Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/MUk3ijuDJd29zeuDJ6p-2y1VEdg.roa
File: MUk3ijuDJd29zeuDJ6p-2y1VEdg.roa (raw, json)
Hash identifier: Ytl+mzWCD+JPmoBkQJ4eLbKGp9+0AuaEdspXT2m6ff4=
Subject key identifier: 31:49:37:8A:3B:83:25:DD:BD:CD:EB:83:27:AA:7E:DB:2D:55:11:D8
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 06F53CD1
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/MUk3ijuDJd29zeuDJ6p-2y1VEdg.roa
Signing time: Mon 13 Jun 2022 13:45:44 +0000
ROA not before: Mon 13 Jun 2022 13:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.204.183.0/24 maxlen: 24
91.204.180.0/24 maxlen: 24
91.204.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116735185 (0x6f53cd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jun 13 13:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3149378a3b8325ddbdcdeb8327aa7edb2d5511d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:a8:7d:0a:e8:f8:4c:fa:dd:23:4e:ec:71:
c0:42:ba:08:0b:e7:f1:e9:01:06:a0:dc:f0:64:cc:
5b:49:d0:e2:40:3f:68:ef:df:da:92:2e:69:d2:20:
24:6f:3b:e0:6c:eb:fb:c9:dc:68:17:fa:4b:3f:4d:
80:e9:11:d4:dd:5a:1e:17:5f:d6:aa:74:94:11:76:
a7:34:f5:1e:16:3c:df:22:23:38:0f:ef:c6:18:b2:
88:66:c2:f6:92:c6:88:80:a6:c4:d7:a3:85:40:3d:
ba:83:fc:6b:85:51:36:2a:81:5a:0a:72:a5:ee:27:
1a:35:fc:60:86:fe:a8:31:19:c3:51:be:01:e2:df:
0b:e1:45:5b:bc:86:72:0d:0a:d2:50:1a:11:a9:68:
e6:90:cd:f5:e6:5e:56:c0:df:98:7d:48:a6:eb:07:
4f:1f:23:fe:f9:55:e4:c8:ac:6c:a0:47:84:a8:75:
5e:57:7b:ea:93:b7:6b:dd:98:fc:80:57:b5:af:7e:
bb:93:20:90:0b:49:3c:71:06:71:de:39:75:34:ea:
21:f9:7b:48:84:61:29:c6:ea:24:c6:3f:9a:d2:67:
f3:27:4e:2a:e6:a0:85:35:11:1a:15:22:86:92:e0:
af:2d:ff:24:b0:cb:b9:d6:d8:30:e0:f4:aa:30:18:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:37:8A:3B:83:25:DD:BD:CD:EB:83:27:AA:7E:DB:2D:55:11:D8
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/MUk3ijuDJd29zeuDJ6p-2y1VEdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/24
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:8c:a7:1b:7e:34:db:3d:3e:3a:44:91:42:30:2b:4d:cb:f6:
d6:6c:1f:f9:6c:e0:91:7b:f9:5f:88:90:09:1c:07:79:5b:46:
01:c6:7f:9b:a3:4e:7b:ea:35:b8:e9:08:74:25:ea:6a:69:e1:
7f:e2:33:98:2f:c3:be:48:db:87:fe:14:01:60:73:cd:02:30:
1f:54:f8:79:17:de:57:6d:b8:64:9e:a7:fb:dc:55:bc:bb:ef:
cb:6e:c9:4a:5a:47:33:f5:a3:4a:c1:34:e8:f7:62:eb:89:45:
1d:07:23:75:20:a7:ca:bb:aa:e1:1a:35:3d:55:43:da:f9:8a:
05:9c:2f:9f:7d:2b:39:8c:b9:33:22:9c:6a:13:ec:14:e2:46:
ca:97:1c:96:42:4b:3a:2d:27:ab:65:e5:12:7f:9e:3c:86:47:
50:27:86:c7:6e:46:eb:d2:6d:74:64:bd:56:7e:2c:b7:33:4e:
60:83:05:2e:7e:b2:af:dc:c3:97:b0:fb:31:7c:c2:88:d3:e9:
ec:dd:f0:b2:85:57:ac:d8:de:71:18:09:ea:12:72:be:5c:6b:
5c:53:5c:0c:f7:e1:4c:39:76:73:07:6b:2a:b3:9b:a5:1f:27:
31:8f:25:87:01:1f:54:37:4a:64:1e:ff:ce:e8:e9:1a:fc:4e:
88:fe:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org