Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MfuYqXjBzDU0543a0GMkHAeyMmg.roa
File: MfuYqXjBzDU0543a0GMkHAeyMmg.roa (raw, json)
Hash identifier: q+bPb7hW0AVZ5G7o2nIHrvtXBtNtYLJDX9RQuCHQqhg=
Subject key identifier: 31:FB:98:A9:78:C1:CC:35:34:E7:8D:DA:D0:63:24:1C:07:B2:32:68
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0182E89BEF2174DDD6FA27A2CED1390BCCF9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MfuYqXjBzDU0543a0GMkHAeyMmg.roa
Signing time: Mon 29 Aug 2022 07:58:29 +0000
ROA not before: Mon 29 Aug 2022 07:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1257
IP address blocks: 193.234.87.0/24 maxlen: 24
192.71.220.0/24 maxlen: 24
193.180.247.0/24 maxlen: 24
192.71.180.0/24 maxlen: 24
193.180.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:9b:ef:21:74:dd:d6:fa:27:a2:ce:d1:39:0b:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 29 07:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31fb98a978c1cc3534e78ddad063241c07b23268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:b4:74:38:c4:6f:5b:88:ff:4e:4b:8b:c7:
6a:1c:25:3e:e3:a1:5d:33:ab:21:4a:79:89:88:2c:
8f:9c:ba:a2:b9:a1:aa:c3:14:04:33:0f:0e:2f:32:
2d:ad:4a:7c:1f:ad:68:d5:b2:ff:b1:ba:77:ed:dd:
58:4a:5d:c0:b1:b4:eb:c1:e8:e9:45:83:f4:26:78:
29:6b:3b:62:b9:50:3d:33:58:02:d2:f6:73:62:28:
82:cc:20:ce:19:d9:e1:b5:80:71:d9:b4:c8:90:f3:
2c:ef:4d:03:2e:63:b4:33:0e:e0:05:05:85:75:04:
67:2e:3c:e9:30:af:f4:aa:93:3f:a1:16:c5:88:90:
72:17:5c:d4:79:0f:3e:88:05:45:08:1e:09:fc:84:
a5:c8:77:c4:2d:38:b9:ad:35:10:f1:d7:11:d4:c2:
06:c7:46:ba:8d:7a:7c:10:ef:47:86:c8:21:b4:7c:
5e:bb:07:3f:13:cf:df:f3:fd:12:be:95:17:dd:89:
e8:95:e7:ce:5b:6c:85:7f:fb:9b:47:26:5b:52:c1:
ef:ab:5f:6c:29:90:a9:a8:66:80:ab:ab:fd:2f:b9:
f6:52:30:5f:bf:56:6b:32:c7:98:87:94:60:cd:42:
84:11:55:06:99:1c:a0:1e:a8:fc:d4:30:cd:20:a2:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:98:A9:78:C1:CC:35:34:E7:8D:DA:D0:63:24:1C:07:B2:32:68
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MfuYqXjBzDU0543a0GMkHAeyMmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.180.0/24
192.71.220.0/24
193.180.207.0/24
193.180.247.0/24
193.234.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0e:f9:e8:74:c8:90:40:56:a0:c0:ff:1d:74:5a:37:9c:d5:
7b:11:f0:df:18:73:ec:70:de:59:af:58:ff:33:3c:85:e3:f1:
63:a3:dc:3c:62:fe:26:45:ed:6f:bf:a3:84:81:ee:27:b8:fc:
6b:da:f4:00:46:d9:78:cf:2f:a1:78:2a:04:85:8c:94:53:83:
2a:03:ec:8c:29:d4:92:0f:92:9d:cd:2d:5a:3f:6c:e1:13:70:
7d:34:0b:4f:29:3d:b8:f5:da:9f:bb:93:96:db:31:e0:ce:fe:
9e:fb:f1:86:da:c1:02:2f:ef:08:17:87:29:5d:b7:76:39:be:
44:6e:6f:44:8f:41:5f:1a:da:db:35:fa:3a:ec:67:5d:15:26:
82:4d:42:a4:6d:5d:6e:e4:15:70:34:a2:12:3c:35:5b:ca:45:
4d:36:ab:f2:c2:2e:99:42:7f:8f:62:aa:e6:b1:6c:44:a1:cb:
b2:d0:8c:38:fb:0b:f1:34:2d:9d:9d:b1:89:3f:1b:b9:70:29:
17:40:7e:3d:6a:03:e6:b6:07:61:b6:d2:1a:47:57:f2:26:f3:
83:4c:de:10:63:e3:75:bf:06:cc:b5:b5:ed:cb:3b:16:75:95:
52:10:85:8f:c3:c5:b8:de:21:0f:76:57:b1:05:64:9d:f6:17:
3a:1f:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org