Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/MSO44BRzs6PMXdi92EcDSqNBL1I.roa
File: MSO44BRzs6PMXdi92EcDSqNBL1I.roa (raw, json)
Hash identifier: o+us0MZ6WgOVNetuKoszzreqLiPesfF7jFoAsANl97M=
Subject key identifier: 31:23:B8:E0:14:73:B3:A3:CC:5D:D8:BD:D8:47:03:4A:A3:41:2F:52
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01828CE1C272775FDCB8D1C2821344E562CC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/MSO44BRzs6PMXdi92EcDSqNBL1I.roa
Signing time: Thu 11 Aug 2022 12:29:41 +0000
ROA not before: Thu 11 Aug 2022 12:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.46.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:e1:c2:72:77:5f:dc:b8:d1:c2:82:13:44:e5:62:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 11 12:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3123b8e01473b3a3cc5dd8bdd847034aa3412f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:bd:d6:cd:8e:6f:8c:8c:15:59:47:a5:38:
6f:a7:9c:ff:91:9c:db:d0:5a:bc:02:77:4e:5a:67:
5d:aa:dd:d0:93:77:84:a9:2f:50:a1:97:bc:c1:bd:
13:b5:ff:e2:46:cd:1e:6e:35:e3:fd:de:da:7d:38:
a3:ba:e2:60:fa:97:21:5e:4b:d2:23:5e:8e:3f:c9:
60:67:03:e8:e7:8b:39:f3:5e:50:22:fa:1a:a1:ca:
c1:de:d5:46:98:d2:08:59:37:4b:7f:cd:a6:1c:06:
c9:48:0b:99:14:2b:99:06:f1:8a:31:86:af:cc:f3:
4d:56:b1:8c:b1:49:91:bc:78:c7:10:2a:16:7a:86:
97:12:ab:30:11:32:64:13:41:44:16:86:1e:05:6b:
b4:62:5b:1c:5b:92:54:c7:8e:4c:61:a0:98:23:f2:
98:2d:4e:e4:87:21:9d:db:e6:12:ac:06:6a:a2:d5:
6d:3f:5e:8f:6c:2d:c3:55:64:0e:1d:b5:49:f9:70:
65:ec:12:5d:48:61:b4:ec:ad:30:8d:94:8a:3d:ca:
04:28:16:40:d7:bd:13:0a:de:00:e2:71:75:e0:71:
77:7a:16:80:72:42:a5:bb:aa:84:ef:d0:69:40:83:
29:94:68:f1:e4:95:bc:7e:9f:19:4b:56:e4:04:6a:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:23:B8:E0:14:73:B3:A3:CC:5D:D8:BD:D8:47:03:4A:A3:41:2F:52
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/MSO44BRzs6PMXdi92EcDSqNBL1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.11.0/24
Signature Algorithm: sha256WithRSAEncryption
21:17:3c:52:44:80:a8:93:2b:a7:bc:56:05:70:69:9f:ae:29:
68:8f:1c:ea:34:93:ec:9c:82:fe:b4:ed:86:82:85:d0:1a:f4:
23:44:70:9e:79:00:e0:9d:1c:0a:18:7e:fc:34:0d:1c:35:e3:
22:02:94:1a:f7:05:bb:01:36:16:af:be:19:ff:57:de:7d:a9:
3e:39:27:48:07:fc:f2:2c:32:9a:28:a0:ae:d2:24:4a:70:64:
e5:28:8c:51:b5:33:78:43:d7:aa:ba:d7:de:7d:9b:3a:de:3c:
82:e7:b2:0c:49:c7:a6:65:4e:a0:c6:ef:85:ad:f4:03:47:28:
f8:21:e3:42:d2:06:d7:44:1a:56:8b:d7:fa:74:69:54:4e:4f:
76:1e:7b:81:d6:70:38:ac:2c:8d:63:fb:9d:a1:99:32:ed:4e:
79:0e:33:fe:d2:0f:a4:44:b5:14:ba:93:bb:f0:08:44:7f:bc:
60:c1:a0:2a:a6:8c:e0:17:c6:72:a3:23:36:69:25:6b:11:ac:
6a:3b:8a:48:76:ab:ca:64:2b:14:e1:f3:01:24:79:18:d1:f0:
59:77:49:2a:9a:04:3e:6e:9d:8d:5d:04:f0:36:89:9b:67:7b:
54:88:ae:b6:89:93:87:aa:c2:68:0c:16:96:47:fa:00:fc:24:
6a:28:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org