Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/mPl_dqpXxfyTBnQGUQfjDcB3Sb8.roa
File: mPl_dqpXxfyTBnQGUQfjDcB3Sb8.roa (raw, json)
Hash identifier: FhadPwEOAC70Jqa8tRRgQK0AOS0GucZWwKrOev3XHu8=
Subject key identifier: 98:F9:7F:76:AA:57:C5:FC:93:06:74:06:51:07:E3:0D:C0:77:49:BF
Certificate issuer: /CN=103279df905d71d2b1af15c5abf28f66ab019a2d
Certificate serial: 082CCCF0
Authority key identifier: 10:32:79:DF:90:5D:71:D2:B1:AF:15:C5:AB:F2:8F:66:AB:01:9A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDJ535BdcdKxrxXFq_KPZqsBmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/mPl_dqpXxfyTBnQGUQfjDcB3Sb8.roa
Signing time: Sat 01 Jan 2022 01:56:36 +0000
ROA not before: Sat 01 Jan 2022 01:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42765
IP address blocks: 171.25.164.0/22 maxlen: 22
91.204.148.0/22 maxlen: 22
91.233.168.0/22 maxlen: 22
213.108.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137153776 (0x82cccf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103279df905d71d2b1af15c5abf28f66ab019a2d
Validity
Not Before: Jan 1 01:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98f97f76aa57c5fc930674065107e30dc07749bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:ad:21:78:aa:b0:7f:6d:18:d5:a7:cf:79:
5f:ba:42:44:f2:55:cb:ea:41:c0:bb:d3:3c:8a:9e:
17:37:f4:c1:dd:ce:34:1d:e5:06:26:a3:1e:c9:03:
0d:a3:77:14:fd:b8:07:f1:6b:ab:ec:1d:86:2a:72:
35:67:61:e7:2d:a0:fb:7b:15:44:03:70:9a:50:f6:
7a:74:ec:7a:fc:5d:cb:dc:46:fa:ea:3b:5b:06:63:
7f:69:30:e5:25:69:ac:00:88:fa:c2:95:6c:34:be:
34:60:c2:91:08:f6:9f:15:c3:4a:70:45:3b:c4:dd:
ef:5b:d1:3b:12:27:58:4d:df:34:68:4e:d9:42:4e:
40:38:56:1c:7c:33:09:f6:ac:45:6e:fb:c3:8e:c7:
d7:e3:21:7b:1b:65:32:09:00:e0:bd:f8:97:c1:42:
a1:27:10:04:d0:f5:4e:f0:14:d8:2d:11:9c:be:92:
4c:52:d3:3b:dd:6c:5a:5a:d5:bd:c3:d0:97:36:d1:
f5:61:1f:12:6d:c9:18:6a:ab:04:9d:95:99:2e:1c:
37:2d:5f:35:dc:63:a5:4c:3b:58:b9:ef:a4:51:16:
a1:3d:88:e4:a3:43:60:63:0b:97:21:ce:b4:bf:68:
91:fe:e8:87:95:83:07:6c:3e:16:77:a2:76:57:4c:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:7F:76:AA:57:C5:FC:93:06:74:06:51:07:E3:0D:C0:77:49:BF
X509v3 Authority Key Identifier:
keyid:10:32:79:DF:90:5D:71:D2:B1:AF:15:C5:AB:F2:8F:66:AB:01:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDJ535BdcdKxrxXFq_KPZqsBmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/mPl_dqpXxfyTBnQGUQfjDcB3Sb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1c47e3-3883-4884-b6d6-2a79a9ca2f41/1/EDJ535BdcdKxrxXFq_KPZqsBmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.148.0/22
91.233.168.0/22
171.25.164.0/22
213.108.208.0/21
Signature Algorithm: sha256WithRSAEncryption
04:37:45:1e:48:b1:ae:98:d7:0c:75:71:c2:07:8d:4a:85:80:
d9:f9:2b:7f:9d:b7:9a:99:5d:7f:50:5e:ef:0d:05:2c:59:69:
e0:5e:47:4c:c0:23:8b:13:70:9e:4d:60:90:a2:a4:07:60:4d:
1c:89:3d:3c:1f:91:c2:c6:1e:20:10:ac:b3:3e:98:ec:24:ef:
d3:38:b8:42:98:1d:85:b8:32:f8:fd:9d:08:63:df:84:71:b3:
67:ad:02:5a:83:d8:e7:42:b0:1f:75:5f:6d:a0:d1:d9:c7:44:
f1:73:2e:7e:dc:c3:4c:ce:8e:3a:e5:89:d0:c4:ca:e1:15:d8:
c4:52:01:9d:74:db:93:20:f7:a0:26:74:11:e8:9c:c3:e7:8e:
14:6f:98:f2:6b:15:51:ae:5a:41:8c:ec:ac:a6:02:42:a6:90:
45:85:ec:dd:bc:c3:c6:ad:c9:58:1a:a0:09:2c:d3:13:dc:65:
f6:59:29:f9:2c:69:9c:da:6e:30:f9:50:49:6c:0f:9e:28:0c:
40:65:9e:ab:e4:48:b0:6e:37:72:ec:3d:46:f9:0d:25:00:4b:
0c:bf:a7:40:dd:20:d8:61:9f:55:76:03:61:ad:1d:c0:1b:41:
0c:e6:ee:4f:ce:9d:de:45:81:d7:7c:8b:5a:38:1e:b3:fb:da:
55:e2:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-ams.rpki-client.org