Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/mNWBFUzic71aPUx45N54fylr9ro.roa
File: mNWBFUzic71aPUx45N54fylr9ro.roa (raw, json)
Hash identifier: nqQibgQMNhGIscxAJ7WfQRVZT/1CTsVklTxrgEtJ+7Y=
Subject key identifier: 98:D5:81:15:4C:E2:73:BD:5A:3D:4C:78:E4:DE:78:7F:29:6B:F6:BA
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 0356392E
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/mNWBFUzic71aPUx45N54fylr9ro.roa
Signing time: Sat 01 Jan 2022 06:55:27 +0000
ROA not before: Sat 01 Jan 2022 06:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51462
IP address blocks: 193.105.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55982382 (0x356392e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Jan 1 06:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98d581154ce273bd5a3d4c78e4de787f296bf6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:cb:3b:78:b6:82:15:dc:1e:cb:b7:62:1a:
3d:fd:cf:3a:38:2d:0d:3a:13:05:00:d5:fd:fe:a7:
14:d5:7d:8f:d6:46:12:8b:6b:1d:ea:1e:08:3e:61:
88:c1:42:39:0b:35:fa:f5:df:c0:fd:c6:d2:26:c4:
76:0d:e1:35:e9:f5:10:10:cc:74:05:88:af:01:db:
d6:19:32:d8:10:d8:47:4d:a4:6b:f5:04:04:b5:f2:
12:2a:01:79:7c:d0:01:55:29:bd:be:32:51:bf:25:
94:0b:b2:22:78:20:70:3a:d1:98:5c:6b:18:de:ca:
c8:41:37:1a:d7:73:b1:25:e8:ca:72:14:8f:b7:f9:
c0:33:4c:a9:1b:a7:8f:bc:f6:f1:60:04:28:5f:36:
c2:c5:85:ed:82:51:a1:d6:81:02:45:06:23:bf:54:
bc:a4:fa:60:d5:bf:25:d5:03:fc:83:ef:29:50:b2:
b6:67:6f:d5:e3:6e:e6:c2:52:51:b9:57:72:86:16:
aa:cc:f2:39:ae:90:27:c8:ea:dd:42:d2:e4:4e:05:
95:68:3a:87:0a:f4:85:cd:93:66:e0:26:d2:15:ee:
8f:ef:51:2c:19:13:7d:88:3c:f3:5b:f2:8a:09:b3:
85:99:cc:15:96:b7:d2:ef:95:06:f8:ba:81:4b:60:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D5:81:15:4C:E2:73:BD:5A:3D:4C:78:E4:DE:78:7F:29:6B:F6:BA
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/mNWBFUzic71aPUx45N54fylr9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.106.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fe:f1:50:b4:fc:97:90:be:ad:67:2e:28:ea:10:6a:12:e1:
c4:c9:df:e2:9f:58:58:30:ff:2e:14:be:16:0f:5c:90:37:36:
cf:97:d1:60:ba:82:89:e6:6b:6c:1c:28:ac:65:c5:c9:6d:a7:
9b:16:42:71:15:48:f4:5a:ec:42:dd:f8:8a:3e:28:48:a6:5c:
47:16:df:74:93:86:36:91:71:52:37:63:f9:37:00:98:b8:fe:
1c:9b:c6:03:84:7b:00:32:0a:51:ad:1e:91:70:0f:f1:f9:da:
46:4a:8e:93:fb:37:4c:58:0d:02:72:73:24:c1:4d:82:af:3e:
03:0e:78:c7:dd:02:4c:45:c5:6d:c8:3a:99:5f:e2:4b:14:d4:
88:3f:ea:55:81:8b:c3:74:e9:84:bb:a4:ab:ec:1e:31:c4:08:
36:84:41:21:42:e3:6a:c9:c6:12:f8:a4:6f:a8:fe:e7:c2:0d:
7d:11:ad:1b:35:70:64:2d:f9:83:c9:7d:45:6d:36:ee:fe:88:
3c:71:43:34:5d:20:05:d1:97:c8:09:13:37:8d:cb:80:97:c0:
6e:29:f2:cf:04:19:83:af:f1:a8:9a:6d:cb:23:f9:41:7a:95:
bf:4a:b1:e7:f7:83:2c:53:85:ae:d6:7f:28:5d:54:16:a1:43:
5f:7a:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:53 2023 by rpki-client on console-ams.rpki-client.org