Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/MbiblEKKiPGrsn0WDmtxFj-1ByE.roa
File: MbiblEKKiPGrsn0WDmtxFj-1ByE.roa (raw, json)
Hash identifier: 0XZjJGwizlLojSLh+Gxpy4v3CHrp3JNhOUMEUGUw4gA=
Subject key identifier: 31:B8:9B:94:42:8A:88:F1:AB:B2:7D:16:0E:6B:71:16:3F:B5:07:21
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 0182EF38A3C57AC7B5B49DEC7E3B4329E293
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/MbiblEKKiPGrsn0WDmtxFj-1ByE.roa
Signing time: Tue 30 Aug 2022 14:47:22 +0000
ROA not before: Tue 30 Aug 2022 14:47:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197081
IP address blocks: 95.131.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:38:a3:c5:7a:c7:b5:b4:9d:ec:7e:3b:43:29:e2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Aug 30 14:47:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31b89b94428a88f1abb27d160e6b71163fb50721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:22:c9:be:36:2b:92:05:12:06:3d:7b:04:
17:0f:5e:4e:6a:54:5b:f7:be:20:f7:ba:61:68:f6:
10:77:86:23:6b:9d:06:44:97:0c:ae:a5:68:01:00:
fd:23:b9:c3:22:33:00:e2:12:e3:30:7b:c8:cd:9d:
b0:46:5d:53:00:1d:03:40:af:9e:d6:13:79:4f:fc:
13:04:7d:fd:6d:bf:af:1a:a5:a0:20:9f:70:f1:7e:
7f:64:24:54:9f:d0:c5:21:d5:28:e3:16:31:ab:29:
96:3a:36:91:8d:14:4b:52:97:00:67:53:87:d3:55:
7c:6c:4b:d2:d4:af:1f:ca:c9:53:91:39:cc:3d:3c:
5b:0b:bf:30:08:7b:3f:7a:8b:f2:0f:83:b0:ab:b0:
84:89:76:5e:2f:bb:dd:6e:36:7e:f5:c8:31:f3:1e:
a4:66:8f:2f:fa:4f:6d:b8:69:c9:82:5e:83:fc:1a:
5b:62:f6:55:73:7f:26:d6:09:da:6f:af:94:5d:da:
a7:66:a3:cf:ac:4e:88:e2:99:da:f6:ef:e4:cc:ab:
ad:bf:1d:4a:97:e4:6c:39:8a:a9:38:d6:7e:ed:79:
63:4a:df:b6:ad:1a:52:c7:a4:fa:9d:7b:8a:c4:56:
3c:a8:9b:44:99:a2:11:e6:7d:4d:80:85:fc:fa:6f:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:9B:94:42:8A:88:F1:AB:B2:7D:16:0E:6B:71:16:3F:B5:07:21
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/MbiblEKKiPGrsn0WDmtxFj-1ByE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.16.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:dd:d6:4a:28:0b:92:f3:46:ef:d9:16:32:a5:cb:51:f7:8c:
9f:2f:2c:00:58:30:53:8a:c3:35:d3:b0:36:1e:3c:f3:ef:4e:
a6:03:a8:b8:49:f1:83:33:9a:ba:38:55:39:a1:0f:1a:13:ba:
b1:a0:c0:a6:b3:ac:f4:31:75:bc:9a:d9:13:63:c2:36:bc:ab:
c2:66:27:0c:a0:60:58:6b:1e:c8:80:0b:32:9d:fd:50:84:94:
e6:39:54:1f:3f:d2:e4:00:fe:88:30:60:bc:b7:c9:26:98:f8:
2e:56:69:27:38:da:e5:5f:ea:a0:3c:a9:81:63:85:d7:b8:45:
b4:cf:f3:58:97:26:6b:e7:77:36:7d:7e:8b:f8:19:ff:54:c1:
4b:a5:f6:81:b7:12:77:8e:c8:94:3f:52:a1:14:71:c0:8c:9a:
6d:b6:a3:10:53:4f:f3:e9:f8:88:9f:32:ac:12:01:a1:a4:fc:
e1:70:57:ec:90:be:ae:17:6f:5c:92:d1:c7:bd:98:67:7d:2d:
41:06:6c:6d:ac:15:6f:94:e0:e9:35:d2:94:62:93:66:f8:3f:
aa:b3:54:ac:25:df:8d:5b:69:9f:5c:d0:d2:95:74:0d:10:95:
0d:f1:d0:77:6d:55:cb:f4:ea:10:45:3c:33:f4:10:90:74:fa:
12:4f:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:08 2023 by rpki-client on console-fra.rpki-client.org