Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/mNxUFmMeRx2H9ACFa9c1n9jN1tU.roa
File: mNxUFmMeRx2H9ACFa9c1n9jN1tU.roa (raw, json)
Hash identifier: m5qom3iM7INMQoIdWSS1NHH5ic34wATaeHAW0Rw3dxA=
Subject key identifier: 98:DC:54:16:63:1E:47:1D:87:F4:00:85:6B:D7:35:9F:D8:CD:D6:D5
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0182EA3CF22BEF71F5A5F1287E6FCFD9D493
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/mNxUFmMeRx2H9ACFa9c1n9jN1tU.roa
Signing time: Mon 29 Aug 2022 15:33:58 +0000
ROA not before: Mon 29 Aug 2022 15:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 80.71.226.0/24 maxlen: 24
80.71.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:3c:f2:2b:ef:71:f5:a5:f1:28:7e:6f:cf:d9:d4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 29 15:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98dc5416631e471d87f400856bd7359fd8cdd6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:2e:49:dc:4a:8a:0c:33:83:0c:3d:51:14:
03:b9:37:a3:c7:bf:a5:a4:e7:a8:a2:76:78:78:62:
14:ce:7e:62:61:06:44:45:4e:b3:f3:47:01:80:d3:
9c:54:4e:98:e2:db:fe:96:b7:e4:d5:a3:51:96:48:
2a:a8:bd:65:99:4c:0a:3c:0e:49:86:2b:bb:0b:0e:
b0:c6:06:46:d0:2d:ee:a0:0a:17:83:48:e2:74:41:
e6:cd:1f:fa:17:e8:37:31:ff:b3:4c:64:7d:49:74:
e5:99:d0:54:b0:49:0f:09:f6:87:76:f9:cd:28:e8:
8a:6f:0c:ad:b1:f5:4a:50:09:fc:25:0d:25:98:66:
d7:11:5b:7b:23:88:11:5d:47:0d:54:36:92:d2:26:
4c:20:6d:ce:89:9b:96:84:01:03:38:b1:ba:e8:bf:
df:f4:f9:26:2b:b2:4a:03:4e:c8:2e:27:11:5a:92:
74:b1:08:7d:da:44:f7:0a:b4:5c:65:61:29:67:9b:
31:60:35:f5:2a:10:00:22:78:93:42:e7:d4:72:53:
cd:37:8e:7b:a9:65:86:47:05:40:65:4c:81:c1:4a:
b1:29:55:1d:e0:67:14:7a:70:e8:81:f3:ac:4e:d9:
c1:38:a1:36:50:91:4a:f6:a4:e7:95:8f:54:3c:ab:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:54:16:63:1E:47:1D:87:F4:00:85:6B:D7:35:9F:D8:CD:D6:D5
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/mNxUFmMeRx2H9ACFa9c1n9jN1tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0-80.71.226.255
Signature Algorithm: sha256WithRSAEncryption
39:15:27:a9:75:81:b0:be:2e:89:50:d1:bb:a5:13:f9:ac:f6:
d6:3a:2d:d8:e1:6d:0f:c9:af:ea:3e:d8:1c:e8:d3:e3:44:fd:
16:a0:24:01:b7:00:12:3b:01:0e:52:56:63:1b:41:95:c2:a7:
ec:69:4b:1d:97:4b:02:ae:30:ba:8c:41:66:ac:a2:b8:65:43:
66:05:74:2b:67:f8:8e:c3:b6:25:01:82:cc:30:78:8d:46:25:
c3:8a:e8:80:1c:ed:95:77:a3:73:b0:14:9e:b6:15:37:9f:2d:
e3:ec:05:7e:82:0b:f3:b4:b0:a6:13:99:63:c5:89:e7:2d:cf:
13:f3:20:da:9b:9a:75:aa:08:44:a6:46:71:4b:fc:4f:6c:3b:
8e:b9:30:cc:e9:85:9c:0c:d5:47:a4:99:05:1e:49:41:f7:35:
89:17:42:5b:c8:94:96:4e:fd:e1:ac:1a:64:1a:c3:2e:07:d9:
99:ad:33:d2:e8:ac:d9:9a:bb:27:59:ee:a4:df:f2:d6:90:76:
17:5c:1f:48:50:2c:4d:db:c0:0b:dd:d4:17:8b:fc:69:73:90:
7a:af:af:d1:31:e5:20:45:2b:39:39:ff:d4:cc:65:c4:c8:f7:
be:44:4b:a9:e4:ee:36:80:32:74:82:ea:fd:a3:19:b9:1f:dd:
eb:57:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org