Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/MG79LxxJo5xhUqlALoDWTKtRHM0.roa
File: MG79LxxJo5xhUqlALoDWTKtRHM0.roa (raw, json)
Hash identifier: oP943g97IGC2ncq3wfuk9NAQgR07eHWKIVEyYYpKVuM=
Subject key identifier: 30:6E:FD:2F:1C:49:A3:9C:61:52:A9:40:2E:80:D6:4C:AB:51:1C:CD
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DA0403
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/MG79LxxJo5xhUqlALoDWTKtRHM0.roa
Signing time: Sat 01 Jan 2022 12:01:34 +0000
ROA not before: Sat 01 Jan 2022 12:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59903
IP address blocks: 141.101.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383386627 (0x16da0403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=306efd2f1c49a39c6152a9402e80d64cab511ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:96:dd:e9:d8:5e:6c:9d:50:41:89:9f:73:43:
ad:49:45:4a:20:c7:d7:69:2a:52:23:08:46:ad:0a:
c3:5a:cc:83:78:d6:68:88:eb:f8:c7:b0:82:f6:ac:
10:3e:32:3d:95:90:02:bf:b0:15:f6:cf:ce:e2:86:
da:41:d6:62:9a:4d:ab:20:c3:e8:dc:44:73:ad:37:
0c:28:0f:54:fd:a4:a3:9c:2e:7f:5b:41:79:58:9e:
02:5b:d1:8b:69:3e:13:68:db:6c:cb:48:15:27:4d:
8a:68:73:7f:5a:47:7e:e2:f1:1f:e6:e9:67:99:d7:
9e:eb:47:58:25:2f:73:0e:44:ac:1a:ec:5f:ad:2f:
ce:46:12:69:41:29:37:45:f7:50:75:1a:63:d3:c1:
13:21:2b:e2:e9:20:ec:da:20:d9:c0:8a:e3:fb:6b:
69:48:f9:c7:f3:c6:df:ef:1d:14:5b:59:9e:45:e2:
1f:e6:d9:31:8b:fa:9a:a2:48:53:68:45:ab:0f:77:
48:c5:53:de:01:68:d4:dc:ae:db:27:31:5f:85:fb:
04:56:da:da:f3:03:69:61:30:34:18:b3:0d:e9:b1:
df:73:d4:30:85:81:58:f6:0b:8b:9f:46:f0:b6:b9:
16:e4:56:d7:3d:5f:09:1c:67:9c:6e:4d:ae:e4:da:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6E:FD:2F:1C:49:A3:9C:61:52:A9:40:2E:80:D6:4C:AB:51:1C:CD
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/MG79LxxJo5xhUqlALoDWTKtRHM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7f:f0:30:76:de:f8:32:91:50:40:d3:44:09:8a:f0:b0:00:
08:23:98:1f:ab:6f:1a:f2:b7:31:68:20:b4:42:94:1e:fa:46:
a4:be:25:66:a4:db:6b:e5:ed:8d:cf:6c:ed:3d:bc:a2:80:0b:
63:81:74:f9:b2:d5:e8:e5:75:11:02:0a:5c:82:a9:d8:97:b1:
a3:80:21:b6:25:44:12:93:5e:cb:2c:23:b8:44:2c:5b:29:68:
23:9e:ed:d2:93:6e:9e:40:a4:ec:4d:bb:5c:e6:1c:e3:f8:ce:
7c:c5:d0:9e:ca:e7:e5:27:8a:a0:f7:52:d5:f8:d4:30:1f:2c:
34:98:00:53:cd:85:b2:74:90:0a:7f:e0:a9:01:26:54:c2:8b:
e3:33:d6:73:77:ab:08:09:b6:af:69:88:41:ba:a3:4a:40:d6:
88:f9:e9:4e:91:f0:44:ba:35:ae:a7:0f:ac:98:4d:6d:70:eb:
49:79:e0:5a:28:78:ea:0e:3e:38:5f:a8:d0:9a:bb:62:42:f8:
b5:70:70:51:bd:7d:b7:8c:23:8c:21:e0:eb:4e:6a:17:ea:4c:
63:74:a4:35:5e:31:23:d6:c7:19:97:d0:ed:f9:8b:b2:cc:e2:
f0:4d:4b:21:06:3c:3e:7d:38:49:a7:e0:7a:a0:d6:15:93:55:
64:8d:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org