Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/mBDZwN5jFcpYMoUXVbVh3kZuTfU.roa
File: mBDZwN5jFcpYMoUXVbVh3kZuTfU.roa (raw, json)
Hash identifier: HIV7yd2IMZNPfxwjv4CQuceWp9R/2rQJbiQsUzL6bHQ=
Subject key identifier: 98:10:D9:C0:DE:63:15:CA:58:32:85:17:55:B5:61:DE:46:6E:4D:F5
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0182FE470274B3654320C943DB39F7FCA45D
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/mBDZwN5jFcpYMoUXVbVh3kZuTfU.roa
Signing time: Fri 02 Sep 2022 12:57:22 +0000
ROA not before: Fri 02 Sep 2022 12:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203153
IP address blocks: 212.73.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:47:02:74:b3:65:43:20:c9:43:db:39:f7:fc:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Sep 2 12:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9810d9c0de6315ca5832851755b561de466e4df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:7a:79:a4:01:3f:f8:55:92:d6:2b:32:f4:
52:5e:f7:be:a6:7b:8d:f9:68:11:a9:1a:ab:bd:36:
37:89:23:fc:f3:f4:d2:73:4a:35:40:10:3e:c2:54:
b3:57:c8:42:ad:53:70:0c:78:5c:bf:04:04:5c:ac:
9e:4b:2b:eb:d4:32:ee:be:c7:f2:22:6f:41:18:27:
ce:aa:52:8b:90:ef:2e:fd:83:06:fa:88:5f:4b:aa:
cb:ab:8a:cb:62:cf:3c:3c:57:3f:77:2b:e6:39:a6:
52:7e:80:b5:57:d4:f1:5e:b4:54:47:87:fd:b5:9d:
44:7c:8b:20:98:43:bf:94:b7:88:64:0f:eb:f4:2c:
15:df:15:5c:d8:05:2f:cf:1d:37:2c:48:70:70:86:
7c:95:02:84:a1:94:54:c9:c4:33:f9:fa:23:d9:15:
c2:42:f3:94:2b:de:24:94:2e:d2:34:f8:ce:64:e9:
a9:fc:fd:e2:08:66:33:f5:f8:f6:73:ab:ba:82:11:
fe:8d:b5:61:0e:23:d6:a2:44:6f:6a:6f:3f:9d:ef:
5e:b0:86:35:8f:30:cf:c5:93:9b:04:f6:67:dc:f2:
a7:5a:25:de:5f:eb:49:f6:af:f2:06:9e:83:10:bd:
71:1b:47:cb:57:ee:4e:f0:17:c6:1b:3f:21:ea:0b:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:D9:C0:DE:63:15:CA:58:32:85:17:55:B5:61:DE:46:6E:4D:F5
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/mBDZwN5jFcpYMoUXVbVh3kZuTfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.73.154.0/24
Signature Algorithm: sha256WithRSAEncryption
75:40:80:20:cc:ed:f4:18:2e:20:73:df:df:39:11:c2:f6:97:
92:22:08:60:39:c0:2c:e9:d1:92:3b:7c:47:37:a5:7a:14:63:
01:31:57:87:19:78:fc:de:ea:57:02:8f:ee:56:41:7f:30:51:
3b:c6:f2:ad:dc:89:52:56:e1:62:53:5e:4d:72:8d:ad:2f:9b:
a9:46:02:be:6c:44:8b:87:0f:4b:9f:6e:45:1b:71:d2:0e:d7:
00:7c:37:cc:8e:7e:0a:10:1b:09:4f:46:62:13:d5:b9:76:af:
f0:3d:2b:17:00:ed:35:5a:2d:1f:c1:38:19:b1:61:c6:21:ab:
1c:cf:44:28:cd:7f:0d:2b:fa:33:c8:21:3f:95:4e:77:fc:f6:
bc:00:d4:ce:f0:d7:ee:5f:6a:23:e6:56:16:41:01:52:43:c0:
28:a6:9e:c7:1f:b5:de:0d:c1:d1:ca:ec:a2:ba:38:6e:11:fa:
bf:fd:b8:fc:86:50:f1:df:f1:c4:35:d8:f8:c3:a6:25:0d:c5:
47:e2:5b:ca:ef:b8:b2:d5:4a:b2:4d:e4:5d:6e:f6:e5:bc:c5:
44:04:96:a4:c1:bd:86:3b:66:9b:8b:f8:b2:4e:2e:c1:71:e4:
42:e2:0f:db:e0:26:64:d1:8d:92:6a:97:60:30:75:75:0d:98:
94:58:a2:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL+RwJ0s2VDIMlD2zn3/KRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1
OTUxMmMwHhcNMjIwOTAyMTI1NzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODEwZDljMGRlNjMxNWNhNTgzMjg1MTc1NWI1NjFkZTQ2NmU0ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRJ6eaQBP/hVktYrMvRSXve+pnuN
+WgRqRqrvTY3iSP88/TSc0o1QBA+wlSzV8hCrVNwDHhcvwQEXKyeSyvr1DLuvsfy
Im9BGCfOqlKLkO8u/YMG+ohfS6rLq4rLYs88PFc/dyvmOaZSfoC1V9TxXrRUR4f9
tZ1EfIsgmEO/lLeIZA/r9CwV3xVc2AUvzx03LEhwcIZ8lQKEoZRUycQz+foj2RXC
QvOUK94klC7SNPjOZOmp/P3iCGYz9fj2c6u6ghH+jbVhDiPWokRvam8/ne9esIY1
jzDPxZObBPZn3PKnWiXeX+tJ9q/yBp6DEL1xG0fLV+5O8BfGGz8h6gv49wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgQ2cDeYxXKWDKFF1W1Yd5Gbk31MB8GA1UdIwQY
MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct
NTIxMmRiOTc1NGY0LzEvbUJEWndONWpGY3BZTW9VWFZiVmgza1p1VGZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0
LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EmaMA0G
CSqGSIb3DQEBCwUAA4IBAQB1QIAgzO30GC4gc9/fORHC9peSIghgOcAs6dGSO3xH
N6V6FGMBMVeHGXj83upXAo/uVkF/MFE7xvKt3IlSVuFiU15Nco2tL5upRgK+bESL
hw9Ln25FG3HSDtcAfDfMjn4KEBsJT0ZiE9W5dq/wPSsXAO01Wi0fwTgZsWHGIasc
z0QozX8NK/ozyCE/lU53/Pa8ANTO8NfuX2oj5lYWQQFSQ8Aopp7HH7XeDcHRyuyi
ujhuEfq//bj8hlDx3/HENdj4w6YlDcVH4lvK77iy1UqyTeRdbvblvMVEBJakwb2G
O2abi/iyTi7BceRC4g/b4CZk0Y2SapdgMHV1DZiUWKKL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org