Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mrXGyaxRs2Re_bgmjuxdNHYP8lg.roa
File: mrXGyaxRs2Re_bgmjuxdNHYP8lg.roa (raw, json)
Hash identifier: gMkG/sZ3BIbgmfI4HCqaHXtf+9F7PwLTqsowKbCburc=
Subject key identifier: 9A:B5:C6:C9:AC:51:B3:64:5E:FD:B8:26:8E:EC:5D:34:76:0F:F2:58
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42C1DB52
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mrXGyaxRs2Re_bgmjuxdNHYP8lg.roa
Signing time: Wed 19 Jan 2022 11:18:47 +0000
ROA not before: Wed 19 Jan 2022 11:18:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8473
IP address blocks: 194.71.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120000850 (0x42c1db52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 19 11:18:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ab5c6c9ac51b3645efdb8268eec5d34760ff258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:14:9f:2e:c5:f9:94:2c:c8:57:01:af:d4:
dd:4d:e0:1e:25:a0:08:46:88:07:0a:d3:58:f3:0a:
f2:73:3b:94:5b:9b:b0:0f:4a:5f:b6:09:71:b5:28:
95:fe:94:57:44:73:66:fd:0f:c6:ba:be:21:9c:13:
c5:14:89:3c:d6:39:e8:c8:5d:4c:d9:6d:c0:ce:59:
c5:8e:bb:b4:33:f0:78:23:58:79:e9:0e:f2:6e:bf:
8d:32:5b:dc:66:a2:60:ad:33:07:2c:4d:7a:94:26:
23:59:eb:21:03:7d:53:7c:ea:73:00:46:da:32:bc:
29:19:cb:52:d5:75:48:db:37:84:a3:d8:d8:6f:e4:
98:83:88:4d:a7:2d:e3:5c:dc:28:7a:df:57:e4:dd:
00:3e:d1:a4:6f:10:52:be:d8:57:2c:5c:0f:94:1e:
6f:c3:ca:eb:fb:bf:65:37:76:7d:7b:14:1d:49:58:
ef:4b:1b:d8:19:56:33:09:ea:5f:00:e2:02:e3:2a:
d4:b6:b8:22:16:81:64:b3:68:4e:d1:79:14:c2:33:
ee:db:af:a6:ad:5e:72:71:1a:ad:43:73:51:c0:13:
c4:aa:0d:20:ef:ef:0b:82:76:3a:e4:1d:dc:d8:1e:
ed:0d:e9:ea:68:1a:a1:94:77:d7:a3:b3:20:b4:e7:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:C6:C9:AC:51:B3:64:5E:FD:B8:26:8E:EC:5D:34:76:0F:F2:58
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mrXGyaxRs2Re_bgmjuxdNHYP8lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:3c:e7:63:79:cf:72:34:c1:77:c7:05:2a:0c:ef:7b:c9:16:
0c:6e:5b:40:99:6a:ea:39:38:cc:c6:fe:cf:c3:84:52:46:37:
83:56:ab:e5:52:93:e5:12:14:c3:e3:b9:7c:91:9a:10:6e:15:
09:4e:5d:20:18:23:a2:f9:7f:fc:47:fb:81:3d:c3:6a:6c:16:
6e:a7:38:87:27:40:c6:2c:dc:8a:5b:47:4c:53:a6:fd:de:31:
97:37:4b:43:9c:8c:e7:ce:51:48:77:fc:70:db:2c:a6:7e:cd:
0e:0d:15:ec:2f:f3:1b:69:a6:88:9b:02:2a:b3:fd:e9:e0:8b:
ea:77:ef:7e:16:a7:ac:4f:de:d0:37:a0:d1:c3:91:47:a5:ba:
26:4a:db:ed:cc:15:8f:6c:a0:b4:24:34:e0:41:27:b5:29:a7:
36:ac:a2:b9:8c:5b:84:31:8d:0b:c7:ab:9a:69:72:44:aa:aa:
24:82:5c:2f:a7:19:68:bb:5a:50:52:d9:96:79:de:6b:00:0c:
1b:2e:9a:8f:c7:12:05:4d:73:09:0a:a9:c5:7d:9d:28:27:9a:
6d:fc:a1:0d:25:f0:ce:5f:c1:15:c4:d0:3a:23:b1:47:45:6c:
49:71:ac:8d:10:f7:21:44:10:bd:26:65:7b:22:e0:06:2f:4e:
a9:02:6c:74
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQsHbUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEx
OTExMTg0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFiNWM2YzlhYzUx
YjM2NDVlZmRiODI2OGVlYzVkMzQ3NjBmZjI1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMA8FJ8uxfmULMhXAa/U3U3gHiWgCEaIBwrTWPMK8nM7lFub
sA9KX7YJcbUolf6UV0RzZv0Pxrq+IZwTxRSJPNY56MhdTNltwM5ZxY67tDPweCNY
eekO8m6/jTJb3GaiYK0zByxNepQmI1nrIQN9U3zqcwBG2jK8KRnLUtV1SNs3hKPY
2G/kmIOITact41zcKHrfV+TdAD7RpG8QUr7YVyxcD5Qeb8PK6/u/ZTd2fXsUHUlY
70sb2BlWMwnqXwDiAuMq1La4IhaBZLNoTtF5FMIz7tuvpq1ecnEarUNzUcATxKoN
IO/vC4J2OuQd3Nge7Q3p6mgaoZR316OzILTn3L8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSatcbJrFGzZF79uCaO7F00dg/yWDAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
L21yWEd5YXhSczJSZV9iZ21qdXhkTkhZUDhsZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJH1zANBgkqhkiG9w0BAQsFAAOC
AQEAyDznY3nPcjTBd8cFKgzve8kWDG5bQJlq6jk4zMb+z8OEUkY3g1ar5VKT5RIU
w+O5fJGaEG4VCU5dIBgjovl//Ef7gT3DamwWbqc4hydAxizciltHTFOm/d4xlzdL
Q5yM585RSHf8cNsspn7NDg0V7C/zG2mmiJsCKrP96eCL6nfvfhanrE/e0Deg0cOR
R6W6Jkrb7cwVj2ygtCQ04EEntSmnNqyiuYxbhDGNC8ermmlyRKqqJIJcL6cZaLta
UFLZlnneawAMGy6aj8cSBU1zCQqpxX2dKCeabfyhDSXwzl/BFcTQOiOxR0VsSXGs
jRD3IUQQvSZleyLgBi9OqQJsdA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org