Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/Mbtx_JzG4cYirKzXe5-ZO_TFt3I.roa
File: Mbtx_JzG4cYirKzXe5-ZO_TFt3I.roa (raw, json)
Hash identifier: ryR3K51/BpSIQ3Wucws/UVRGxtDDrxGlpQUFxiZjBPw=
Subject key identifier: 31:BB:71:FC:9C:C6:E1:C6:22:AC:AC:D7:7B:9F:99:3B:F4:C5:B7:72
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 07073C2E
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/Mbtx_JzG4cYirKzXe5-ZO_TFt3I.roa
Signing time: Sat 01 Jan 2022 09:55:55 +0000
ROA not before: Sat 01 Jan 2022 09:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52200
IP address blocks: 194.35.180.0/23 maxlen: 24
194.35.80.0/23 maxlen: 24
46.226.168.0/21 maxlen: 24
2a00:b600::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117914670 (0x7073c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Jan 1 09:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31bb71fc9cc6e1c622acacd77b9f993bf4c5b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:0f:0c:d2:0b:b6:99:6e:26:aa:21:41:f9:
6b:56:cc:2a:4d:aa:0d:1a:3c:e6:e6:5e:e7:cc:6e:
2a:06:2b:aa:3d:7c:59:38:95:06:64:7e:9f:f2:cb:
3d:2f:c7:bf:21:1b:f8:e7:7b:fa:99:34:3f:2e:91:
41:89:e4:c3:47:51:7c:f1:b6:ad:8d:ad:c7:21:df:
25:fc:05:89:3b:af:23:57:ff:a0:60:ae:b6:48:74:
11:27:2a:80:3d:8a:7d:42:f6:f7:e4:8e:89:11:35:
6e:4e:3e:d1:63:5b:22:66:4b:82:39:70:73:bc:a8:
1b:12:d9:7b:fe:0d:a9:05:95:79:ce:6c:4c:36:59:
8d:1c:e1:f8:98:77:e0:94:61:9b:5b:e8:46:be:8a:
53:bb:ee:12:cf:48:f7:b9:84:8e:e0:07:60:56:54:
5b:eb:4d:6b:ba:c5:54:47:ac:63:b5:85:13:51:90:
ae:66:1f:d4:16:e9:c4:b2:6a:69:2c:2e:13:91:0c:
8d:e9:a1:5a:e8:6d:4a:58:38:7a:a5:20:97:87:bb:
de:64:33:e1:5f:6c:f7:8e:40:ba:7b:f8:b1:88:57:
13:86:74:68:5b:a3:c1:aa:99:bd:5f:75:52:2c:25:
ae:af:38:a8:c7:a1:77:c2:15:4b:20:e7:8d:0c:aa:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:71:FC:9C:C6:E1:C6:22:AC:AC:D7:7B:9F:99:3B:F4:C5:B7:72
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/Mbtx_JzG4cYirKzXe5-ZO_TFt3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.168.0/21
194.35.80.0/23
194.35.180.0/23
IPv6:
2a00:b600::/29
Signature Algorithm: sha256WithRSAEncryption
07:9a:8b:f5:7e:c3:44:91:cf:eb:e9:d5:69:95:c1:f5:72:a8:
f9:65:4e:0f:0a:09:96:5c:1f:ef:ef:65:27:f1:6b:99:10:ef:
e7:20:44:7d:7b:c7:f9:62:79:5f:e8:40:34:c0:20:60:63:58:
eb:42:66:f1:94:8c:96:fc:88:39:0b:95:9d:00:14:d3:e7:46:
04:9d:59:0c:c9:b4:78:6f:5e:95:85:01:57:f7:3b:cd:45:2c:
35:eb:73:bc:cd:9e:37:d2:94:71:ed:71:86:97:af:4f:9e:6c:
81:9c:ad:cd:d9:57:f7:54:42:17:09:07:96:f7:e4:ae:41:5a:
c8:2d:e8:ae:dd:c8:a2:00:87:db:76:79:08:9a:df:e5:49:69:
27:c0:ac:2d:b7:af:f4:0a:e4:55:33:9c:85:6d:2c:6b:b8:08:
1e:c7:4f:cb:9b:2e:10:5f:24:f1:eb:c6:b9:30:79:54:5c:4f:
51:ad:18:22:f2:98:4f:98:27:ea:12:ae:fa:bb:74:9d:21:bf:
a6:48:c9:ad:ed:e3:97:f2:52:4e:06:08:04:81:cd:08:dc:c9:
ee:fb:c4:ae:97:3b:5a:07:25:83:b7:5d:7b:7f:5f:72:49:66:
bd:20:9f:24:f9:8e:87:63:7c:47:1e:42:92:5d:32:b9:11:ae:
d7:09:c8:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org