Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/mbjPZipzssFgY7gUOvrhIZyn674.roa
File: mbjPZipzssFgY7gUOvrhIZyn674.roa (raw, json)
Hash identifier: i8VTf1wx+msVrgE3Nu68Jnrq0OZFdYaPUrtxjabqSfo=
Subject key identifier: 99:B8:CF:66:2A:73:B2:C1:60:63:B8:14:3A:FA:E1:21:9C:A7:EB:BE
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 353455
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/mbjPZipzssFgY7gUOvrhIZyn674.roa
Signing time: Tue 31 May 2022 09:28:09 +0000
ROA not before: Tue 31 May 2022 09:28:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 193.91.1.0/24 maxlen: 24
193.91.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3486805 (0x353455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: May 31 09:28:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99b8cf662a73b2c16063b8143afae1219ca7ebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:fd:9a:e9:5e:8d:66:94:96:50:5a:50:89:
ce:f9:74:b7:31:f2:ab:d7:ca:93:1b:ad:9f:fe:83:
77:60:ec:15:89:49:db:28:c7:25:9b:e5:9e:48:2d:
b6:3e:5b:7e:9c:46:11:46:ac:fe:a6:8f:2f:e0:c2:
04:ba:f7:1b:a1:0a:42:ab:83:9a:f9:0a:f8:16:fd:
0c:d8:f9:92:18:85:d0:92:d8:e2:da:eb:61:b4:5e:
a6:26:c4:b6:3e:b7:70:a5:22:f1:32:ad:0f:4b:cf:
44:77:96:a9:94:bc:d6:ae:cf:1e:c6:89:12:dc:4c:
a9:a6:aa:b2:46:17:6e:7c:1f:7d:4c:aa:8b:86:68:
ad:10:65:a7:e4:00:04:fb:64:bf:e9:07:a1:bf:74:
4a:42:19:f5:16:5a:f6:5d:37:9a:f1:fa:4b:78:0a:
b0:87:20:75:2e:27:91:c8:47:5a:48:f9:b8:40:ec:
21:a7:11:bc:61:48:e5:ca:6f:81:7b:e5:f4:62:aa:
19:f7:89:0d:8f:33:2b:69:d4:af:ba:ee:02:9a:8d:
b3:fc:6f:31:78:f3:cb:0c:cd:f5:bf:3d:f2:eb:e5:
f6:65:b6:9a:d2:71:53:4b:0d:0e:cf:42:10:f6:71:
49:8c:d8:df:a7:f4:af:50:f0:5a:e8:de:35:f4:4b:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:CF:66:2A:73:B2:C1:60:63:B8:14:3A:FA:E1:21:9C:A7:EB:BE
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/mbjPZipzssFgY7gUOvrhIZyn674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.91.1.0/24
193.91.6.0/23
Signature Algorithm: sha256WithRSAEncryption
57:45:15:65:5f:cd:49:62:d1:ea:6b:6f:e4:70:3b:15:28:1f:
97:46:64:5d:2c:87:23:49:97:f7:32:3c:88:c8:c4:ea:8a:d8:
0e:be:da:ca:ef:08:f7:57:ff:a8:c9:83:ba:d7:2b:f1:97:22:
9c:22:b4:d1:36:60:b6:ef:4a:96:28:dd:a9:94:cf:01:0a:f8:
fd:16:8a:b5:6b:54:a8:42:0f:db:1d:41:20:1a:be:2a:07:0c:
b3:bf:8e:a7:cc:83:c5:89:a9:e6:82:fe:3f:59:da:8c:09:18:
32:5c:f5:ea:71:12:64:ba:b7:2c:1c:ca:46:c2:62:ae:57:71:
e2:d8:29:0b:9c:b8:13:1f:92:c0:59:de:bd:50:4c:dc:ad:c9:
6d:29:36:4d:09:8e:69:ac:a2:a8:90:a8:fe:d7:fc:8b:a6:a6:
4a:60:1b:af:54:17:65:26:59:35:3a:11:8d:50:40:4a:0e:ed:
a3:34:90:64:24:ce:22:66:c5:41:2b:78:27:eb:11:7a:b9:64:
4a:b7:65:37:68:46:c5:47:80:04:7c:fc:0e:9a:eb:c5:2e:4d:
1e:51:9d:18:ac:75:e4:d3:18:77:9d:08:70:1c:93:f1:34:60:
22:ed:23:e0:84:8f:5e:d2:9b:a0:ff:d6:aa:c7:91:ba:ef:3e:
ee:52:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:01 2023 by rpki-client on console-fra.rpki-client.org