Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/MXBhAZkJInhP9fRjdEURGfTzgmA.roa
File: MXBhAZkJInhP9fRjdEURGfTzgmA.roa (raw, json)
Hash identifier: DX9EazQJaXffHcw785AhRy5mSamRI70aH2LwoCrKIzM=
Subject key identifier: 31:70:61:01:99:09:22:78:4F:F5:F4:63:74:45:11:19:F4:F3:82:60
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0AF877E0
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/MXBhAZkJInhP9fRjdEURGfTzgmA.roa
Signing time: Sat 01 Jan 2022 13:02:44 +0000
ROA not before: Sat 01 Jan 2022 13:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15640
IP address blocks: 213.87.42.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184055776 (0xaf877e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 13:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31706101990922784ff5f46374451119f4f38260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:c6:73:94:38:3a:f4:4b:f8:2c:86:1f:66:
be:08:50:47:1f:a7:5a:21:5f:49:4b:2f:46:29:7b:
d7:ea:b8:99:c2:ec:80:55:b4:62:89:e7:e8:13:e9:
00:49:93:f4:9e:5e:bd:34:1a:8a:2b:e7:ac:ae:cc:
dd:38:9f:b2:f7:4c:78:c3:f6:19:57:d6:fb:dd:76:
72:13:1d:b4:89:76:5c:4c:af:fc:47:ac:27:21:49:
d6:82:3d:56:01:e4:40:49:98:b5:bd:38:fb:47:68:
87:86:59:5c:40:ac:d5:82:c7:3f:cc:d5:b6:30:8c:
fd:c8:aa:cc:e4:a5:5e:45:67:ee:07:fd:2e:45:00:
c3:eb:8d:f7:d8:16:3c:6a:e3:12:c0:99:85:1a:ba:
d2:6b:b2:61:fc:22:5f:28:76:13:b5:c6:9a:1e:8e:
f8:ae:ea:7a:a3:05:5e:19:22:1d:d2:73:da:c9:3c:
18:73:cb:f3:fa:0d:ec:85:f0:fc:a7:6f:6f:b1:5c:
3b:f1:5c:5b:36:af:5f:ba:4a:a5:23:bd:dd:ea:3a:
ca:0b:1e:9a:78:ac:61:40:d0:0c:b1:01:7b:c3:54:
28:b5:77:31:3a:f2:6b:8e:a8:8d:9f:63:5f:3d:4b:
d9:dc:7c:40:a3:1a:e4:69:1d:34:2f:3d:d7:d3:a2:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:61:01:99:09:22:78:4F:F5:F4:63:74:45:11:19:F4:F3:82:60
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/MXBhAZkJInhP9fRjdEURGfTzgmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.42.0/23
Signature Algorithm: sha256WithRSAEncryption
69:7f:50:91:31:73:b3:cb:a8:f3:9f:12:42:f3:7f:a0:25:4b:
78:3d:65:72:4c:0d:f8:a0:61:3b:0c:0e:6f:73:b8:c8:34:eb:
f0:94:b8:c3:9c:d5:6a:a6:88:81:99:2f:81:05:6d:96:95:82:
29:31:cc:8a:db:7a:a3:c8:73:f5:e2:48:45:a0:b6:74:cf:d0:
2c:e4:3f:ac:d9:c8:ec:76:b4:36:b2:0d:46:17:98:16:96:49:
98:78:7e:21:ea:6c:22:10:3c:a3:8b:f0:52:6c:52:80:5c:db:
65:47:d2:d4:14:06:36:5e:d0:ab:a0:dd:46:5e:6a:bd:7f:a6:
09:26:e7:3b:b5:73:5b:09:29:57:f0:6d:45:e4:04:5d:41:85:
13:43:cb:b1:05:c6:86:b7:5b:96:dc:bd:b8:da:fd:56:d7:85:
c1:cb:d8:4b:26:3e:43:5e:75:65:14:8f:a1:f5:58:3c:dd:45:
70:d8:5c:7c:96:59:a2:11:3e:78:de:02:62:33:70:21:0e:fd:
9d:81:6d:12:4a:47:b0:d1:af:09:0c:4f:4c:23:47:35:a7:ae:
9b:8e:24:b6:df:0d:37:82:dc:49:4b:fa:ab:9f:f2:8c:7a:28:
ec:da:5c:68:b9:2c:af:6a:75:00:69:f5:44:f6:fd:89:55:42:
09:19:d3:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECvh34DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZWZlMWM4NTk0MDlhYzVkZTc0MTRjNDhmODY3Mzk5MTNiZTZiN2U1MB4XDTIyMDEw
MTEzMDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzE3MDYxMDE5OTA5
MjI3ODRmZjVmNDYzNzQ0NTExMTlmNGYzODI2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALU+xnOUODr0S/gshh9mvghQRx+nWiFfSUsvRil71+q4mcLs
gFW0Yonn6BPpAEmT9J5evTQaiivnrK7M3TifsvdMeMP2GVfW+912chMdtIl2XEyv
/EesJyFJ1oI9VgHkQEmYtb04+0doh4ZZXECs1YLHP8zVtjCM/ciqzOSlXkVn7gf9
LkUAw+uN99gWPGrjEsCZhRq60muyYfwiXyh2E7XGmh6O+K7qeqMFXhkiHdJz2sk8
GHPL8/oN7IXw/Kdvb7FcO/FcWzavX7pKpSO93eo6ygsemnisYUDQDLEBe8NUKLV3
MTrya46ojZ9jXz1L2dx8QKMa5GkdNC8919OiDh0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQxcGEBmQkieE/19GN0RREZ9POCYDAfBgNVHSMEGDAWgBSu/hyFlAmsXedB
TEj4ZzmRO+a35TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3J2NGNoWlFKckYzblFVeEktR2M1a1R2bXQtVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvNDUxZjA0LWUzYzktNDRlYS1hNmExLTQyODQ1ODY3OWNlNC8x
L01YQmhBWmtKSW5oUDlmUmpkRVVSR2ZUemdtQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
NDUxZjA0LWUzYzktNDRlYS1hNmExLTQyODQ1ODY3OWNlNC8xL3J2NGNoWlFKckYz
blFVeEktR2M1a1R2bXQtVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdVXKjANBgkqhkiG9w0BAQsFAAOC
AQEAaX9QkTFzs8uo858SQvN/oCVLeD1lckwN+KBhOwwOb3O4yDTr8JS4w5zVaqaI
gZkvgQVtlpWCKTHMitt6o8hz9eJIRaC2dM/QLOQ/rNnI7Ha0NrINRheYFpZJmHh+
IepsIhA8o4vwUmxSgFzbZUfS1BQGNl7Qq6DdRl5qvX+mCSbnO7VzWwkpV/BtReQE
XUGFE0PLsQXGhrdblty9uNr9VteFwcvYSyY+Q151ZRSPofVYPN1FcNhcfJZZohE+
eN4CYjNwIQ79nYFtEkpHsNGvCQxPTCNHNaeum44ktt8NN4LcSUv6q5/yjHoo7Npc
aLksr2p1AGn1RPb9iVVCCRnTtA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org