Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/MKrHV98czKCZdiLxaKLCVYwC3Pc.roa
File: MKrHV98czKCZdiLxaKLCVYwC3Pc.roa (raw, json)
Hash identifier: y8roILvJJz2teSNDakpnIdod9k4T4ERjVnRZFDvwbUI=
Subject key identifier: 30:AA:C7:57:DF:1C:CC:A0:99:76:22:F1:68:A2:C2:55:8C:02:DC:F7
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 37FD8DED
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/MKrHV98czKCZdiLxaKLCVYwC3Pc.roa
Signing time: Sat 01 Jan 2022 02:53:46 +0000
ROA not before: Sat 01 Jan 2022 02:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54548
IP address blocks: 157.97.104.0/24 maxlen: 24
157.97.105.0/24 maxlen: 24
217.160.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939363821 (0x37fd8ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 1 02:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30aac757df1ccca0997622f168a2c2558c02dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:14:dc:e0:6b:ea:6d:ef:38:74:d4:45:56:
00:3e:3f:a6:33:80:ae:51:4a:bf:6a:84:5c:ea:eb:
b6:02:7e:91:c8:bf:f0:a8:0b:0b:1d:ba:7c:ee:f7:
17:6d:84:d0:7d:35:b9:bc:d6:dc:d3:36:64:77:c4:
5c:cb:a6:00:9c:88:ea:fc:47:b8:5a:cc:cf:ff:e9:
f6:be:35:b5:aa:c7:21:ee:a8:ce:28:fe:e2:bc:ff:
f6:78:91:4e:9a:b1:7c:ae:c4:d0:c2:3b:92:bb:49:
6c:21:f4:0d:cb:4e:9a:1a:7f:ed:91:22:e6:4d:3f:
bd:49:6c:93:92:8a:6a:2d:69:00:ef:13:7d:99:06:
10:43:36:67:eb:dd:8b:8a:f3:23:85:29:a3:d6:83:
5b:89:0c:c5:45:d5:2f:22:bb:4a:5c:7d:ad:a5:f1:
87:a7:8a:ec:1f:96:34:ac:4b:da:03:be:59:84:52:
a9:9a:73:b4:d5:ac:e8:33:6b:c6:bd:08:2e:e6:68:
a4:e9:ea:bf:9a:d7:5a:36:ea:65:20:a5:ad:e5:6a:
35:24:b8:4e:0b:f5:bd:d7:9f:3c:9f:b1:c4:f8:02:
d7:b3:6f:d4:42:78:b7:f4:f7:ee:d4:38:6f:f6:4d:
87:35:1c:b8:d0:28:c8:17:a1:b6:21:4f:60:f2:e2:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:C7:57:DF:1C:CC:A0:99:76:22:F1:68:A2:C2:55:8C:02:DC:F7
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/MKrHV98czKCZdiLxaKLCVYwC3Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.104.0/23
217.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
39:59:40:50:92:cd:de:58:9c:59:cd:b1:8c:9b:df:d7:85:63:
87:43:50:31:32:74:d3:7a:85:40:8e:ec:69:d4:85:b9:56:f5:
3d:af:c8:2f:70:fa:00:27:56:85:37:9b:1e:b3:8e:93:3f:e9:
cd:00:c9:d8:11:3d:60:66:24:94:0d:16:73:bf:0d:17:58:5e:
e5:52:a3:86:9c:38:1a:f2:52:a5:f8:48:4c:64:dc:e4:6a:b5:
b0:da:81:4f:ed:f5:8b:e9:52:fe:e8:a3:d7:1d:28:f6:1d:3b:
90:07:27:4a:ca:31:55:14:39:66:20:d1:77:07:9a:bf:23:fe:
4d:d3:0a:8e:7e:27:be:31:6f:fe:a8:df:79:18:f1:50:ed:9e:
af:f1:02:9d:51:ef:32:bc:b7:cb:b4:8e:fb:3e:b2:15:96:d6:
59:43:e3:6c:d5:7f:1b:09:8e:46:ac:bb:3d:44:61:57:52:4e:
a7:50:18:4c:97:0a:86:70:db:41:e7:53:cc:89:4b:2e:f5:3e:
84:4f:43:74:2c:3b:bf:5f:e5:da:24:cf:96:ec:be:c0:3d:4f:
4e:75:45:6c:0e:58:5d:10:97:32:7b:57:1d:36:3b:48:36:2d:
ff:63:70:71:fb:95:62:ea:ca:fe:9d:4e:30:20:e6:20:2d:46:
78:60:3e:52
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEN/2N7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Mjk1YjFmMWRjZDhmYTZhYzFlZjc4ODI3OGM0ODllMTVlYWNhZTcwMB4XDTIyMDEw
MTAyNTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzBhYWM3NTdkZjFj
Y2NhMDk5NzYyMmYxNjhhMmMyNTU4YzAyZGNmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKypFNzga+pt7zh01EVWAD4/pjOArlFKv2qEXOrrtgJ+kci/
8KgLCx26fO73F22E0H01ubzW3NM2ZHfEXMumAJyI6vxHuFrMz//p9r41tarHIe6o
zij+4rz/9niRTpqxfK7E0MI7krtJbCH0DctOmhp/7ZEi5k0/vUlsk5KKai1pAO8T
fZkGEEM2Z+vdi4rzI4Upo9aDW4kMxUXVLyK7Slx9raXxh6eK7B+WNKxL2gO+WYRS
qZpztNWs6DNrxr0ILuZopOnqv5rXWjbqZSClreVqNSS4Tgv1vdefPJ+xxPgC17Nv
1EJ4t/T37tQ4b/ZNhzUcuNAoyBehtiFPYPLiAq0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQwqsdX3xzMoJl2IvFoosJVjALc9zAfBgNVHSMEGDAWgBSSlbHx3Nj6asHv
eIJ4xInhXqyucDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2twV3g4ZHpZLW1yQjczaUNlTVNKNFY2c3JuQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMGZiYzJlLWZkODgtNGRmMi1hYWUzLTllYjQwY2M1ZjY4Yi8x
L01LckhWOThjektDWmRpTHhhS0xDVll3QzNQYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MGZiYzJlLWZkODgtNGRmMi1hYWUzLTllYjQwY2M1ZjY4Yi8xL2twV3g4ZHpZLW1y
QjczaUNlTVNKNFY2c3JuQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAZ1haAMEAdmgljANBgkqhkiG9w0B
AQsFAAOCAQEAOVlAUJLN3licWc2xjJvf14Vjh0NQMTJ003qFQI7sadSFuVb1Pa/I
L3D6ACdWhTebHrOOkz/pzQDJ2BE9YGYklA0Wc78NF1he5VKjhpw4GvJSpfhITGTc
5Gq1sNqBT+31i+lS/uij1x0o9h07kAcnSsoxVRQ5ZiDRdweavyP+TdMKjn4nvjFv
/qjfeRjxUO2er/ECnVHvMry3y7SO+z6yFZbWWUPjbNV/GwmORqy7PURhV1JOp1AY
TJcKhnDbQedTzIlLLvU+hE9DdCw7v1/l2iTPluy+wD1PTnVFbA5YXRCXMntXHTY7
SDYt/2NwcfuVYurK/p1OMCDmIC1GeGA+Ug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:21 2024 by rpki-client on console-fra.rpki-client.org