Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/MqFvySRnVSDhxihwHKajrxsrvIU.roa
File: MqFvySRnVSDhxihwHKajrxsrvIU.roa (raw, json)
Hash identifier: A4XL1TjEWeL2CS10l6rkUo3NL+LoViwG0AhJcCfv9GE=
Subject key identifier: 32:A1:6F:C9:24:67:55:20:E1:C6:28:70:1C:A6:A3:AF:1B:2B:BC:85
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 0444F5
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/MqFvySRnVSDhxihwHKajrxsrvIU.roa
Signing time: Fri 15 Apr 2022 00:06:58 +0000
ROA not before: Fri 15 Apr 2022 00:06:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196721
IP address blocks: 212.6.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279797 (0x444f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Apr 15 00:06:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32a16fc924675520e1c628701ca6a3af1b2bbc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:a9:0a:b8:34:01:eb:fc:61:e7:75:3b:8c:
81:7f:e9:28:28:df:b4:44:85:5f:81:2a:e2:31:e9:
01:2f:9b:91:98:e4:64:9c:1c:de:38:f5:0c:4f:e4:
2f:c1:dc:7a:e4:3f:03:51:d0:83:9f:ac:c3:b5:0e:
d8:e6:2c:71:4a:19:70:d7:bc:07:07:77:3e:d8:75:
45:77:92:4d:ad:ab:fc:f9:a1:82:1a:0d:ff:21:bc:
69:d7:a8:e8:ec:91:73:ac:23:0f:b5:18:db:c8:82:
7c:9e:99:e2:a3:a4:d0:79:ca:1e:6b:5c:1a:2f:ce:
b7:d8:f7:65:16:2e:06:49:1a:64:54:92:b4:40:15:
73:22:45:96:b8:ac:28:be:9e:d5:ac:a1:ea:6b:ff:
f8:b2:e6:72:ad:6c:4f:ad:c0:8a:59:38:f9:af:fa:
d6:36:a2:89:ae:b2:2e:f9:20:50:7b:e7:7d:9f:71:
ce:ef:75:61:66:b1:09:5e:c9:09:bf:95:f8:aa:d4:
64:e7:c4:96:0a:24:7d:ea:74:54:ec:39:b6:e7:a4:
d3:52:d9:a7:fe:a6:e9:8b:98:8b:f8:17:09:d0:9b:
3a:5f:da:f7:ce:6e:a7:ba:50:eb:5f:9f:20:b9:85:
a4:8e:3a:bb:10:b6:f3:19:dc:f2:9f:a7:cd:ca:83:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:6F:C9:24:67:55:20:E1:C6:28:70:1C:A6:A3:AF:1B:2B:BC:85
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/MqFvySRnVSDhxihwHKajrxsrvIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.30.0/24
Signature Algorithm: sha256WithRSAEncryption
be:29:99:fc:c0:9f:27:38:02:27:e3:db:bc:d9:0e:1a:6b:8a:
7f:51:21:3c:71:91:f4:bf:48:cc:da:19:45:85:4a:4d:67:1a:
50:be:05:5f:37:67:55:c4:6f:53:a3:f3:ab:1a:05:1e:7b:5d:
1d:4d:45:29:63:e9:8e:61:11:4d:83:bf:d5:a9:ac:41:48:d5:
42:8d:27:71:a0:72:0c:3b:4b:53:37:35:c9:09:27:68:5d:7a:
09:9a:85:45:c2:d7:7c:b0:89:61:50:dc:2c:02:77:8c:27:6a:
0c:61:c7:c6:fa:c5:27:55:a0:2f:4e:29:cd:f7:6a:d5:0d:15:
1b:6e:db:a6:5e:52:75:7d:fe:c5:e7:27:31:d2:7d:41:c8:9f:
32:ad:a7:18:28:81:36:c2:cc:94:3f:3d:34:35:56:08:6e:33:
62:ba:a7:87:49:a5:fc:a9:e8:55:35:d9:10:f5:d3:76:da:79:
41:3d:6e:b7:2e:6a:23:04:d6:d3:d6:86:e1:8f:f1:4e:c9:55:
43:21:f8:05:60:14:ec:af:ba:fa:35:ca:28:50:a6:b9:fe:ac:
30:5b:93:3e:3d:24:4b:3c:bb:6c:e6:c8:99:6e:db:48:09:0d:
62:a3:7a:08:c3:ad:9c:6f:8d:a5:62:d2:cb:13:f3:8f:ef:2e:
7e:e9:13:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org