Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/MxWU_H99Huqrzvys_D9qPaG2Glk.roa
File: MxWU_H99Huqrzvys_D9qPaG2Glk.roa (raw, json)
Hash identifier: xKO4rcaOaw8daDwH4pAnCVska0CQNP9NoMouCvwJxdM=
Subject key identifier: 33:15:94:FC:7F:7D:1E:EA:AB:CE:FC:AC:FC:3F:6A:3D:A1:B6:1A:59
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 0ECFCA05
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/MxWU_H99Huqrzvys_D9qPaG2Glk.roa
Signing time: Sat 01 Jan 2022 13:00:00 +0000
ROA not before: Sat 01 Jan 2022 13:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56574
IP address blocks: 192.166.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248498693 (0xecfca05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Jan 1 13:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=331594fc7f7d1eeaabcefcacfc3f6a3da1b61a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:c9:e4:41:64:27:98:47:6e:a0:80:3b:40:
7f:50:1c:81:a9:ee:83:2e:2f:e5:cd:cf:0a:06:18:
5c:28:e8:32:05:17:fd:68:4f:fb:c0:c8:3f:ac:a9:
d7:1a:11:67:33:74:16:cf:5a:5c:7b:48:bb:b0:4f:
f9:a9:b4:f2:17:4e:ad:64:c7:3c:94:fa:68:36:de:
56:e6:31:32:50:36:00:de:6c:53:43:de:da:92:c1:
89:46:cd:fb:7f:0b:cd:55:96:af:59:5f:8d:d3:fa:
74:f8:92:aa:ab:49:76:e8:1c:33:ca:fc:12:e8:57:
45:b6:a1:3d:8f:2d:f1:7e:9f:c1:48:06:a5:29:88:
30:64:3d:9c:4d:3d:98:34:fe:4a:b4:b7:1f:59:65:
61:99:7d:1b:c6:9a:f5:06:c5:38:12:95:c8:3b:5b:
ad:ba:9c:90:a6:1d:4d:5f:18:be:75:fc:bc:a6:75:
7d:c5:27:8a:c7:09:76:36:4b:d6:6a:66:2e:e6:2d:
3a:0a:ba:4c:b5:6e:aa:09:20:16:15:b6:48:f5:62:
f5:f8:06:ac:38:ef:6f:08:7b:2b:15:13:f0:f4:cb:
15:1a:a0:3f:b1:f6:ee:ab:ef:b7:a9:8e:a6:9f:f4:
e3:f9:e5:66:3b:13:60:c2:3c:a5:d0:80:10:9d:26:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:15:94:FC:7F:7D:1E:EA:AB:CE:FC:AC:FC:3F:6A:3D:A1:B6:1A:59
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/MxWU_H99Huqrzvys_D9qPaG2Glk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.232.0/22
Signature Algorithm: sha256WithRSAEncryption
54:c3:58:15:db:2f:03:d2:40:82:2f:23:8f:1d:c6:40:d2:40:
88:67:47:5c:20:29:69:33:12:2f:f4:c7:03:15:33:95:b0:0f:
20:60:dd:12:8f:01:90:a4:36:6f:20:aa:29:8d:db:60:e5:b4:
b1:2b:bd:c6:8b:9e:aa:27:24:f4:a4:cb:8a:cb:7c:96:6a:f0:
15:82:df:4e:86:8d:45:9d:a2:95:94:e1:c3:a8:9d:56:ff:56:
6c:c6:a5:6f:02:de:a6:21:10:40:55:7a:89:95:23:6f:79:18:
74:3e:09:a3:50:47:ed:b5:8a:38:fb:c9:0e:34:ac:41:63:38:
b2:65:fa:d1:39:48:91:da:c5:e8:78:a2:c8:cf:56:e7:98:7f:
7e:04:e4:15:0d:de:31:e6:de:19:e3:02:a5:bf:54:fd:86:dd:
51:67:e4:59:b3:12:35:33:2b:29:87:b3:b3:41:f0:2c:ba:8d:
95:f9:1e:41:22:6b:a8:ae:e0:d5:f5:eb:55:20:87:c5:3a:60:
a0:48:45:86:f8:3e:69:ad:e7:e9:1a:aa:84:54:ac:de:d1:dc:
8d:34:c6:a6:f7:07:6c:ae:2f:9e:43:25:a6:80:22:da:e1:e6:
26:c4:32:4e:2c:ed:70:65:b1:88:cb:f3:06:de:7e:8a:9c:9b:
e6:98:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:10 2024 by rpki-client on console-ams.rpki-client.org