Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MRPH-kUyU3LIklVvdVwrmCRCWQs.roa
File: MRPH-kUyU3LIklVvdVwrmCRCWQs.roa (raw, json)
Hash identifier: 8BihQKR6vc1oVqg3MgbqAxE7X2gUgntwK375rZxJrpA=
Subject key identifier: 31:13:C7:FA:45:32:53:72:C8:92:55:6F:75:5C:2B:98:24:42:59:0B
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 38952801
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MRPH-kUyU3LIklVvdVwrmCRCWQs.roa
Signing time: Sat 01 Jan 2022 10:05:25 +0000
ROA not before: Sat 01 Jan 2022 10:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61248
IP address blocks: 46.143.212.0/22 maxlen: 22
46.143.248.0/22 maxlen: 22
109.122.252.0/23 maxlen: 23
109.122.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949299201 (0x38952801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 10:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3113c7fa45325372c892556f755c2b982442590b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:89:c2:9f:c9:88:1d:fa:48:0e:62:ed:55:
c1:de:3e:e3:c9:6c:8d:2d:09:71:b2:d3:97:a6:c4:
98:42:95:d7:87:e8:60:ba:58:b5:fa:94:17:76:0d:
7c:87:7d:45:e3:da:b4:4d:80:d6:0c:8b:59:af:8a:
8b:ea:48:4f:54:98:6c:53:68:36:03:5a:7d:ed:c7:
d2:78:e9:48:39:35:41:fb:f6:d2:b0:4d:a4:9c:cc:
38:0c:12:fc:ed:54:5e:02:de:11:59:94:d6:11:a0:
ba:3b:09:e7:7e:94:31:d6:9a:24:38:bd:f8:71:af:
64:b4:d6:0b:c3:52:07:a1:07:96:5d:de:eb:81:d5:
cd:97:91:d0:2a:cd:88:50:bd:c9:d7:2b:51:97:23:
6a:b4:ec:14:9f:b4:44:9f:6e:76:63:d1:2d:0e:c7:
3c:16:37:58:04:cd:90:fe:bb:3b:49:d8:e5:85:9f:
b4:82:97:10:99:cd:52:0b:89:28:ea:85:39:ef:62:
e1:e9:73:89:0b:dc:bb:70:b1:7b:2c:26:d4:15:41:
48:04:48:31:5d:9c:f3:d5:06:12:ab:3c:2d:63:bb:
c3:6c:48:cf:00:50:d4:53:d5:de:32:03:8f:62:dd:
e1:f4:1d:4c:49:72:8a:29:ca:2a:45:8b:f0:94:e7:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:13:C7:FA:45:32:53:72:C8:92:55:6F:75:5C:2B:98:24:42:59:0B
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MRPH-kUyU3LIklVvdVwrmCRCWQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.212.0/22
46.143.248.0/22
109.122.252.0/22
Signature Algorithm: sha256WithRSAEncryption
30:c1:02:4e:85:16:14:b5:ef:21:40:04:ad:38:5c:fc:d0:05:
c4:19:71:12:ee:d2:86:31:53:a9:90:d7:f4:53:21:d1:38:93:
4f:ac:cb:3f:3e:d0:78:8c:31:be:c9:75:fb:52:8d:53:d1:a5:
71:d8:19:e7:f9:b7:67:24:f4:36:cf:18:1a:c9:8e:d6:94:1f:
c1:ed:6b:18:2e:f4:6e:63:75:23:09:70:58:a2:6d:17:b6:f4:
ef:77:ba:14:37:46:df:4c:63:95:52:7c:13:54:81:ba:d0:9a:
ce:43:3c:11:88:fe:bd:cb:9f:99:3d:8e:fd:3f:27:ef:ae:c2:
f6:99:b4:c6:a3:e9:2d:1c:ec:2b:dd:d4:b4:bf:70:7b:bd:ad:
67:98:99:c9:08:aa:d8:a1:d3:75:b3:43:3f:38:03:c8:18:d4:
f4:c2:a2:7e:aa:8f:e3:5c:7a:92:ae:3c:e5:39:f4:41:2a:e4:
e8:f9:f7:68:84:63:81:5d:ef:6a:e4:00:9e:9c:9b:6f:e0:39:
5b:ab:df:25:a3:72:63:1b:28:07:a1:2f:2d:ee:cf:ee:bd:fb:
d6:76:87:05:20:01:8f:40:2f:d9:69:22:ff:95:b2:27:ac:25:
ea:11:c5:c8:42:0f:01:08:91:97:81:e0:4f:f5:cd:25:99:5b:
91:4d:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org