Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/mORrTfRkyGHyEQSU_DMXOKxzqQg.roa
File: mORrTfRkyGHyEQSU_DMXOKxzqQg.roa (raw, json)
Hash identifier: GAV58GnY0HZaEofC5VDsIVzQdpmexFf2P67VPVRQJsM=
Subject key identifier: 98:E4:6B:4D:F4:64:C8:61:F2:11:04:94:FC:33:17:38:AC:73:A9:08
Certificate issuer: /CN=f59c1624934a585b462118f15a4b0542b0673b87
Certificate serial: DE539E
Authority key identifier: F5:9C:16:24:93:4A:58:5B:46:21:18:F1:5A:4B:05:42:B0:67:3B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZwWJJNKWFtGIRjxWksFQrBnO4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/mORrTfRkyGHyEQSU_DMXOKxzqQg.roa
Signing time: Sat 01 Jan 2022 03:54:01 +0000
ROA not before: Sat 01 Jan 2022 03:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 79.110.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14570398 (0xde539e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59c1624934a585b462118f15a4b0542b0673b87
Validity
Not Before: Jan 1 03:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e46b4df464c861f2110494fc331738ac73a908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:d4:16:a7:cc:a1:bf:13:87:f5:80:0b:96:
11:98:a2:de:f6:f4:47:07:1a:12:df:86:9b:a7:fe:
77:db:49:91:b3:08:a1:c1:98:b0:4f:ad:97:f3:67:
86:45:fd:eb:92:be:31:37:ff:16:2a:cd:91:78:93:
93:3b:c8:b9:c6:8a:98:e5:cb:6d:c6:f6:db:1e:50:
a5:da:d7:55:3b:0d:78:74:8d:0b:e7:98:7d:c1:e8:
fa:47:73:fa:95:50:4d:d3:cf:b3:dc:4e:32:54:70:
83:7a:fd:80:f7:7b:f3:47:87:ce:c0:6c:24:1d:5c:
b4:52:58:73:32:1a:59:da:09:02:44:c0:61:a8:ed:
42:ba:43:b3:0b:f9:a1:e2:90:c4:78:80:c4:ad:c0:
46:22:b6:d5:d8:71:64:f2:69:e5:0f:4c:53:b4:81:
30:5d:ff:95:6b:42:0b:44:69:d0:d8:c2:21:d9:05:
8d:c4:5d:ec:94:ee:bc:30:73:6f:ab:69:0f:81:c6:
82:28:44:c5:7f:7a:82:37:03:ac:8e:c8:7a:44:9c:
e7:9c:ca:6b:99:79:e7:c9:6c:e2:21:99:38:9a:f7:
0d:93:e5:7d:8a:3a:5a:e1:15:b2:a6:f6:6a:46:35:
21:21:45:4f:05:be:16:d1:79:be:1a:25:c5:bc:bb:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:6B:4D:F4:64:C8:61:F2:11:04:94:FC:33:17:38:AC:73:A9:08
X509v3 Authority Key Identifier:
keyid:F5:9C:16:24:93:4A:58:5B:46:21:18:F1:5A:4B:05:42:B0:67:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZwWJJNKWFtGIRjxWksFQrBnO4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/mORrTfRkyGHyEQSU_DMXOKxzqQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/9ZwWJJNKWFtGIRjxWksFQrBnO4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.230.0/24
Signature Algorithm: sha256WithRSAEncryption
47:35:27:85:a5:d7:c8:b7:90:83:6e:16:89:95:fe:75:9f:5d:
b0:a8:8e:52:d3:f0:c9:5a:67:7a:ff:35:71:f3:1c:f1:aa:8e:
de:44:5b:c3:e6:25:2f:d8:e0:02:f5:b7:2c:d4:5f:4b:52:6b:
35:3d:61:74:c7:93:29:09:c0:c3:62:42:1d:45:b0:5e:e2:ec:
c0:78:35:7e:d0:f8:9a:62:14:7f:0b:a6:b8:51:04:12:20:35:
b0:3b:07:78:21:97:2f:a3:80:1e:ae:f0:f0:9a:41:26:11:33:
bd:91:4e:00:fc:fd:35:e1:c5:0c:1a:07:b8:a9:b8:91:d9:39:
3f:df:fd:f0:2f:21:08:d3:67:26:d5:9e:0b:b3:e4:9d:07:88:
43:e4:1c:a5:ef:53:7a:9c:1a:66:19:4d:ed:ac:c7:37:7d:d0:
d0:f7:ae:5a:7b:c4:e1:2a:1c:c4:4d:76:75:ca:c7:4a:96:36:
b6:80:99:d2:4d:7a:f4:fd:31:ef:82:c4:f7:4b:0b:3a:3e:21:
9d:e1:03:ed:85:fc:25:71:f0:a8:cd:43:b8:02:b1:90:86:a0:
94:8d:b5:48:d3:09:23:79:54:42:35:38:9d:bb:97:b9:e8:b1:
72:77:38:bf:91:22:52:2f:6d:28:09:b6:51:61:4e:4e:29:bb:
1a:a1:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org