Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/Mb4NxJq6MtbseMbVp_fnMH41PpA.roa
File: Mb4NxJq6MtbseMbVp_fnMH41PpA.roa (raw, json)
Hash identifier: P+cmnyBJvfr873ipt3amYNwM9yhLkvr9B8PbdOy2fzM=
Subject key identifier: 31:BE:0D:C4:9A:BA:32:D6:EC:78:C6:D5:A7:F7:E7:30:7E:35:3E:90
Certificate issuer: /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial: 0182632285FC758D0055FD82C5DCC5561525
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/Mb4NxJq6MtbseMbVp_fnMH41PpA.roa
Signing time: Wed 03 Aug 2022 09:56:23 +0000
ROA not before: Wed 03 Aug 2022 09:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:22:85:fc:75:8d:00:55:fd:82:c5:dc:c5:56:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Validity
Not Before: Aug 3 09:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31be0dc49aba32d6ec78c6d5a7f7e7307e353e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:ba:cf:6f:b9:59:db:68:80:0d:29:dc:bd:
ab:92:2f:b9:1e:14:36:bc:21:d5:f6:82:c2:91:76:
a5:f8:61:a3:3a:1b:97:59:65:37:34:0f:52:90:55:
fe:43:ea:e6:e4:2d:11:c9:67:28:22:06:2e:02:7c:
f6:1b:14:a7:a2:b2:00:74:fd:ea:8b:8c:c3:d9:1a:
bd:2a:8c:2c:99:fd:c5:6a:31:77:bf:62:78:4a:62:
fb:d3:45:36:23:02:95:95:29:e1:21:82:56:05:4f:
d7:d0:a7:28:d8:df:fc:80:61:0f:4d:78:b8:80:e5:
fe:b6:7c:6a:71:69:a8:e5:a9:e1:30:28:8e:1d:6a:
97:96:6a:0d:70:8c:38:c9:6a:e6:59:4d:ce:62:73:
46:4c:4c:ea:c8:f1:68:22:26:c9:a6:5b:0b:5a:3a:
e2:f9:0f:33:c1:11:87:1e:16:5e:0e:d2:9f:89:1e:
f8:95:6a:87:8b:87:83:89:62:42:7f:de:ba:c1:08:
19:db:a0:ae:81:8b:e7:5c:ba:16:16:a9:07:8f:72:
29:73:3b:c7:1b:8d:e4:c8:d6:67:74:41:ba:55:fa:
cb:72:82:38:41:b5:56:f7:9c:74:80:05:be:d4:cc:
95:76:7b:6e:18:7d:1c:ad:60:f1:c6:34:0e:57:21:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:0D:C4:9A:BA:32:D6:EC:78:C6:D5:A7:F7:E7:30:7E:35:3E:90
X509v3 Authority Key Identifier:
keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/Mb4NxJq6MtbseMbVp_fnMH41PpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:40:f8:93:03:0d:7b:91:0f:3b:18:77:a9:58:dd:dd:70:69:
92:d9:b9:dc:90:fd:fb:5b:91:20:67:19:dc:3c:db:94:f6:e3:
6c:ff:c6:a8:64:12:d1:d6:96:f8:c7:52:de:f3:cb:7a:bb:36:
57:6e:43:0c:ea:9a:88:72:92:81:f5:ee:b4:ee:08:34:e9:5f:
aa:fa:e6:ca:48:b1:e7:00:b2:b6:eb:d2:af:16:1a:28:97:6d:
fe:32:05:e8:e3:df:ab:8a:0a:d1:37:05:a5:45:c0:d4:9b:ec:
6a:5f:1c:1d:7b:6b:4d:31:84:ca:20:fd:38:f6:bd:fc:26:07:
65:8c:08:cd:4b:53:1c:1b:99:ad:f5:54:19:a4:d2:3d:e1:ca:
f4:9a:99:bc:05:f6:7e:10:4c:0a:95:df:24:42:0e:33:fc:c5:
aa:0a:c5:e6:dd:a6:d8:a7:4b:51:e9:67:1a:4f:8d:c3:8b:ed:
81:e2:f8:f1:30:07:5d:27:b1:49:67:33:99:e7:80:b4:3c:76:
c9:77:da:61:81:39:02:25:34:d0:81:74:b9:8e:a8:db:f9:62:
5d:07:b5:6a:9b:42:78:fe:ad:31:ea:f0:8e:1b:02:06:05:69:
32:e9:6e:d6:95:39:c0:e4:e4:b9:7d:b7:2a:33:a8:ef:aa:0d:
f0:aa:c7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:21 2023 by rpki-client on console.sobornost.net