Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mNrXPAg-_a6q3IfV99oynpVPQE0.roa
File: mNrXPAg-_a6q3IfV99oynpVPQE0.roa (raw, json)
Hash identifier: G1V6c/+xsREoWnYUGpVPsrk8M5qX7v19I2/bP00wWTc=
Subject key identifier: 98:DA:D7:3C:08:3E:FD:AE:AA:DC:87:D5:F7:DA:32:9E:95:4F:40:4D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01842CA1CB80843E50969DA5C43852647CB6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mNrXPAg-_a6q3IfV99oynpVPQE0.roa
Signing time: Mon 31 Oct 2022 06:01:51 +0000
ROA not before: Mon 31 Oct 2022 06:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 176.57.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2c:a1:cb:80:84:3e:50:96:9d:a5:c4:38:52:64:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 31 06:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98dad73c083efdaeaadc87d5f7da329e954f404d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:23:79:5c:c2:0b:66:cb:29:73:35:cd:6d:
ca:d2:c7:e8:14:58:33:73:e7:7a:8e:4c:2a:82:84:
9d:46:78:01:1a:d1:14:4e:7a:f1:b8:9f:ad:f6:4d:
f1:db:58:39:0a:a5:0d:15:1c:69:8c:61:6d:f9:18:
21:50:3f:54:ca:60:91:8d:45:28:4e:17:dd:98:cf:
ab:09:bb:0f:3f:bc:87:c1:f8:24:f0:0f:7b:05:2b:
a5:e1:ab:37:38:54:6e:15:57:c7:41:b3:6d:f3:db:
e3:b9:55:f6:c3:4a:60:0b:06:79:73:88:45:18:cf:
5a:c2:cc:2e:57:f2:79:11:f9:8c:ac:cd:79:0e:ad:
59:4a:3c:a3:39:44:38:1e:20:4e:84:36:8f:2c:28:
e3:92:a4:d6:f1:6a:30:d4:9b:cb:18:ce:b4:20:9f:
27:c6:e3:32:98:ce:13:0c:21:f3:ea:7b:86:85:72:
2c:66:6d:b2:92:d1:8f:2b:b1:14:ad:81:69:8b:8b:
9e:71:f1:5d:39:90:33:b6:a9:43:2c:7b:a3:c3:09:
ec:fb:ab:d5:e5:af:fc:99:7a:44:dd:e6:e5:53:9e:
ee:90:84:80:f7:39:05:e0:6f:7c:89:b5:d9:ed:fc:
e6:11:1d:74:cd:09:55:c5:ad:02:a1:56:0e:61:08:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:D7:3C:08:3E:FD:AE:AA:DC:87:D5:F7:DA:32:9E:95:4F:40:4D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mNrXPAg-_a6q3IfV99oynpVPQE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d2:a8:12:9c:c0:fc:bf:dd:a4:0b:a9:13:41:d5:17:62:b6:
7f:e6:14:57:24:80:f4:ba:b0:cc:90:7d:17:9e:ab:77:26:fc:
87:ec:2f:99:17:a8:b4:bc:38:59:9d:f7:5c:60:27:2c:f7:a4:
e0:19:bc:54:cf:6f:08:10:9f:24:af:82:b6:18:f0:08:bc:56:
a0:b4:ae:91:16:9f:90:c4:20:78:b0:ca:40:5b:4e:38:9a:ab:
c0:27:01:a0:97:5a:e9:f4:38:52:a1:30:2a:98:89:6a:82:34:
c1:ad:e5:1a:90:13:bd:be:0f:b2:19:42:bf:6f:f7:a8:18:ab:
75:4c:09:0e:b7:b1:18:a5:e6:95:81:86:50:a9:9d:77:b2:bf:
a1:7c:12:05:1b:5f:6e:64:70:e4:ec:04:08:1b:3f:94:7c:3d:
ed:aa:80:97:95:c8:df:bb:77:eb:10:88:49:af:e2:e5:17:8f:
e3:15:24:0b:4a:fc:f6:08:cc:94:c3:9e:ec:d5:f8:03:7e:5b:
f4:d4:b7:4e:0b:f4:36:10:db:f1:f5:48:44:43:20:5a:7b:e1:
53:75:6c:9c:6e:99:66:47:5d:67:6d:12:b4:84:78:35:3e:54:
b0:f0:bc:83:57:ef:e8:31:00:63:83:22:60:b2:2c:a8:71:27:
8d:54:ca:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQsocuAhD5Qlp2lxDhSZHy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjIxMDMxMDYwMTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRhZDczYzA4M2VmZGFlYWFkYzg3ZDVmN2RhMzI5ZTk1NGY0MDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe8jeVzCC2bLKXM1zW3K0sfoFFgz
c+d6jkwqgoSdRngBGtEUTnrxuJ+t9k3x21g5CqUNFRxpjGFt+RghUD9UymCRjUUo
ThfdmM+rCbsPP7yHwfgk8A97BSul4as3OFRuFVfHQbNt89vjuVX2w0pgCwZ5c4hF
GM9awswuV/J5EfmMrM15Dq1ZSjyjOUQ4HiBOhDaPLCjjkqTW8Wow1JvLGM60IJ8n
xuMymM4TDCHz6nuGhXIsZm2yktGPK7EUrYFpi4uecfFdOZAztqlDLHujwwns+6vV
5a/8mXpE3eblU57ukISA9zkF4G98ibXZ7fzmER10zQlVxa0CoVYOYQj9PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJja1zwIPv2uqtyH1ffaMp6VT0BNMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvbU5yWFBBZy1fYTZxM0lmVjk5b3lucFZQUUUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDkxMA0G
CSqGSIb3DQEBCwUAA4IBAQBe0qgSnMD8v92kC6kTQdUXYrZ/5hRXJID0urDMkH0X
nqt3JvyH7C+ZF6i0vDhZnfdcYCcs96TgGbxUz28IEJ8kr4K2GPAIvFagtK6RFp+Q
xCB4sMpAW044mqvAJwGgl1rp9DhSoTAqmIlqgjTBreUakBO9vg+yGUK/b/eoGKt1
TAkOt7EYpeaVgYZQqZ13sr+hfBIFG19uZHDk7AQIGz+UfD3tqoCXlcjfu3frEIhJ
r+LlF4/jFSQLSvz2CMyUw57s1fgDflv01LdOC/Q2ENvx9UhEQyBae+FTdWycbplm
R11nbRK0hHg1PlSw8LyDV+/oMQBjgyJgsiyocSeNVMor
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org