Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/MZxsYNuizWNN2LCws67Ql2qC1Kg.roa
File: MZxsYNuizWNN2LCws67Ql2qC1Kg.roa (raw, json)
Hash identifier: vHX995YC1djY0hSPXdUjPRZfgSrnhxVH7+/NI3zHtls=
Subject key identifier: 31:9C:6C:60:DB:A2:CD:63:4D:D8:B0:B0:B3:AE:D0:97:6A:82:D4:A8
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 0185734CDD5F20209F9924326971ED4C4BDB
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/MZxsYNuizWNN2LCws67Ql2qC1Kg.roa
Signing time: Mon 02 Jan 2023 16:24:55 +0000
ROA not before: Mon 02 Jan 2023 16:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196878
IP address blocks: 91.216.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:dd:5f:20:20:9f:99:24:32:69:71:ed:4c:4b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Jan 2 16:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=319c6c60dba2cd634dd8b0b0b3aed0976a82d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:e0:65:76:ab:26:44:98:c6:3f:b1:e1:d1:
06:25:a6:6e:d4:7a:90:fe:26:21:c7:0a:dd:11:f5:
1e:1a:c3:9c:15:e7:a0:87:e3:ec:44:46:2f:f3:61:
d6:50:3c:f4:6f:02:26:b0:26:72:98:80:a2:33:22:
4a:26:f8:ce:63:3d:18:23:9a:be:d7:ec:ec:db:fd:
db:5d:fb:3f:e6:4d:af:b8:85:4b:4a:d9:e7:89:cf:
0a:35:a0:b5:1c:87:7b:db:ab:51:79:c8:39:ed:33:
25:f5:58:e3:eb:b7:c3:65:42:d3:98:b4:d3:7a:61:
2d:3a:06:89:38:ad:8e:be:6c:e5:c3:a7:d2:26:6f:
15:62:6f:d2:ce:96:fc:ca:88:c8:5a:1d:14:88:c6:
e8:fc:42:7e:02:80:2c:94:12:d7:9d:82:5e:b8:07:
15:9f:f8:dd:45:33:de:c0:bb:af:ea:fc:cb:2f:83:
a9:ea:00:ff:11:3e:e7:c5:84:a3:ab:d8:04:b4:d5:
21:d0:2a:bd:9a:87:2a:6c:c2:77:a3:87:44:02:a6:
9d:6a:03:50:74:00:7c:6e:c5:60:a1:0a:f9:e6:91:
48:12:26:25:6c:2d:49:ca:e6:7b:02:dc:f7:8c:61:
bc:b6:cf:a2:a9:8f:3e:ce:21:0b:b7:17:46:f1:40:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:6C:60:DB:A2:CD:63:4D:D8:B0:B0:B3:AE:D0:97:6A:82:D4:A8
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/MZxsYNuizWNN2LCws67Ql2qC1Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:22:04:29:64:98:95:f0:61:18:66:0e:c1:42:a0:d2:43:b5:
9a:7f:40:68:1c:8c:60:cb:94:9b:9d:dd:bc:18:43:62:59:0f:
4d:0e:9d:f0:7a:d4:9e:3f:79:c0:b8:1a:75:ca:ec:2d:3e:da:
1d:cd:3d:75:98:44:dd:fe:95:8c:cf:64:fe:33:d9:c7:e4:08:
85:83:0c:7a:e8:38:e2:55:95:aa:cc:cc:4a:54:12:f2:97:95:
5b:41:bb:78:05:be:c1:82:c6:8a:a3:8a:63:47:89:ca:1e:14:
e7:50:ea:e3:0e:e6:ed:37:18:b8:7f:66:28:91:d6:ba:37:31:
be:11:da:bd:92:44:bd:66:5f:15:68:c2:b0:54:0b:7b:38:8e:
0d:70:7c:76:f4:7a:c0:b7:cb:cb:5f:32:9c:4b:ef:a1:8a:e8:
12:45:0e:4a:30:b8:98:19:29:b3:4a:1b:84:4d:21:0f:1d:7b:
c8:55:74:db:87:25:4f:10:17:34:64:4c:5c:a9:e1:6f:63:dd:
28:a0:cc:9c:e0:9b:bd:47:43:3e:1d:2e:ee:97:74:3b:15:87:
ab:06:ec:31:38:d1:7c:1d:f9:ee:39:57:7f:a7:b1:bb:2a:f6:
5f:bc:38:e8:b0:ed:a0:4f:c6:cb:61:bb:50:33:9f:06:83:3b:
5c:2f:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:43 2025 by rpki-client