Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MnukbRbYqoccIS4UOAvn8mP346Q.roa
File: MnukbRbYqoccIS4UOAvn8mP346Q.roa (raw, json)
Hash identifier: 3mE087cAWCF+mbmbCTUytpBkfehiQD8aQpJ5fcl2qTw=
Subject key identifier: 32:7B:A4:6D:16:D8:AA:87:1C:21:2E:14:38:0B:E7:F2:63:F7:E3:A4
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 178DF66F
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MnukbRbYqoccIS4UOAvn8mP346Q.roa
Signing time: Sat 01 Jan 2022 13:03:17 +0000
ROA not before: Sat 01 Jan 2022 13:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48646
IP address blocks: 31.47.239.0/24 maxlen: 24
94.247.46.0/23 maxlen: 24
94.247.45.0/24 maxlen: 24
178.251.225.0/24 maxlen: 24
178.251.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395179631 (0x178df66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=327ba46d16d8aa871c212e14380be7f263f7e3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:d6:23:03:a8:d3:4a:18:f3:9a:14:cf:bb:
18:bd:e5:26:7a:d3:ea:06:71:81:82:4e:ee:e8:9e:
41:d6:c1:ef:33:e4:f6:4f:ca:56:4c:16:8d:7a:33:
c3:76:99:7c:ee:6a:84:24:50:d7:75:f8:a0:92:b4:
b9:29:3a:4d:72:fe:73:d3:c8:91:ab:07:15:b6:46:
26:72:8d:4e:d9:5b:f8:9c:64:bf:0e:39:50:c8:d7:
d2:59:c6:a3:9b:8f:59:44:18:a0:dd:31:84:ec:75:
85:37:c3:d3:35:57:7b:f0:c6:e5:a0:65:94:77:48:
e3:12:20:48:48:6a:1b:87:c8:45:b5:b4:11:98:79:
52:c2:06:03:b9:57:a3:72:46:f3:a0:1e:dc:ed:38:
b4:35:50:c8:09:3a:ce:d4:21:7c:70:5e:46:13:7a:
73:ff:15:03:e1:97:7b:49:7c:d3:e6:31:aa:aa:9f:
0f:71:b7:ff:3e:43:63:ec:1d:27:af:66:26:ed:5b:
e2:41:4a:64:22:0f:05:71:c9:27:a0:9a:ca:f5:12:
5a:20:80:be:71:cb:bd:bc:0c:4f:48:5a:f6:99:cb:
19:88:b7:4b:cb:c2:93:66:29:e3:da:95:e4:ad:8c:
e7:98:86:71:cd:38:c7:01:2a:8a:81:76:6b:7f:42:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7B:A4:6D:16:D8:AA:87:1C:21:2E:14:38:0B:E7:F2:63:F7:E3:A4
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MnukbRbYqoccIS4UOAvn8mP346Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.239.0/24
94.247.45.0-94.247.47.255
178.251.225.0-178.251.226.255
Signature Algorithm: sha256WithRSAEncryption
40:1b:ab:04:23:0b:03:56:19:07:86:5a:36:59:52:7f:3b:0b:
a1:8f:ed:a6:41:e2:b5:36:71:62:a6:e7:5d:05:2d:3d:e8:61:
c5:10:5f:6f:2d:87:64:b2:ac:83:dc:0d:f4:22:3b:a8:bb:81:
94:cb:08:ed:16:d6:8a:a4:ae:4a:8e:10:13:36:99:91:0f:9e:
c1:09:f7:d2:51:0b:2e:40:b0:f1:4e:80:5c:ac:a8:8a:67:88:
f0:b5:ba:ff:d7:8d:a4:c9:55:6c:66:9c:5e:b2:7e:b4:22:de:
65:53:b2:ad:d0:85:a8:14:08:6b:f1:32:d0:df:4f:b3:54:d1:
b9:f9:c6:17:a4:ea:8f:04:6f:eb:66:5a:5a:73:1c:c1:5b:6a:
71:de:33:7e:ab:78:7e:49:01:3e:1c:9f:b3:68:5f:b5:13:81:
3c:91:86:b9:4c:0e:46:50:87:2c:54:35:02:89:b9:55:c9:91:
93:26:83:8d:d4:35:09:cb:73:c3:52:cd:9c:2f:11:9e:ab:87:
8a:76:57:c3:fe:f9:ea:57:dc:92:ce:8c:51:15:f4:15:d2:be:
b1:8b:b2:28:0c:ad:44:83:07:18:62:da:89:67:de:26:d4:26:
4d:c9:9c:a6:2e:2f:ec:ce:c4:af:b6:2c:dc:af:7d:8b:16:5a:
f9:ea:e0:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org