Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/3MQfCOErPWQux8L9YXrIoRy0yMs.roa
File: 3MQfCOErPWQux8L9YXrIoRy0yMs.roa (raw, json)
Hash identifier: cdHEDFff4RWT/2sk2+Z9VySL3Sq//wnOjKJJ6JhUc2I=
Subject key identifier: DC:C4:1F:08:E1:2B:3D:64:2E:C7:C2:FD:61:7A:C8:A1:1C:B4:C8:CB
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 46ABAE
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/3MQfCOErPWQux8L9YXrIoRy0yMs.roa
Signing time: Tue 15 Feb 2022 19:06:52 +0000
ROA not before: Tue 15 Feb 2022 19:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4631470 (0x46abae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Feb 15 19:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcc41f08e12b3d642ec7c2fd617ac8a11cb4c8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:4b:36:a1:cb:21:26:fe:52:c5:42:dc:71:
08:7d:66:41:c3:56:8e:b0:f9:de:51:69:6c:d8:cc:
57:56:aa:37:77:bb:02:ee:14:97:be:ae:47:2f:15:
fc:3d:8a:e5:53:82:32:9b:c9:b8:0d:2b:67:d7:14:
dc:b8:56:b3:f6:a5:6f:8e:36:4a:76:98:05:22:c0:
84:43:28:27:32:d1:b3:4f:d6:c4:46:3b:7f:1a:e9:
73:d0:87:a3:46:fd:e4:43:f5:8c:3b:d6:98:e4:fc:
49:f3:93:00:26:17:f0:72:ee:2d:5c:04:d2:23:ae:
83:bd:f2:c6:53:87:a3:ff:f4:3c:a1:12:91:d0:42:
dd:ad:0e:69:6e:64:68:d4:af:40:7a:1a:8c:cd:0c:
ec:a7:20:de:d3:df:04:50:e4:96:be:d1:a8:e1:49:
76:32:1a:e3:b2:6a:e4:e9:1d:97:b3:f8:f8:5a:8c:
00:a0:5b:94:54:06:dc:4d:24:95:9e:fb:ab:3b:ef:
fb:e1:77:dd:87:f9:13:84:2e:87:54:03:f5:30:7f:
c4:d7:95:38:51:90:39:65:e2:9d:de:1d:8c:65:64:
98:b3:79:20:45:98:80:59:0e:d9:c8:48:08:9b:b9:
8b:ad:78:88:3b:df:05:55:36:46:60:78:e2:80:4b:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:1F:08:E1:2B:3D:64:2E:C7:C2:FD:61:7A:C8:A1:1C:B4:C8:CB
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/3MQfCOErPWQux8L9YXrIoRy0yMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f8:b8:48:ef:0a:c6:d3:69:b5:8f:a8:00:27:04:db:cd:73:
b3:d9:f0:13:27:4d:dd:3a:1a:0b:56:ee:1c:15:ef:d8:fa:83:
e2:fa:7d:32:14:78:fe:41:89:f3:8e:01:9e:f2:af:ff:65:37:
20:bd:77:7c:a0:a4:06:16:10:13:3f:fb:3b:f0:37:f6:02:77:
94:7b:2f:a4:24:04:6e:9e:f8:9c:aa:93:41:3b:2a:da:9c:1a:
69:2a:70:34:15:03:2f:55:92:a8:0d:fb:fb:25:47:20:08:1e:
a9:bb:0a:7d:60:d6:0d:c4:34:85:c7:1e:68:77:05:61:ed:e8:
a5:b0:0e:12:04:fc:47:05:5f:0e:92:de:a1:97:81:23:69:78:
d6:05:7b:98:cf:ef:e1:85:1b:bb:c0:40:65:d3:90:28:70:14:
97:25:00:fe:97:fd:46:bd:89:9c:91:77:f5:ff:c0:a4:bb:ff:
0d:36:c2:9b:df:c5:f7:db:df:fb:09:c6:f3:1f:fe:a5:e0:38:
01:33:6a:e5:76:e0:13:b2:fd:5a:e5:e8:8b:eb:ef:52:b9:9e:
70:58:e6:60:a0:41:9e:cf:31:28:9e:cb:6a:fa:bd:f0:13:11:
1e:85:a0:1d:8e:73:ac:30:85:a2:33:e2:f3:84:6a:de:3c:fa:
1f:bf:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org