Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/mbc05Mn5KdwMZ2QHfyTunoqt6DI.roa
File: mbc05Mn5KdwMZ2QHfyTunoqt6DI.roa (raw, json)
Hash identifier: i3NbyOdP4uWYYrjiTOP63qGrufumwdN7Nh11sags57c=
Subject key identifier: 99:B7:34:E4:C9:F9:29:DC:0C:67:64:07:7F:24:EE:9E:8A:AD:E8:32
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 0188B93D9F443B91A9D4A924B62FE5DA039E
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/mbc05Mn5KdwMZ2QHfyTunoqt6DI.roa
Signing time: Wed 14 Jun 2023 09:30:03 +0000
ROA not before: Wed 14 Jun 2023 09:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49181
IP address blocks: 176.96.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:3d:9f:44:3b:91:a9:d4:a9:24:b6:2f:e5:da:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jun 14 09:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99b734e4c9f929dc0c6764077f24ee9e8aade832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:0b:c8:9d:f5:0e:55:b2:3a:63:6c:1d:f4:
4d:08:59:85:5f:e9:82:77:d9:48:cf:65:6d:8b:6a:
3e:28:4f:19:30:2a:1e:7a:1b:7b:86:60:49:a3:8e:
39:56:34:68:b3:5b:82:e5:d8:3c:1d:b3:d0:f3:8f:
5a:96:8c:e8:5c:0e:6b:2f:c1:39:cb:5b:08:c2:9e:
48:be:58:e0:fc:93:64:fd:fe:9c:d0:c6:92:7c:4d:
95:60:a1:49:df:35:f2:da:fc:03:59:fa:81:99:7f:
9c:40:d7:ff:25:7e:94:9e:40:9a:22:10:b0:cf:ef:
d8:38:9c:40:b0:7f:ad:b5:8d:34:d7:bf:ef:68:60:
04:1c:fe:71:c7:c6:58:49:f7:d8:98:b7:3c:ac:95:
b9:59:85:64:85:ed:dd:49:6c:d9:c9:8d:04:67:1c:
39:31:53:ac:72:e3:36:fb:be:95:e5:b9:37:3c:4b:
4c:39:73:ff:f3:fd:1d:ad:18:61:b3:18:dc:e3:66:
f2:09:95:33:17:40:70:06:91:34:86:d7:74:4b:d5:
16:91:f2:76:94:10:25:a0:26:22:0e:02:57:40:55:
1e:5b:b4:ae:85:2f:4d:ad:ed:93:77:06:c5:d8:82:
5c:77:fd:c0:51:63:59:f9:f0:d0:70:f5:16:ab:b1:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:34:E4:C9:F9:29:DC:0C:67:64:07:7F:24:EE:9E:8A:AD:E8:32
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/mbc05Mn5KdwMZ2QHfyTunoqt6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c2:84:38:e3:93:aa:4c:ed:fa:f9:10:2d:bb:47:a7:cc:e7:
10:1b:83:f6:ca:9d:ce:37:ec:d1:7c:9d:6a:53:39:dc:88:e8:
dd:97:1a:f5:45:54:8b:38:3a:34:c2:4e:d7:82:5f:f1:21:c1:
fe:71:da:fc:17:96:f7:2b:87:0a:c4:e5:b0:f1:66:6f:44:42:
25:81:22:63:54:cf:fe:0e:b9:2e:97:c8:a9:76:79:23:6d:30:
56:13:fb:ba:7c:ad:b6:a3:b1:f7:48:7e:e4:9d:36:02:6e:f6:
2a:fe:dd:c6:a6:e7:cc:aa:c0:f7:ab:e6:2b:49:93:7e:ee:17:
df:5a:2c:ba:52:fa:fc:8a:a1:6e:6d:ed:f0:9d:ff:f1:63:78:
8b:72:e7:43:f4:d7:0b:5d:3c:05:b3:42:c5:69:2c:78:93:2e:
ef:c6:5f:da:35:02:73:2c:63:58:62:4d:da:f4:d3:d0:d1:48:
9b:fb:3e:44:9e:50:75:b3:b8:b0:1c:2f:89:19:9c:e2:95:6a:
27:41:ad:52:b2:f1:71:e9:bd:13:79:ff:09:1c:16:7d:77:6f:
21:f6:0c:60:a5:66:9f:20:ad:75:e2:2c:12:cf:c4:2c:ed:5b:
6d:52:7a:c6:6b:4a:9a:98:1a:80:6b:ee:3d:ee:e5:d7:db:88:
0f:16:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:46 2025 by rpki-client