Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/MZg14w2MTv-fTsOq2Jrb7xKY2DA.roa
File: MZg14w2MTv-fTsOq2Jrb7xKY2DA.roa (raw, json)
Hash identifier: Gfk7Uz5r0S6P0D9M2NEg4IUzYIKxNAIp6ceJCpvrMq8=
Subject key identifier: 31:98:35:E3:0D:8C:4E:FF:9F:4E:C3:AA:D8:9A:DB:EF:12:98:D8:30
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0182F7B2700BF617EB6CC611E8C0DAC281D4
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/MZg14w2MTv-fTsOq2Jrb7xKY2DA.roa
Signing time: Thu 01 Sep 2022 06:17:22 +0000
ROA not before: Thu 01 Sep 2022 06:17:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 80.246.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f7:b2:70:0b:f6:17:eb:6c:c6:11:e8:c0:da:c2:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 1 06:17:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=319835e30d8c4eff9f4ec3aad89adbef1298d830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:b2:e0:31:7d:73:60:64:77:be:b8:0d:3c:
87:8e:c3:99:d8:5f:36:c4:ab:06:e9:82:21:87:b2:
9e:5d:23:4b:d5:23:96:cd:e6:91:06:12:14:05:ed:
81:40:76:b9:a0:0c:a9:e7:89:61:b6:d4:f2:ff:60:
3f:58:ec:bc:ab:b6:42:bb:a0:ff:44:32:05:38:c0:
9b:f5:c4:8d:87:c9:68:72:50:75:35:78:6d:b8:5a:
a4:25:ae:c7:b5:3e:1e:14:98:40:a3:e3:a3:53:87:
7f:3c:28:e0:67:f1:ec:6b:31:da:50:d2:5c:ad:78:
27:0d:b6:99:26:54:3d:b1:8e:1e:51:43:8c:96:8a:
61:67:c5:9f:a1:b3:3b:ef:1e:a7:fa:82:5e:b0:7f:
00:48:dc:2d:de:45:69:ce:cd:83:36:32:73:34:fc:
19:1a:8e:a1:af:43:0f:cf:76:d8:ee:33:d3:3f:20:
a9:6a:6c:73:89:ee:1d:44:37:87:1e:6f:7d:df:cb:
50:ff:04:32:5c:bf:64:a7:28:c3:ca:d2:4c:c6:01:
4b:0e:73:86:a3:21:3c:a1:69:d7:07:99:c0:a1:fe:
15:9a:0b:29:f7:2a:64:0b:b8:cd:9f:4c:9a:c8:66:
0e:58:35:69:9b:6f:03:69:bf:ce:8f:c6:8c:1f:fd:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:35:E3:0D:8C:4E:FF:9F:4E:C3:AA:D8:9A:DB:EF:12:98:D8:30
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/MZg14w2MTv-fTsOq2Jrb7xKY2DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:00:e2:29:6f:ec:92:0d:27:99:df:37:be:27:47:c0:07:65:
b7:0e:0b:fc:21:ab:e2:a9:79:05:bf:fd:3e:15:8c:3e:cb:f2:
01:85:f1:97:72:17:b4:43:5d:b6:60:b5:a5:44:93:fa:f2:4d:
6d:d8:8b:b9:76:1b:aa:ea:ea:1a:47:3d:ed:f8:d3:d6:d8:ed:
af:da:56:c4:02:74:1c:fe:5f:73:ad:df:2d:b3:33:29:34:1c:
2a:f1:ec:d5:ba:80:e1:6d:27:a3:32:ec:55:e5:63:b2:83:8c:
e2:c7:bd:d1:68:e2:af:b0:6c:54:18:50:74:72:6d:97:cc:47:
27:cf:8e:9a:86:8e:89:cc:2d:d5:e6:cc:6d:65:ae:bc:13:74:
bc:bd:0b:32:3b:b4:23:df:60:1c:dc:78:ee:7b:2f:56:ab:b7:
3c:12:b5:bb:e3:94:1b:85:f4:66:63:81:9f:9d:31:d3:31:2d:
0c:a7:81:cc:6b:9e:87:03:00:28:cc:d2:cc:51:90:46:f8:56:
f4:0d:a4:b2:d1:2a:a4:16:48:84:48:07:37:27:07:6f:b6:64:
ac:67:17:1d:01:59:12:ec:f0:71:53:c1:d8:df:2f:bb:27:45:
09:20:7a:99:a3:c5:78:3d:ce:38:5a:ad:c8:93:28:a3:52:ce:
24:0b:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org