Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/MOLzqwrbiz8jF6AjosxbmNUaoLw.roa
File: MOLzqwrbiz8jF6AjosxbmNUaoLw.roa (raw, json)
Hash identifier: Q7ey5nO5JNU5P/vSYx6Mlsbad774HbeZxH/Dl7HqhwA=
Subject key identifier: 30:E2:F3:AB:0A:DB:8B:3F:23:17:A0:23:A2:CC:5B:98:D5:1A:A0:BC
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 34CB0AE1
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/MOLzqwrbiz8jF6AjosxbmNUaoLw.roa
Signing time: Sat 01 Jan 2022 12:57:15 +0000
ROA not before: Sat 01 Jan 2022 12:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44295
IP address blocks: 92.42.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885721825 (0x34cb0ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Jan 1 12:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30e2f3ab0adb8b3f2317a023a2cc5b98d51aa0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:46:7c:9e:04:b5:80:1d:1b:bc:c6:59:d3:
a2:f7:b7:50:ae:04:01:a1:3b:a2:80:f9:b2:19:d1:
85:15:f7:fd:fb:a4:f2:e2:c1:f0:8e:5e:23:c2:a9:
95:5c:cc:5d:f0:08:66:95:20:32:2b:09:ac:fd:64:
57:5f:05:d2:96:dd:22:cb:7b:4f:63:71:ff:ec:0a:
9e:b4:41:d7:82:07:03:7c:b1:41:ef:dd:b1:8f:f9:
f5:32:82:2d:ea:25:4a:f3:6b:92:81:6c:34:a9:05:
6c:c7:6c:56:11:48:c5:45:e1:0b:69:19:e1:af:f8:
81:de:74:aa:fa:c9:30:cb:bd:8f:39:a3:eb:df:ea:
08:7b:1e:24:ac:cf:70:4b:29:09:1b:1f:e3:21:24:
f6:6d:23:b3:73:82:7f:da:33:ff:05:07:66:ff:39:
70:82:ed:6a:9f:4d:c2:5c:e2:58:5f:79:c2:59:e9:
9b:00:00:d3:07:53:17:53:7d:f7:b0:db:84:6a:49:
a0:bb:25:b7:57:d5:2b:e9:e3:6e:0b:d4:c6:16:7a:
5f:69:6a:e6:27:c3:ba:72:aa:54:36:9b:6e:b7:e5:
64:3b:12:dc:e0:f2:5e:e1:4e:c0:e9:5f:63:4c:e7:
89:94:2b:e7:34:e7:f7:70:37:21:1e:bb:62:75:8c:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:F3:AB:0A:DB:8B:3F:23:17:A0:23:A2:CC:5B:98:D5:1A:A0:BC
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/MOLzqwrbiz8jF6AjosxbmNUaoLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.176.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:d9:2c:61:38:7b:78:a6:2e:24:19:79:24:f2:43:9a:4a:18:
ec:e7:a6:a3:a5:9f:12:84:77:3a:7a:0d:be:0f:41:b3:b3:95:
b5:01:15:bc:2f:37:46:63:f6:b9:f6:8c:4c:2c:6b:b8:bc:c9:
7a:e6:37:8c:c3:70:4c:c2:db:07:06:6b:0f:b2:17:a6:a3:3f:
f0:6a:2b:b5:2b:c7:18:f8:80:30:bd:fd:6a:96:a4:b1:2b:92:
13:d7:4d:10:f0:c1:69:46:dc:cb:1b:c3:2c:ff:b4:e2:d0:53:
a7:68:47:3a:87:07:53:6a:22:b2:f5:83:cb:ef:28:bf:92:e2:
40:7f:7a:15:39:3d:b2:2d:6e:ea:3c:d5:dc:5f:68:86:3d:c5:
ba:f5:2d:e5:91:cf:44:73:ff:fb:6e:24:a6:cc:d1:a4:e3:21:
73:c4:d9:96:07:11:33:0a:69:28:bb:0b:71:c1:86:20:37:92:
6c:e1:14:c1:ab:35:57:62:08:97:42:9e:2a:db:d2:d4:46:a4:
a1:f6:85:2a:d4:4d:ad:12:ee:da:1f:65:14:91:14:e4:d3:20:
33:c7:2d:99:5b:98:05:e7:e4:12:aa:b6:0b:bd:a8:00:ab:99:
d5:19:6b:3b:2d:57:f3:d4:ae:11:79:3f:e5:a7:ef:47:8e:0e:
c9:cc:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-fra.rpki-client.org