Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MktQSMdcxmsh7JBlSJBx3LpPyMQ.roa
File: MktQSMdcxmsh7JBlSJBx3LpPyMQ.roa (raw, json)
Hash identifier: rOabQz/6ARWTvh3XpSHUqc8Q9xGPeizCVYHhnJU4ewo=
Subject key identifier: 32:4B:50:48:C7:5C:C6:6B:21:EC:90:65:48:90:71:DC:BA:4F:C8:C4
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1571B923
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MktQSMdcxmsh7JBlSJBx3LpPyMQ.roa
Signing time: Tue 21 Jun 2022 13:09:44 +0000
ROA not before: Tue 21 Jun 2022 13:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49901
IP address blocks: 212.90.100.0/23 maxlen: 24
46.249.98.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359774499 (0x1571b923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 21 13:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=324b5048c75cc66b21ec9065489071dcba4fc8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:c5:b7:e6:be:ed:27:2b:ec:b8:3c:68:8d:
da:d4:50:e9:d7:a5:54:74:2a:e1:83:f1:bf:98:80:
62:dd:4e:71:e6:2e:8e:ab:e4:58:83:0e:2b:e3:69:
1f:5f:fe:39:54:b0:be:d6:92:25:02:59:15:d8:d8:
b5:34:34:6d:65:a1:5f:b6:bf:d0:83:4c:32:5d:81:
c5:c9:05:bb:62:90:24:26:67:31:23:7a:d7:eb:de:
64:1e:1a:3a:18:15:4d:bb:80:e0:86:d7:85:95:bd:
3f:cb:f4:55:d2:3f:ed:1c:15:6b:dc:d4:d8:6c:e8:
0f:53:3b:b5:f1:dd:37:94:db:48:19:40:48:ca:da:
00:6c:52:f9:ce:7c:e9:89:0e:5f:b6:be:e4:4c:a9:
50:81:6b:c3:2f:91:d8:a3:bf:72:72:56:ce:90:62:
29:20:76:56:66:db:64:3a:b3:78:6a:55:78:0e:30:
50:50:b7:98:8c:6a:97:77:61:2b:6c:a1:11:5f:4a:
06:7f:6b:02:7c:4c:46:4d:6a:00:2b:0e:00:98:53:
49:4e:e7:34:ee:48:ea:ca:75:85:b6:11:41:4b:45:
38:f7:b6:bc:8c:7c:86:5b:37:90:b0:30:c9:2d:21:
63:3f:11:71:af:7f:c6:28:37:fe:0b:0e:40:cb:3d:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:50:48:C7:5C:C6:6B:21:EC:90:65:48:90:71:DC:BA:4F:C8:C4
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/MktQSMdcxmsh7JBlSJBx3LpPyMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0/23
212.90.100.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:92:aa:fd:b1:19:95:6f:04:40:1e:e6:5a:1a:08:ff:82:ff:
db:53:d6:d4:c7:0b:c0:cf:e6:93:af:bb:bc:0c:5a:d8:73:f8:
46:8d:e6:99:d6:7b:48:f1:a3:30:27:22:61:51:55:a5:ac:33:
86:4f:82:7e:f3:9b:0d:6a:5e:67:15:30:aa:22:bf:97:32:e9:
42:e8:36:aa:dd:1e:4a:c0:0d:0c:ed:5c:fe:f9:c3:74:7f:a8:
0e:31:4b:a8:5f:6e:9a:85:f9:f8:d8:47:3b:7c:2f:0f:4b:6b:
ce:55:2f:cf:6e:b0:37:17:4b:d8:9a:14:51:0c:fc:b4:50:83:
73:46:6e:76:71:ba:f3:8d:f6:55:d5:71:e8:60:36:5a:02:7c:
85:a8:bf:d9:a9:2b:24:51:c2:26:32:47:00:f4:be:69:72:4b:
7f:62:93:6f:c8:3a:28:d3:bb:3d:42:e2:b2:0d:50:3c:5a:c8:
5a:42:e1:7f:af:e9:4b:cf:5a:67:af:5a:70:a1:13:e5:6c:d2:
1d:73:f1:6a:84:a8:56:9f:c0:7c:96:4b:ca:1f:b4:44:bd:96:
5e:34:a5:b4:4a:e7:d1:79:b6:9e:16:ee:bb:af:9f:60:06:a3:
a9:76:a5:e3:99:5c:b4:42:56:b5:b7:3f:08:b2:6e:93:b8:6d:
23:e6:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org