Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/MWNX-XGJLfcFcJGG8S02LOLI5uA.roa
File: MWNX-XGJLfcFcJGG8S02LOLI5uA.roa (raw, json)
Hash identifier: SOvTeWcpEfQasAwi1q2gb2VUD33AMjEGAHIgiBJfWOE=
Subject key identifier: 31:63:57:F9:71:89:2D:F7:05:70:91:86:F1:2D:36:2C:E2:C8:E6:E0
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 0183122513BDEC413D5ED68FF348D349B766
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/MWNX-XGJLfcFcJGG8S02LOLI5uA.roa
Signing time: Tue 06 Sep 2022 09:32:43 +0000
ROA not before: Tue 06 Sep 2022 09:32:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 91.230.244.0/23 maxlen: 24
91.233.105.0/24 maxlen: 24
194.33.112.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:25:13:bd:ec:41:3d:5e:d6:8f:f3:48:d3:49:b7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Sep 6 09:32:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=316357f971892df705709186f12d362ce2c8e6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:ed:08:70:e3:fd:86:3c:08:0e:b6:be:eb:
0f:51:1c:c6:de:d0:e2:45:52:ef:2e:8d:35:af:31:
6c:b7:cb:a0:6f:7f:44:dc:4a:01:72:7d:e6:89:e1:
89:1d:bb:2b:b4:7f:f0:54:f3:4e:88:27:1b:8d:11:
15:bb:81:7a:4f:04:33:6c:6b:67:40:57:a2:50:4a:
b2:bd:19:01:11:13:f6:77:45:59:20:b1:1f:72:48:
6c:ba:bd:7a:a3:6c:8f:28:69:18:1c:5b:d8:39:2e:
bd:03:f0:b5:7e:71:b3:65:97:4f:1f:af:00:39:e1:
94:36:19:30:df:c6:66:b9:67:cd:1e:bd:82:48:62:
b6:46:86:39:9c:3d:f9:c1:e1:ce:23:36:c6:b0:77:
55:5f:d7:6e:6d:45:1d:8f:fa:26:9a:11:58:3f:df:
17:6f:5b:2b:1a:81:0a:c1:d8:20:b9:42:7d:75:5f:
2a:b6:e4:44:0a:e8:30:97:f9:24:5c:95:19:c9:2f:
09:c6:6a:01:aa:28:2c:ba:ef:b5:b8:d4:fa:ef:a1:
90:f6:cf:66:9c:ca:8b:b4:4c:e2:cd:b6:4f:ce:e5:
4d:a0:83:ea:54:27:85:f4:45:b3:30:40:4e:ea:ef:
9b:e7:e8:2b:32:27:ff:a0:28:63:06:9a:9e:70:df:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:63:57:F9:71:89:2D:F7:05:70:91:86:F1:2D:36:2C:E2:C8:E6:E0
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/MWNX-XGJLfcFcJGG8S02LOLI5uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.244.0/23
91.233.105.0/24
194.33.112.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:9d:ed:d6:b1:63:13:cc:af:0c:c7:ba:18:f2:3a:87:cc:75:
37:77:8f:bb:c4:10:b5:22:a7:ca:5f:48:f0:9e:62:c7:87:42:
88:1d:fb:35:be:6c:0f:06:a0:39:00:ed:49:ce:20:ae:68:19:
0f:fc:ff:88:6e:54:37:04:e7:9c:c0:16:90:85:1d:c9:79:b1:
d2:9b:0c:98:1d:56:ae:bd:f9:b4:17:70:fc:7d:d0:c0:8f:a1:
3d:41:3e:b4:29:48:b6:99:49:27:fa:a9:c9:5c:fe:3e:20:6c:
b7:1c:5e:9d:eb:47:80:db:4c:c6:81:f6:2d:1a:a9:df:05:1f:
d5:4e:bf:bf:1e:0e:bb:29:d0:09:70:0b:b0:b3:80:3c:4a:cd:
06:00:a9:0a:1c:d4:24:a0:ca:9c:90:f7:0e:ec:d5:a1:0a:4a:
51:8a:5a:15:3f:9d:63:38:08:49:bc:a1:07:46:cf:b0:66:1c:
af:45:78:5d:b0:77:ee:be:7f:00:06:3f:ed:89:c8:7a:b8:ad:
0a:13:9e:74:df:9d:68:3d:6d:75:67:8c:a3:7e:59:05:2e:4f:
9d:26:13:69:20:7c:21:4d:24:23:6c:f3:fc:c7:ea:d6:16:4a:
00:7b:43:c0:46:dd:ba:c2:47:7f:8e:a8:65:da:f7:a1:ff:73:
7a:35:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:40 2024 by rpki-client on console-ams.rpki-client.org