Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Mgqay5A4S_OXjXwx6jvfbxS5IGQ.roa
File: Mgqay5A4S_OXjXwx6jvfbxS5IGQ.roa (raw, json)
Hash identifier: vG1+AzJJN1lKsJgAQJG6lQFnkQeK7kODFjm+6DzUK2M=
Subject key identifier: 32:0A:9A:CB:90:38:4B:F3:97:8D:7C:31:EA:3B:DF:6F:14:B9:20:64
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 05866BD8
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Mgqay5A4S_OXjXwx6jvfbxS5IGQ.roa
Signing time: Sat 01 Jan 2022 10:58:08 +0000
ROA not before: Sat 01 Jan 2022 10:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199667
IP address blocks: 213.109.37.0/24 maxlen: 24
213.109.38.0/24 maxlen: 24
128.127.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92695512 (0x5866bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jan 1 10:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=320a9acb90384bf3978d7c31ea3bdf6f14b92064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:c1:18:80:f8:27:07:93:7e:02:6a:aa:06:
b1:2a:48:89:3d:ef:34:d3:f4:87:35:90:7a:b3:00:
8f:48:84:95:e4:db:da:7d:a1:64:8e:65:d2:73:fc:
cb:60:a1:a6:3b:ef:46:37:5f:e2:74:a5:83:3c:0c:
40:df:ab:9b:a7:79:a6:b3:71:47:33:aa:4e:01:1e:
32:6a:34:2b:3e:51:eb:02:48:fa:de:8f:a6:25:5f:
35:d6:87:56:f3:d7:ff:93:00:09:0c:bd:a3:eb:be:
d5:82:3a:55:c8:3d:cc:61:6a:e1:8d:86:71:21:29:
6c:91:80:d3:9e:01:06:0c:f5:3d:41:fd:7a:95:99:
70:80:89:e9:1f:8a:63:5c:7a:ff:38:a1:be:b3:5a:
93:2b:27:be:04:08:a3:8c:c2:99:f4:24:e1:9a:eb:
32:35:ef:d2:f9:77:24:9d:f9:fb:82:df:ec:22:a8:
28:11:43:c2:72:4a:23:86:5e:46:74:f4:24:da:eb:
f8:da:40:03:08:51:cc:54:aa:a6:83:34:b0:15:26:
43:c1:a2:39:d4:96:cc:ec:6f:5c:1c:84:8e:3c:49:
df:af:61:99:fc:83:14:09:b2:58:04:86:14:c0:cb:
ab:61:f7:10:70:48:64:18:92:f8:5a:32:f5:fb:61:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:9A:CB:90:38:4B:F3:97:8D:7C:31:EA:3B:DF:6F:14:B9:20:64
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Mgqay5A4S_OXjXwx6jvfbxS5IGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.89.0/24
213.109.37.0-213.109.38.255
Signature Algorithm: sha256WithRSAEncryption
5e:99:61:f0:fb:cc:81:6e:7f:19:f9:a9:fa:86:99:62:f4:ca:
04:14:8e:48:24:16:eb:b1:52:f5:53:0a:21:91:02:4d:b9:d3:
8a:93:23:5c:30:53:75:93:bb:3c:b2:08:b9:35:05:f1:1a:12:
dd:e2:33:ba:6b:89:54:9a:41:14:61:d3:3e:99:00:ab:7b:6d:
6a:8d:be:3c:10:b8:4b:56:d5:69:65:bb:4f:5f:a1:5f:f3:ce:
83:78:99:b9:70:6e:a4:8b:7f:f5:9f:50:3c:08:63:d6:9a:41:
33:f8:35:43:37:68:39:66:f3:e3:47:93:5d:3a:34:d3:aa:2f:
fe:af:a3:4c:96:3c:bc:dd:7b:66:d7:ed:8a:91:bd:b9:4e:4e:
48:08:ea:56:d1:d9:31:d6:2f:d4:cc:dc:d4:f2:30:95:ec:46:
92:66:ea:62:81:d0:30:ce:53:20:93:2a:f4:49:ed:69:c5:9b:
de:ee:a8:c3:ff:ed:06:82:ba:44:35:7e:70:94:38:12:bf:d8:
7a:be:b2:ae:df:5b:78:28:27:d1:9f:e6:d7:5a:8b:ab:69:75:
a1:73:12:dc:bf:da:18:0d:cf:3f:b6:7b:33:db:72:0b:dd:9f:
6b:75:46:b9:b6:e9:ec:4d:fd:00:34:da:71:9e:07:3f:4f:e8:
9d:85:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:14 2024 by rpki-client on console-fra.rpki-client.org