:2c:94:f5:7b:d7:22:1c:22:bb:37:0c:ff:89:c3:a3:
3a:51:b8:66:7a:ee:bc:61:d7:ba:80:ef:fb:02:3c:0e:37:72:
c0:77:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:15 2023 by rpki-client on console-fra.rpki-client.org