Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MbOeRrvPT0L2VdPdmC4tTsxUr-U.roa
File: MbOeRrvPT0L2VdPdmC4tTsxUr-U.roa (raw, json)
Hash identifier: Pn3oc7bRFKj3euMXFWf8DNtTvTltcD3VjMqNCXcDctQ=
Subject key identifier: 31:B3:9E:46:BB:CF:4F:42:F6:55:D3:DD:98:2E:2D:4E:CC:54:AF:E5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01850AA832A2B6A84F7736BED9D9CD4F5902
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MbOeRrvPT0L2VdPdmC4tTsxUr-U.roa
Signing time: Tue 13 Dec 2022 08:44:33 +0000
ROA not before: Tue 13 Dec 2022 08:44:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29217
IP address blocks: 194.68.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:a8:32:a2:b6:a8:4f:77:36:be:d9:d9:cd:4f:59:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Dec 13 08:44:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31b39e46bbcf4f42f655d3dd982e2d4ecc54afe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:1b:0c:37:01:73:e4:06:55:34:3f:c1:94:
87:83:cf:88:3c:ad:fb:2a:13:42:1e:7a:be:13:21:
03:a7:fa:6d:6d:a5:06:16:87:5b:7a:3d:d2:49:75:
8d:85:24:f4:5c:50:d4:d2:4c:c3:3d:89:84:29:90:
0a:d1:08:f1:78:8a:dc:da:9f:d4:4d:4f:89:f8:f9:
69:fc:57:58:e5:66:c6:b8:09:ee:f5:32:7b:f4:45:
ce:59:7a:e8:ed:eb:b3:19:9e:cb:82:0c:8a:c3:6e:
00:a0:74:34:6e:87:f5:66:f1:64:8a:65:05:1f:96:
34:e9:9e:f8:a6:bd:49:46:cd:b2:00:6e:b6:14:25:
23:2c:4b:06:f7:4a:32:40:fb:9e:34:14:6f:26:28:
f7:72:32:24:3c:26:68:74:95:e9:71:80:8b:a6:44:
77:de:2b:41:ec:63:dd:e3:48:94:7d:5c:11:0a:7f:
80:40:79:ef:c4:f0:54:06:c8:d6:52:82:65:8b:a2:
10:c8:29:eb:82:8c:53:ed:f2:ea:ff:0a:a2:6a:ed:
90:ee:d3:c5:04:d7:04:b9:19:d2:fc:a0:51:57:f3:
1c:29:ae:34:90:ab:89:4c:5a:19:18:67:14:ec:80:
79:e1:e5:42:b8:a0:be:8b:f7:ef:3a:f9:1a:eb:9f:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B3:9E:46:BB:CF:4F:42:F6:55:D3:DD:98:2E:2D:4E:CC:54:AF:E5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MbOeRrvPT0L2VdPdmC4tTsxUr-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.78.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ef:16:22:1b:c3:e4:71:3d:0f:58:b2:3e:ca:55:31:0b:c5:
7b:e5:7e:84:bc:ba:9a:e8:18:a1:99:e1:d5:75:6a:af:de:9b:
f1:94:28:ae:56:36:5d:f5:be:d3:a6:d3:40:16:d9:69:fa:d1:
19:0d:7b:a9:75:46:ef:19:40:41:b4:c3:2c:a1:1b:11:68:03:
b7:8b:54:cd:8d:f5:9d:26:03:b1:fe:f7:10:16:b0:b8:85:15:
00:4c:81:98:49:97:e2:0b:ea:38:f1:65:cc:70:d4:ca:11:61:
ea:be:e8:8c:48:4f:35:22:9e:34:c8:05:c9:4e:43:15:52:70:
9c:d0:8b:e6:f9:0d:e1:e3:49:c0:51:18:74:75:96:93:6b:6f:
09:a3:14:fc:ed:56:44:6d:2d:db:45:a2:51:54:7d:22:39:2b:
0a:2e:87:0d:60:78:1d:40:96:70:6b:29:31:5b:e3:c9:d4:99:
b5:59:d1:db:e3:48:0a:fc:d4:71:10:96:b6:36:5a:40:70:a3:
d1:bb:4d:4d:93:f4:c0:3f:02:17:24:e9:84:1b:c9:b9:08:2d:
3c:fa:99:b1:33:a6:1c:b0:7d:c4:f9:c5:72:5a:c5:e4:92:65:
9d:18:a0:10:71:16:65:85:e8:fb:24:b3:c5:96:7a:06:3b:c3:
c7:ac:76:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUKqDKitqhPdza+2dnNT1kCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjIxMjEzMDg0NDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWIzOWU0NmJiY2Y0ZjQyZjY1NWQzZGQ5ODJlMmQ0ZWNjNTRhZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXIbDDcBc+QGVTQ/wZSHg8+IPK37
KhNCHnq+EyEDp/ptbaUGFodbej3SSXWNhST0XFDU0kzDPYmEKZAK0QjxeIrc2p/U
TU+J+Plp/FdY5WbGuAnu9TJ79EXOWXro7euzGZ7LggyKw24AoHQ0bof1ZvFkimUF
H5Y06Z74pr1JRs2yAG62FCUjLEsG90oyQPueNBRvJij3cjIkPCZodJXpcYCLpkR3
3itB7GPd40iUfVwRCn+AQHnvxPBUBsjWUoJli6IQyCnrgoxT7fLq/wqiau2Q7tPF
BNcEuRnS/KBRV/McKa40kKuJTFoZGGcU7IB54eVCuKC+i/fvOvka658COwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDGznka7z09C9lXT3ZguLU7MVK/lMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTWJPZVJydlBUMEwyVmRQZG1DNHRUc3hVci1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkROMA0G
CSqGSIb3DQEBCwUAA4IBAQC77xYiG8PkcT0PWLI+ylUxC8V75X6EvLqa6BihmeHV
dWqv3pvxlCiuVjZd9b7TptNAFtlp+tEZDXupdUbvGUBBtMMsoRsRaAO3i1TNjfWd
JgOx/vcQFrC4hRUATIGYSZfiC+o48WXMcNTKEWHqvuiMSE81Ip40yAXJTkMVUnCc
0Ivm+Q3h40nAURh0dZaTa28JoxT87VZEbS3bRaJRVH0iOSsKLocNYHgdQJZwaykx
W+PJ1Jm1WdHb40gK/NRxEJa2NlpAcKPRu01Nk/TAPwIXJOmEG8m5CC08+pmxM6Yc
sH3E+cVyWsXkkmWdGKAQcRZlhej7JLPFlnoGO8PHrHYu
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org