Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MlmlPAtkXYo8oB7zm9q_fI36i2s.roa
File: MlmlPAtkXYo8oB7zm9q_fI36i2s.roa (raw, json)
Hash identifier: 3q3OEl1aPc8QwM2phJ4wyQdtHjt+v4fIYEwNqH4iebQ=
Subject key identifier: 32:59:A5:3C:0B:64:5D:8A:3C:A0:1E:F3:9B:DA:BF:7C:8D:FA:8B:6B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0B6F386B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MlmlPAtkXYo8oB7zm9q_fI36i2s.roa
Signing time: Mon 14 Mar 2022 19:35:54 +0000
ROA not before: Mon 14 Mar 2022 19:35:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42295
IP address blocks: 91.229.132.0/24 maxlen: 24
91.229.133.0/24 maxlen: 24
91.229.135.0/24 maxlen: 24
91.229.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191838315 (0xb6f386b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Mar 14 19:35:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3259a53c0b645d8a3ca01ef39bdabf7c8dfa8b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:bc:53:87:e7:79:c7:55:4e:bb:10:01:fe:
09:df:fd:3e:f9:f8:a7:f6:0c:5f:08:9e:c5:1f:c9:
34:ac:6f:1a:a1:9d:f3:8b:3a:00:73:f1:15:87:97:
4c:8c:cf:08:49:d7:1b:be:af:e2:07:02:94:ed:b3:
0b:5e:54:f8:d5:2c:a6:37:8e:c8:a2:7d:4f:cf:f5:
ce:78:53:6d:af:d0:2c:de:4e:20:2d:63:0b:8a:98:
b7:16:2f:18:9e:29:5a:b2:f8:8f:ab:84:1f:a0:f6:
b2:56:40:e4:3c:10:fe:e9:44:69:a0:aa:43:7a:a3:
71:a8:88:d7:91:99:00:69:4e:9a:0f:78:fd:58:58:
6d:14:64:75:35:91:04:05:fa:b9:c9:64:25:7b:ed:
64:86:41:8c:eb:f2:39:74:d2:ee:d5:b0:b5:36:bc:
aa:8c:12:74:9c:7b:00:c2:b4:8a:10:35:d1:78:4c:
6b:72:43:dd:d6:92:c1:55:32:9e:c7:70:7f:76:5f:
5b:77:29:f5:eb:cc:07:43:3f:96:a8:ca:74:3b:cb:
e1:1d:aa:f3:fe:0c:c0:21:c6:cc:ba:0a:cf:34:57:
e5:f3:65:97:d2:fb:4f:38:4d:67:36:4d:ae:2b:57:
08:03:bd:19:1b:a3:c0:e0:ee:b1:7e:af:c6:f5:4d:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:A5:3C:0B:64:5D:8A:3C:A0:1E:F3:9B:DA:BF:7C:8D:FA:8B:6B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MlmlPAtkXYo8oB7zm9q_fI36i2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:20:0e:b2:13:1d:71:bb:4c:c3:d6:b4:83:c3:f4:a4:13:9c:
c5:e0:55:3e:2a:51:5f:c6:13:08:25:d6:24:2a:91:f1:23:ae:
c8:39:a8:19:61:50:d8:0f:62:65:60:2a:1f:2b:fe:e9:ca:b1:
5d:67:4d:6e:74:c0:14:ae:4d:fa:4e:3f:c3:01:5d:67:f6:0b:
72:ef:54:79:87:04:f7:c0:16:3e:9e:f4:0c:28:4d:21:07:a1:
f1:cb:df:2e:7f:8a:23:4d:99:e6:aa:8f:79:22:6e:4c:e4:0e:
65:4e:5c:87:dd:00:b6:86:a9:30:c0:1a:73:10:76:e9:1e:67:
89:d2:de:42:b0:28:22:6d:14:0e:6b:cf:25:6f:9c:1c:90:8e:
10:31:61:eb:fa:b3:56:cc:57:23:58:c0:a6:bf:59:71:7d:f1:
cc:bb:b7:cf:1c:8b:13:a7:24:7c:c6:e8:ad:d4:07:f5:d8:d4:
ec:66:99:60:b9:f7:4d:f2:9f:ad:6d:f2:ae:dc:af:64:09:0a:
01:c0:60:6a:ec:d9:f4:c5:a7:37:91:b8:d0:8b:63:fb:36:3b:
8c:97:28:45:3c:90:d6:e1:c4:df:fe:2b:58:f4:26:96:27:45:
da:0d:b3:7e:41:b2:c3:be:d9:7a:e5:e4:68:b3:17:00:b3:bb:
0c:7c:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org