Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/MneQjjh-R5kvf9nL2Nt-Zlvo0sY.roa
File: MneQjjh-R5kvf9nL2Nt-Zlvo0sY.roa (raw, json)
Hash identifier: S7kNhxNd5puZqdko5t9XzyiApQhxeSvuN9nQO5jXRoI=
Subject key identifier: 32:77:90:8E:38:7E:47:99:2F:7F:D9:CB:D8:DB:7E:66:5B:E8:D2:C6
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0182D3DF7EB9C25F3C2C1362910F4C7A0217
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/MneQjjh-R5kvf9nL2Nt-Zlvo0sY.roa
Signing time: Thu 25 Aug 2022 07:20:15 +0000
ROA not before: Thu 25 Aug 2022 07:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:df:7e:b9:c2:5f:3c:2c:13:62:91:0f:4c:7a:02:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Aug 25 07:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3277908e387e47992f7fd9cbd8db7e665be8d2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:f0:0c:a8:b3:8e:ee:57:48:56:ae:74:97:
7d:09:b3:fd:a2:d7:15:60:8e:11:bf:34:34:70:64:
26:0c:5a:dc:b6:11:bc:7a:bc:af:93:d5:63:ca:63:
96:5d:47:4b:9c:a2:e8:34:d5:ac:aa:a9:a9:da:09:
34:86:43:e6:f3:7e:7d:2a:2b:37:20:20:4f:10:e5:
5a:84:26:0d:d7:f0:be:96:5c:9b:ee:a8:2a:15:08:
69:05:9a:8d:70:b4:9f:6f:bd:f0:1a:a4:ca:4f:f2:
f9:48:60:12:ce:cd:75:a5:21:be:78:24:b4:67:f1:
75:92:62:1f:fb:3d:7f:ba:7f:e8:2e:6c:0e:f6:08:
ed:e6:98:8e:2a:c2:63:2c:e2:f1:4b:12:65:ae:68:
1e:c8:9b:81:19:46:71:b1:36:af:c7:95:98:07:09:
75:1c:14:d6:92:93:56:c0:6d:29:c7:f7:cf:ed:c2:
5c:3c:31:9f:69:db:4e:eb:9f:78:de:b7:7a:63:ff:
4c:6c:f1:96:90:47:3b:dd:1e:5e:3c:b8:51:8c:3f:
e4:85:db:7f:05:95:95:5d:66:69:5b:6e:90:3b:5e:
1e:d0:10:30:96:fa:35:29:c9:13:e5:d9:fe:f3:81:
c0:25:7f:55:5c:61:fd:88:9c:cd:9f:e7:a1:45:2e:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:90:8E:38:7E:47:99:2F:7F:D9:CB:D8:DB:7E:66:5B:E8:D2:C6
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/MneQjjh-R5kvf9nL2Nt-Zlvo0sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/24
45.67.231.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:49:c7:9e:23:78:88:be:3a:30:b9:18:07:f3:bd:67:37:
6d:b4:70:e8:f1:59:51:b4:34:61:86:8a:84:d0:5f:4a:d2:9f:
31:29:37:98:62:7d:e2:7b:e6:15:98:6c:c9:07:b7:f9:7e:3a:
6f:64:d2:95:8e:13:e3:13:e7:74:bb:69:43:f2:00:f0:92:71:
a5:65:27:19:36:af:63:db:6b:55:8c:a0:76:16:b5:4f:07:c4:
97:12:b9:20:86:09:55:6d:74:78:f6:8c:0d:d3:73:da:f6:cd:
3f:16:ea:7f:b6:ea:57:99:0b:ae:2a:6f:59:93:5b:05:cf:db:
27:00:9b:8d:69:58:70:22:63:29:d1:34:be:12:f7:a1:67:fd:
0f:3f:0e:9d:8c:23:7b:ab:7f:ab:e3:0c:89:a5:51:0c:14:af:
13:ff:9b:fd:ac:28:4e:45:52:0f:a5:c7:c9:1d:a5:a3:2c:38:
03:ea:1d:31:6e:c0:61:41:bf:a1:4b:27:1c:3c:64:e6:1a:84:
14:74:92:cf:40:96:7a:ec:59:c0:b1:94:04:03:08:bd:3c:4c:
9a:51:93:fd:9b:3f:dc:20:04:0b:61:88:2c:79:bc:0c:4a:4e:
41:8f:37:0b:8e:71:0b:5c:d7:04:ca:e8:33:c0:d2:dc:ea:8b:
0d:dd:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:06 2023 by rpki-client on console-fra.rpki-client.org