Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa
File: mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa (raw, json)
Hash identifier: zIrGRjyu45ljF3c03UgDTkcpE4jAwOIywCIAdiMZ5qk=
Subject key identifier: 98:13:FC:5E:09:AE:03:77:DE:72:CE:8C:F9:8D:CB:66:5F:6E:16:61
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 03CCE4DE
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa
Signing time: Sat 01 Jan 2022 08:04:24 +0000
ROA not before: Sat 01 Jan 2022 08:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 155.193.2.0/23 maxlen: 23
155.193.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63759582 (0x3cce4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 1 08:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9813fc5e09ae0377de72ce8cf98dcb665f6e1661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:f5:37:3b:2a:b8:18:fb:4f:9b:ac:f0:96:
9a:3c:66:b1:76:93:c8:8f:9d:36:c9:71:d2:5f:bc:
87:4e:7c:1c:0a:27:d5:9b:4e:5d:52:89:9d:a8:88:
42:1b:4c:f7:55:84:b2:41:70:48:45:29:94:63:18:
fe:49:d0:9b:10:68:6d:14:23:8d:b2:88:ad:f4:3b:
9a:14:a1:ac:c9:67:e4:ab:d6:7b:34:19:31:19:d8:
35:24:1e:35:1a:0c:7c:e1:49:d9:13:b6:39:0c:1f:
c3:7b:92:82:db:a2:6f:c8:93:5c:9e:c2:c9:3e:b3:
ef:fc:4c:9e:67:18:b0:b9:c9:a1:60:0a:ec:e9:ab:
4c:48:d0:8a:9c:4d:53:a1:68:d9:8c:03:f0:a2:88:
79:2f:d6:70:ff:bf:3f:a1:08:4c:34:4d:4d:df:46:
ea:bf:84:7e:22:ea:51:96:de:bb:76:fb:b7:a3:e9:
e8:3f:81:69:db:63:8f:06:e5:48:d6:65:9f:c5:2f:
ae:a2:a7:0e:ab:05:7c:36:e8:87:3a:df:d6:d9:39:
92:ac:a7:be:0e:80:2f:c0:83:27:7b:19:e2:b6:10:
f3:dc:ba:10:31:d5:79:a2:37:93:ab:7f:4a:ea:9b:
98:f9:c9:b2:37:15:e7:47:4f:92:6d:f3:9b:a9:3b:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:FC:5E:09:AE:03:77:DE:72:CE:8C:F9:8D:CB:66:5F:6E:16:61
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mBP8XgmuA3fecs6M-Y3LZl9uFmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.2.0/23
155.193.8.0/22
Signature Algorithm: sha256WithRSAEncryption
47:e5:75:1e:95:25:6f:87:17:11:fe:21:f1:66:08:95:d0:42:
93:af:ce:f8:92:13:39:21:84:db:ca:76:68:b7:ce:bd:ad:04:
d2:a9:e3:83:99:83:94:34:83:49:f6:15:c4:4b:bc:b4:eb:9a:
c6:98:3d:14:0c:de:00:f6:59:fd:57:8b:4b:cf:3f:a5:fb:d3:
39:06:76:3a:3d:5c:9b:24:97:8c:ab:99:8a:17:88:30:45:4e:
56:9c:0c:e5:fe:d8:ce:6b:d4:7e:4c:7b:1d:e7:3b:9a:fc:ed:
5e:37:7b:7c:7f:8e:5c:5e:2f:64:ac:e0:47:6d:4a:3c:8c:f7:
ff:2f:e6:6e:66:da:c7:47:8a:50:76:b3:ed:6b:d4:bc:39:fc:
54:27:4f:4b:13:49:10:73:14:e5:e8:24:f6:89:73:d7:b0:16:
3e:07:c9:e1:d9:f0:b7:ea:6a:dc:3c:b2:b3:ae:0c:5a:26:b5:
57:40:05:01:58:83:75:80:b6:a5:05:4e:eb:97:ef:56:db:f4:
f2:77:2d:1a:2f:02:d2:99:10:b0:02:47:17:e0:fa:67:7e:91:
df:f8:9f:07:f5:17:7f:c4:f2:75:cc:21:73:36:cb:af:94:ba:
bc:85:34:b0:a0:94:49:00:0b:24:15:2a:b3:f3:f4:42:31:55:
9d:67:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:40 2023 by rpki-client on console-ams.rpki-client.org