Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/MG1SGaoF18Z_gEG3SdDX1SeEI34.roa
File: MG1SGaoF18Z_gEG3SdDX1SeEI34.roa (raw, json)
Hash identifier: b7vqwmCLsINQK05MSizZjhoC0FDqNQOic6rgAjCZJKU=
Subject key identifier: 30:6D:52:19:AA:05:D7:C6:7F:80:41:B7:49:D0:D7:D5:27:84:23:7E
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0555A7F5
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/MG1SGaoF18Z_gEG3SdDX1SeEI34.roa
Signing time: Sat 01 Jan 2022 03:02:20 +0000
ROA not before: Sat 01 Jan 2022 03:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9989
IP address blocks: 176.121.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89499637 (0x555a7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 1 03:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=306d5219aa05d7c67f8041b749d0d7d52784237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:77:89:98:aa:8f:b0:45:6d:ed:3a:fa:75:
cd:9b:0a:11:c5:f8:0b:bc:26:61:1f:98:82:0f:e5:
9f:d4:a8:df:77:94:26:dd:8d:06:2c:cf:db:58:e2:
d2:c0:88:ee:2d:48:f9:ec:55:ec:e2:2a:3a:d9:a3:
be:52:56:41:e7:2a:e2:9d:0a:ab:ea:d6:bc:6b:41:
9c:40:eb:d5:74:7d:c0:fd:db:bb:f1:04:2c:05:bc:
db:37:0c:13:2d:63:13:16:57:26:94:25:63:92:51:
72:f6:f2:d7:4d:53:f5:40:45:af:d4:ed:0f:c9:91:
ff:9b:fb:5f:0b:25:28:09:fc:64:21:29:31:9a:02:
e2:95:a9:ae:32:55:43:2d:68:30:ce:0b:d5:ab:fc:
67:50:05:c8:d1:d8:fb:12:e4:77:ef:05:ef:69:ce:
53:8a:bc:4f:39:08:62:20:ba:94:46:e8:e7:83:3d:
5a:62:f1:d2:e5:6c:41:75:60:97:47:23:ef:c4:0f:
3b:3f:4b:2c:31:80:79:19:9e:a7:54:83:63:80:c2:
6a:b0:95:72:d0:99:78:b0:61:1b:28:31:60:54:00:
64:2e:af:ad:b9:6a:6a:c5:08:6c:07:68:49:74:66:
c8:50:66:f9:92:54:87:87:cd:26:d3:b9:6b:df:78:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:52:19:AA:05:D7:C6:7F:80:41:B7:49:D0:D7:D5:27:84:23:7E
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/MG1SGaoF18Z_gEG3SdDX1SeEI34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.95.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e3:b9:39:7e:be:e0:ea:9d:cd:ea:65:46:27:fd:16:07:5c:
fd:59:21:e5:54:6f:e0:4d:34:e7:48:f9:cf:cf:87:28:44:7e:
6a:70:5a:9e:4e:64:68:61:9d:51:33:7d:3e:11:88:16:c9:13:
34:0e:9b:bf:a3:81:ea:04:9f:ed:48:93:89:5f:4d:2c:15:63:
ca:0c:60:f2:7e:ac:3b:2b:dc:64:a9:8b:d4:c3:e5:a0:92:eb:
d5:ab:17:b8:30:96:2e:df:15:d9:5e:b0:de:d9:d7:2e:18:35:
a9:f0:35:97:dd:ca:79:95:7f:c0:99:7d:e6:27:08:21:08:cf:
df:04:09:74:a6:e5:00:25:a5:af:36:bf:b8:8d:d0:43:0e:a8:
41:0f:5c:51:4d:fe:ad:97:da:55:2e:01:1d:f6:33:46:a5:ed:
ab:60:f5:60:19:05:3f:41:cd:fa:7d:1a:e3:44:53:2d:6c:53:
22:fe:8b:31:fe:90:18:16:25:ec:2f:93:40:07:d2:cf:f9:7b:
e7:f2:52:71:ee:61:78:f7:df:a1:a8:08:e1:0c:96:0e:84:cf:
ea:68:ef:08:c6:a6:93:1f:1a:85:f4:7d:f4:0a:49:4f:8b:28:
b8:d4:bc:4b:d0:de:dc:fd:73:a3:16:ab:5d:1b:3c:ae:c9:91:
2a:2f:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:59 2024 by rpki-client on console-fra.rpki-client.org