Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/mxNjkI_rKp5HPfUwfDVQSdItgQo.roa
File: mxNjkI_rKp5HPfUwfDVQSdItgQo.roa (raw, json)
Hash identifier: 7eQAS6977GlkDZKsDEN5WemEII9b3b2pjjtjAG1m69U=
Subject key identifier: 9B:13:63:90:8F:EB:2A:9E:47:3D:F5:30:7C:35:50:49:D2:2D:81:0A
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 356FB03B
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/mxNjkI_rKp5HPfUwfDVQSdItgQo.roa
Signing time: Sat 01 Jan 2022 15:55:18 +0000
ROA not before: Sat 01 Jan 2022 15:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205148
IP address blocks: 93.159.187.0/24 maxlen: 24
2a00:1578:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896512059 (0x356fb03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 15:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b1363908feb2a9e473df5307c355049d22d810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:31:18:ea:8e:e1:3c:c6:5c:b5:ed:fe:22:
d7:0e:e4:fa:7c:0b:37:aa:bf:d7:da:a8:c0:fd:0a:
e8:5f:8d:9c:b6:4c:e6:dd:56:a1:36:c2:d1:45:9e:
7c:e8:d3:8d:ab:d5:6c:70:2a:5a:33:e4:00:33:3d:
0a:51:6c:d6:23:d6:12:a0:ee:85:c4:53:99:d5:29:
14:12:8b:56:4c:e9:d3:4c:26:a3:57:0c:2b:e9:72:
30:d0:76:7c:76:8d:c3:f9:64:d9:a0:76:ef:b3:7e:
d3:97:b5:32:ca:2c:36:58:05:97:c4:ec:8d:5e:d2:
de:59:39:47:6d:3a:78:7d:3b:4d:a5:d9:a6:07:b8:
25:49:e7:b3:d5:56:00:27:ee:77:1b:b6:6b:07:86:
2b:03:1f:64:52:ae:d5:c9:49:33:63:3d:8e:c6:e5:
24:24:bd:78:43:45:a7:ae:53:34:3d:bb:a2:30:d8:
ed:84:99:ff:bd:4d:64:f3:e7:54:a2:eb:ce:81:73:
f6:63:8a:95:1f:5c:f2:01:b3:7c:3a:1b:1a:b2:c2:
07:a1:f1:f8:52:0e:e1:4b:4a:ac:98:46:91:2f:2d:
63:81:e9:9c:04:59:87:ca:57:20:5c:5c:02:d2:f3:
21:2c:0d:13:aa:ee:60:ca:4c:3f:79:ca:e6:89:b1:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:63:90:8F:EB:2A:9E:47:3D:F5:30:7C:35:50:49:D2:2D:81:0A
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/mxNjkI_rKp5HPfUwfDVQSdItgQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.187.0/24
IPv6:
2a00:1578:100::/40
Signature Algorithm: sha256WithRSAEncryption
a1:7d:ad:b6:00:69:bf:ad:4e:d4:66:ce:b6:38:68:11:dc:25:
6b:db:0e:e5:eb:db:de:d7:fc:05:3d:53:27:55:7a:0d:03:1b:
4a:93:f5:b0:7d:4c:df:cc:e2:95:b1:a5:32:f1:a9:96:d1:10:
88:23:c3:45:3a:9e:ff:8a:4f:fb:fd:48:e0:da:87:7c:6b:75:
e9:9e:c5:23:55:55:d9:4d:68:ce:9c:5b:41:56:22:7c:a3:fb:
3b:fe:c9:08:34:78:81:5e:32:cf:eb:ef:de:ce:93:8f:f7:6f:
03:bb:e1:07:ba:a0:11:49:28:8c:6f:89:6a:61:25:68:fd:da:
ea:4a:77:54:6b:98:aa:31:b6:c6:df:ba:4b:17:ec:8f:bc:24:
83:81:68:07:82:66:d4:c9:75:79:69:3b:56:a0:04:38:74:32:
91:5c:31:94:7b:8c:8f:8a:41:3c:5f:d9:69:88:17:9a:57:90:
ec:b1:8d:7b:35:86:00:6b:e1:8b:1e:03:02:db:70:66:80:53:
d7:c2:05:8e:6a:96:ba:26:9d:39:29:ed:8e:5b:e8:72:b1:9f:
4e:6e:b2:cb:f7:92:f9:a7:62:be:b8:a3:ea:f7:e6:50:e2:0a:
c9:72:81:2c:c3:f8:71:57:49:ab:85:40:66:47:c2:2d:14:d9:
6a:fe:a4:0f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIENW+wOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjJhNjQ2YmVkNGM0MTdhNmI0ODA1ZjkzZDc3YTdhNDY1ZTM0YjkzMB4XDTIyMDEw
MTE1NTUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWIxMzYzOTA4ZmVi
MmE5ZTQ3M2RmNTMwN2MzNTUwNDlkMjJkODEwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJfMRjqjuE8xly17f4i1w7k+nwLN6q/19qowP0K6F+NnLZM
5t1WoTbC0UWefOjTjavVbHAqWjPkADM9ClFs1iPWEqDuhcRTmdUpFBKLVkzp00wm
o1cMK+lyMNB2fHaNw/lk2aB277N+05e1MsosNlgFl8TsjV7S3lk5R206eH07TaXZ
pge4JUnns9VWACfudxu2aweGKwMfZFKu1clJM2M9jsblJCS9eENFp65TND27ojDY
7YSZ/71NZPPnVKLrzoFz9mOKlR9c8gGzfDobGrLCB6Hx+FIO4UtKrJhGkS8tY4Hp
nARZh8pXIFxcAtLzISwNE6ruYMpMP3nK5omxu1kCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBSbE2OQj+sqnkc99TB8NVBJ0i2BCjAfBgNVHSMEGDAWgBQSKmRr7UxBemtI
Bfk9d6ekZeNLkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VpcGthLTFNUVhwclNBWDVQWGVucEdYalM1TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvYTU5NmUyLTI5ZDItNDhjNi05YmFiLTVjYmQxZjNmZjM5YS8x
L214TmprSV9yS3A1SFBmVXdmRFZRU2RJdGdRby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
YTU5NmUyLTI5ZDItNDhjNi05YmFiLTVjYmQxZjNmZjM5YS8xL0VpcGthLTFNUVhw
clNBWDVQWGVucEdYalM1TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAF2fuzAOBAIAAjAIAwYAKgAVeAEw
DQYJKoZIhvcNAQELBQADggEBAKF9rbYAab+tTtRmzrY4aBHcJWvbDuXr297X/AU9
UydVeg0DG0qT9bB9TN/M4pWxpTLxqZbREIgjw0U6nv+KT/v9SODah3xrdemexSNV
VdlNaM6cW0FWInyj+zv+yQg0eIFeMs/r797Ok4/3bwO74Qe6oBFJKIxviWphJWj9
2upKd1RrmKoxtsbfuksX7I+8JIOBaAeCZtTJdXlpO1agBDh0MpFcMZR7jI+KQTxf
2WmIF5pXkOyxjXs1hgBr4YseAwLbcGaAU9fCBY5qlromnTkp7Y5b6HKxn05ussv3
kvmnYr64o+r35lDiCslygSzD+HFXSauFQGZHwi0U2Wr+pA8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org