Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/MagP0a6mNdAukW_Px4BwWCtOvDk.roa
File: MagP0a6mNdAukW_Px4BwWCtOvDk.roa (raw, json)
Hash identifier: YnFhuTuMcEUqBOIG4IQGxXScrnc606arccW1/48zQ6c=
Subject key identifier: 31:A8:0F:D1:AE:A6:35:D0:2E:91:6F:CF:C7:80:70:58:2B:4E:BC:39
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0182C46343223C3DC4E3199011A17596482D
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/MagP0a6mNdAukW_Px4BwWCtOvDk.roa
Signing time: Mon 22 Aug 2022 07:10:15 +0000
ROA not before: Mon 22 Aug 2022 07:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 37.143.0.0/22 maxlen: 24
37.143.4.0/22 maxlen: 24
46.28.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:63:43:22:3c:3d:c4:e3:19:90:11:a1:75:96:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Aug 22 07:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31a80fd1aea635d02e916fcfc78070582b4ebc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:f9:cf:96:b6:e0:35:e5:79:5d:71:60:d5:
3a:ec:83:29:32:45:d5:3e:f4:dc:8d:ef:55:01:7a:
69:21:46:94:9c:dd:b5:40:5e:b5:08:ab:94:b9:d8:
1b:a2:c3:b9:9d:d0:a8:93:af:1c:b1:08:4c:bb:58:
c8:b6:24:8a:cc:3e:38:fe:72:09:c9:fe:7c:09:1e:
c8:d1:34:ce:7c:56:ee:df:d1:a4:b5:15:49:9b:5c:
26:a2:bc:71:9a:82:7a:32:71:f6:aa:7d:eb:80:81:
98:be:29:f4:10:9c:e5:e8:e9:26:5b:c1:a3:55:86:
56:c0:74:39:a0:39:a6:33:22:a0:5e:06:88:22:94:
68:e9:be:aa:86:6b:87:f4:1b:a2:e4:59:5b:6f:02:
a2:5b:d0:b6:25:ac:55:83:c0:67:11:87:2d:38:23:
9c:d1:d6:d9:7f:88:f2:a3:ab:4c:d7:81:e6:37:82:
fc:8c:50:23:22:9a:2d:f4:6f:0c:c3:3b:79:3f:74:
28:8a:5a:fb:92:2d:83:9e:58:1d:88:b9:9f:9d:4c:
cb:20:68:78:8f:b4:f0:63:a3:59:95:65:82:9c:eb:
3f:6d:4b:db:45:19:32:d9:c0:34:ee:64:67:d8:22:
92:42:fe:aa:19:10:6b:db:06:9a:70:07:42:08:6e:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:0F:D1:AE:A6:35:D0:2E:91:6F:CF:C7:80:70:58:2B:4E:BC:39
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/MagP0a6mNdAukW_Px4BwWCtOvDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/21
46.28.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:a0:59:8e:87:d6:c4:7f:3d:e3:71:2b:0e:b0:0c:d7:e5:eb:
ef:b3:77:c5:17:b7:f5:54:82:05:5c:09:a0:7d:b7:cb:cf:b3:
4f:8f:e5:0f:72:55:74:49:1b:56:c8:3c:e8:57:0f:8b:e8:29:
8a:60:d4:e8:92:d1:4b:5a:0e:c7:16:31:d1:76:c9:8b:b8:62:
f0:83:a3:f1:0b:81:f4:90:bb:26:df:02:bb:15:0e:91:2e:62:
fc:0e:8a:2a:7c:af:96:0f:1d:15:45:31:8e:d9:4e:a3:78:0a:
70:59:db:7f:96:1a:21:74:e2:fc:c7:81:d1:42:4b:d5:94:b1:
1d:8a:c0:0c:41:9d:1a:97:cd:4d:a9:90:61:8f:3c:98:37:d9:
66:b6:b8:83:fd:37:a1:ce:74:6a:fe:2a:19:7a:fa:f7:f8:02:
a5:be:cb:b4:c7:40:8d:9d:a4:79:70:be:fb:fb:30:e8:05:e3:
e1:27:35:0a:37:56:15:e3:0b:b7:31:3d:81:af:f8:ae:16:74:
c9:1b:f0:63:6e:1f:99:c4:2b:ac:8b:eb:be:30:6a:cc:51:fb:
ef:1b:8e:b1:d1:1b:3f:73:d2:9d:ff:c4:05:1f:b0:b6:96:9a:
a6:d5:7b:7f:b6:c7:9b:4f:05:63:3b:41:55:da:98:8d:70:2e:
db:2e:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:41 2023 by rpki-client on console-fra.rpki-client.org