Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/MRW3d5VLvaFVenWINrZ7FBOjfj8.roa
File: MRW3d5VLvaFVenWINrZ7FBOjfj8.roa (raw, json)
Hash identifier: nY6qKX70w/jPlWm7R74F31KE/HPAb33sKpTawkXLry8=
Subject key identifier: 31:15:B7:77:95:4B:BD:A1:55:7A:75:88:36:B6:7B:14:13:A3:7E:3F
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01822755155A425ED54FA73649EF75BC2A9E
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/MRW3d5VLvaFVenWINrZ7FBOjfj8.roa
Signing time: Fri 22 Jul 2022 19:14:23 +0000
ROA not before: Fri 22 Jul 2022 19:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 91.204.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:55:15:5a:42:5e:d5:4f:a7:36:49:ef:75:bc:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jul 22 19:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3115b777954bbda1557a758836b67b1413a37e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:3b:fc:e7:dd:54:da:70:80:21:8e:cc:e4:
fc:07:58:4f:93:5f:5d:fb:1b:ca:97:1c:9d:af:6e:
63:3a:b2:8c:ab:df:23:dd:7b:15:bc:41:e0:5b:45:
32:c3:f9:ea:cb:55:89:a2:cb:72:54:3f:3a:aa:9c:
74:9b:d8:1d:fd:80:6c:77:22:de:f2:42:bc:70:51:
65:22:36:77:41:d5:12:81:97:28:a1:c1:af:8a:37:
7e:84:ae:c2:63:0d:48:72:d8:df:4f:a6:9b:77:d7:
0a:90:31:f2:74:1f:bf:8f:39:c6:3b:20:02:73:f2:
ce:2b:23:e2:c1:00:ec:e5:63:a0:3b:64:ee:c8:75:
2d:29:27:7d:a4:35:9a:8f:6a:9f:39:07:cf:19:b5:
10:9d:57:15:8b:e3:64:2a:cd:a6:7e:e0:b0:d1:71:
e4:eb:cf:24:44:db:76:ad:ed:25:e7:6b:dc:da:a0:
c3:94:1e:39:ce:93:05:12:cd:1d:55:dd:67:a8:11:
2e:8b:6a:2e:67:98:17:85:51:c0:b2:59:64:ab:22:
d5:be:f3:5a:ad:1b:5c:27:9c:94:3c:0a:58:d5:ff:
2f:16:d7:51:ce:ff:f3:43:c4:51:ec:24:66:23:29:
d2:77:c6:80:0a:df:09:77:ca:9e:48:11:2d:e6:91:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:15:B7:77:95:4B:BD:A1:55:7A:75:88:36:B6:7B:14:13:A3:7E:3F
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/MRW3d5VLvaFVenWINrZ7FBOjfj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/22
Signature Algorithm: sha256WithRSAEncryption
12:0a:61:39:5e:2e:f2:0b:7f:b1:27:9f:aa:8c:10:98:1a:f2:
6f:9d:40:ce:86:de:6f:65:fd:e3:69:e2:a5:63:38:de:32:5d:
be:5b:48:7c:e1:6b:04:72:62:ca:96:bb:48:79:53:f0:17:e8:
c6:cc:98:40:e8:cd:cf:0a:2f:b1:4e:47:f9:c3:5f:5a:f4:a4:
59:f5:8a:fb:d1:bf:1e:90:fb:ab:85:fa:1d:8e:28:04:79:c2:
b9:1a:c6:bd:24:e6:85:46:3e:d7:8d:8d:cc:24:47:3b:28:a2:
72:a8:81:a0:16:49:21:56:f2:49:fc:68:35:82:cd:56:a8:fa:
2f:d5:5c:e3:dc:3f:69:50:9a:50:2d:9e:87:f8:8b:7e:82:f0:
ce:e1:b9:e5:19:29:9f:9b:fa:2b:e5:13:69:a9:c7:c6:92:65:
99:0d:8b:6e:fa:dd:61:69:34:d9:96:76:40:33:14:4e:45:d8:
a4:72:04:d1:fa:58:e7:61:13:ef:19:f6:65:be:03:88:c7:dc:
69:61:cb:30:97:43:1a:35:5a:75:89:f4:48:67:9e:33:69:fd:
d3:e2:f0:30:59:51:2a:6c:5e:d7:a4:70:c6:3a:26:6b:9b:56:
b6:44:58:52:35:84:ce:0a:7c:1f:03:31:cd:7d:3a:57:79:3a:
cd:70:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org