Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/MEdsjZZm3fwlwPmiEWUGSB5uCSQ.roa
File: MEdsjZZm3fwlwPmiEWUGSB5uCSQ.roa (raw, json)
Hash identifier: 82T9mywO/lKyljSo6JDdoJu0OM996uCiy8YudXo2ROc=
Subject key identifier: 30:47:6C:8D:96:66:DD:FC:25:C0:F9:A2:11:65:06:48:1E:6E:09:24
Certificate issuer: /CN=5061754f7689169f6a15065095472672ba2b4589
Certificate serial: 04C850
Authority key identifier: 50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/MEdsjZZm3fwlwPmiEWUGSB5uCSQ.roa
Signing time: Thu 10 Mar 2022 14:31:10 +0000
ROA not before: Thu 10 Mar 2022 14:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57058
IP address blocks: 91.230.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313424 (0x4c850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5061754f7689169f6a15065095472672ba2b4589
Validity
Not Before: Mar 10 14:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30476c8d9666ddfc25c0f9a2116506481e6e0924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:24:f7:d4:6d:32:2a:0f:69:a3:f1:d2:37:
ef:a6:53:76:a5:a2:c2:ea:c8:60:67:c9:44:38:ad:
57:17:2f:1c:e2:82:04:c0:dc:2d:33:9a:eb:a1:21:
a4:73:74:e2:ab:91:3c:89:ca:07:18:6e:51:eb:b3:
47:6b:bb:d0:a4:a8:56:62:a5:48:eb:6d:40:e5:22:
70:ee:f1:d7:59:3d:53:e7:4e:eb:4b:3c:17:db:1d:
15:e0:cc:61:63:01:11:4e:d0:36:da:08:73:2d:80:
5a:ef:44:6f:e4:79:38:71:80:dc:a2:05:4f:f1:06:
bb:f9:3f:6b:e7:5d:f0:6c:e2:58:6a:3e:4b:90:cf:
48:59:67:e3:cf:3d:aa:46:fe:ca:bc:8b:52:95:c3:
5b:04:32:fe:00:e1:70:61:bd:0a:34:42:ea:6e:37:
c1:66:5e:f6:04:7d:9b:cf:1f:3f:a2:49:15:70:71:
24:67:31:4b:f6:f1:40:eb:2e:d0:7f:66:42:09:9d:
e3:20:fa:5d:ed:d8:b3:a6:93:73:c7:48:ca:8a:d8:
95:fc:e5:e3:b7:c2:ee:e4:d8:e8:30:f2:2e:01:4f:
8a:04:24:8b:be:50:be:94:c2:cc:89:b0:57:49:bc:
19:a2:36:f5:b8:73:85:8c:da:ca:9b:bc:dd:7d:0b:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:6C:8D:96:66:DD:FC:25:C0:F9:A2:11:65:06:48:1E:6E:09:24
X509v3 Authority Key Identifier:
keyid:50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/MEdsjZZm3fwlwPmiEWUGSB5uCSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e7:32:3d:28:90:13:bc:6f:58:c1:af:9d:95:01:44:1e:54:
f0:2e:47:c5:ef:76:88:e9:a1:2e:86:a0:5f:b0:e9:e1:fd:65:
a4:bc:26:a7:bb:58:a6:4b:a2:85:4e:30:88:a5:b9:8b:1f:49:
b5:99:66:9f:2a:21:e4:e4:fc:9f:e8:ef:3e:be:62:6a:36:fe:
d6:95:25:5a:e8:ed:8d:39:96:3e:ce:ef:cf:43:4c:9d:cc:9e:
7c:b9:db:1d:f2:9e:f1:b3:b4:1e:c5:f6:68:e7:9c:8e:21:c5:
63:93:5f:8b:89:42:41:19:30:2f:19:54:59:8b:26:85:b8:59:
de:e8:40:2e:64:e6:45:8a:49:74:97:16:4a:0d:e0:0b:b3:ca:
5c:a7:ca:12:e1:52:71:8b:15:9c:5a:4b:40:ac:46:9c:82:6d:
ef:77:b1:08:8b:8e:2d:ff:d2:0f:69:66:3b:3f:2b:4e:68:45:
8b:72:de:64:05:94:6a:6f:c5:fa:06:f0:16:32:f8:ee:a0:84:
29:d7:56:05:fc:a0:82:9a:64:b5:35:40:c8:31:54:50:43:6d:
ae:70:22:e0:ba:6d:a3:43:c0:98:70:c4:c7:57:00:de:2e:5b:
c3:d7:7e:e5:5d:03:ef:d0:e5:74:0d:54:1d:62:10:0a:d5:62:
5a:37:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-ams.rpki-client.org