Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M-p1Bj8KDtG0IXtzp05B67TvLPU.roa
File: M-p1Bj8KDtG0IXtzp05B67TvLPU.roa (raw, json)
Hash identifier: DogAnz06lDfoSrCI55Eip8KP+YnS0aLZwzJ9+ThNNhw=
Subject key identifier: 33:EA:75:06:3F:0A:0E:D1:B4:21:7B:73:A7:4E:41:EB:B4:EF:2C:F5
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018313E47FE7C062331466CA5DD72F16AF2C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M-p1Bj8KDtG0IXtzp05B67TvLPU.roa
Signing time: Tue 06 Sep 2022 17:41:25 +0000
ROA not before: Tue 06 Sep 2022 17:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
81.28.254.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:e4:7f:e7:c0:62:33:14:66:ca:5d:d7:2f:16:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 6 17:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33ea75063f0a0ed1b4217b73a74e41ebb4ef2cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:2b:61:df:13:be:1b:49:20:b0:51:52:53:
88:61:68:59:41:63:44:5b:80:95:b5:99:16:14:90:
65:be:74:dc:f5:cb:c5:0c:30:63:f4:0d:6d:50:1f:
2e:fa:2a:cf:7b:cc:37:82:a9:bb:a7:30:36:6d:5d:
c3:d2:ab:31:76:5e:b9:4f:1d:50:46:15:f7:fa:35:
5d:50:71:14:2f:3a:c4:3a:f5:d2:1d:81:99:1b:30:
65:ed:8d:0a:d9:a1:43:b7:8d:46:2f:d8:5f:8d:61:
9b:24:12:ef:09:90:18:20:f0:29:62:97:c0:a0:39:
ef:10:f3:4e:c4:e1:c7:10:8e:c9:02:e2:cb:9d:a6:
03:70:b7:cd:f1:c1:5a:94:2a:b4:89:06:04:c1:56:
77:97:f9:62:ba:61:ee:c5:9a:1b:b8:91:16:f6:a7:
ec:82:20:df:2d:23:dd:8a:4d:fe:46:07:38:b1:32:
f8:c6:04:3b:1f:05:b4:a7:8a:07:76:a2:47:9f:84:
59:fa:2d:69:ff:ff:cf:28:88:d8:be:a9:33:60:07:
7d:cb:59:b4:e0:f5:f6:42:d2:86:23:fd:16:27:3b:
d4:af:3a:b3:8b:56:02:b8:86:61:3c:57:13:47:c4:
52:92:7e:80:4e:b0:cc:5b:c4:66:b3:8a:5d:26:78:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:75:06:3F:0A:0E:D1:B4:21:7B:73:A7:4E:41:EB:B4:EF:2C:F5
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M-p1Bj8KDtG0IXtzp05B67TvLPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.254.0/23
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7c:df:57:bf:b3:c4:49:22:1c:71:69:a7:cd:d1:a8:89:33:
f1:76:f3:24:b6:c3:2e:c2:c7:11:1c:68:94:ae:9d:b5:ba:cb:
78:1b:e6:6f:a0:ed:d4:a9:c4:19:3b:6c:e0:4a:71:6e:46:54:
b8:15:79:fe:6e:bc:4c:d5:be:a3:69:46:68:c9:62:69:71:20:
e2:a1:6c:91:92:04:56:3d:3e:6a:09:fb:2a:28:f4:af:6b:06:
22:ac:02:1a:72:84:30:77:08:5a:99:d6:ae:8e:b2:b8:a1:07:
0d:dd:10:91:85:bd:e0:26:87:b3:c7:85:15:aa:14:5d:f0:a7:
dc:bd:34:c9:4e:14:dd:2c:5f:87:20:6c:b6:16:19:d5:b2:57:
e8:bf:d4:3f:96:53:6b:1d:af:42:5e:dc:dd:0e:a6:7b:05:ac:
48:22:15:ae:c6:ca:75:b4:db:ad:79:4c:49:ec:b5:14:34:d6:
4b:2a:76:0b:ea:cd:88:85:b8:9f:f5:93:68:48:b3:17:32:86:
a8:3b:4f:d2:74:35:1f:a6:e3:f3:e0:fe:92:39:c9:17:55:d0:
c9:ee:f4:b1:72:8d:e2:ff:a2:09:f0:67:97:6e:dd:09:7b:2c:
a7:6c:2d:a2:da:6a:09:44:71:08:e6:b9:93:3c:75:ab:98:03:
d0:1e:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org