Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/mjFiqTJMKS2CPcORXlzXZ3b9ZN8.roa
File: mjFiqTJMKS2CPcORXlzXZ3b9ZN8.roa (raw, json)
Hash identifier: Mh7Tac4Ob7o+gi6rft4Mp8cvyGSRwLG+Lk4IdvM72ZI=
Subject key identifier: 9A:31:62:A9:32:4C:29:2D:82:3D:C3:91:5E:5C:D7:67:76:FD:64:DF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 0A55E3AA
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/mjFiqTJMKS2CPcORXlzXZ3b9ZN8.roa
Signing time: Sat 01 Jan 2022 07:58:11 +0000
ROA not before: Sat 01 Jan 2022 07:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 192.33.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173401002 (0xa55e3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Jan 1 07:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a3162a9324c292d823dc3915e5cd76776fd64df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:32:be:38:9d:ed:b3:d0:d5:c2:58:38:ae:
49:d3:a1:b4:8a:f7:5b:45:25:2e:28:b4:a5:73:3c:
70:0c:5f:a4:9f:31:87:e0:07:ba:72:9c:36:1d:2c:
f8:7c:e3:e0:a0:e5:d6:b4:ec:5a:e2:25:58:72:a2:
46:5b:93:5b:06:8c:68:b9:67:e5:94:02:f4:8f:81:
cb:68:da:3d:ca:96:e6:15:62:22:ae:20:92:43:ad:
45:aa:c8:12:71:f2:48:52:04:0d:2c:7d:21:38:de:
34:17:01:ee:cd:b8:50:29:76:a1:1d:04:12:18:4c:
27:ff:2b:1f:82:03:dd:3e:72:63:6f:ab:e6:7a:80:
d9:88:4a:c0:0d:16:94:0f:e7:5c:6d:9f:75:b7:a7:
24:58:e4:de:17:e4:26:b3:a0:73:28:fc:14:67:e1:
61:d7:f1:7a:5f:7a:ef:c5:59:7b:98:0a:e9:ee:b9:
44:c5:de:4f:1b:9c:73:93:70:1c:2f:84:ce:27:e7:
32:90:56:0a:d8:c4:d6:be:dd:0e:27:49:8b:aa:0d:
2b:94:a2:46:40:fb:0d:21:55:24:5f:44:96:77:ff:
74:d2:db:10:4f:9d:da:57:dd:ea:4e:c4:7f:dc:5b:
4a:b1:f8:ea:26:c0:43:c4:2b:98:e3:64:70:d3:f9:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:62:A9:32:4C:29:2D:82:3D:C3:91:5E:5C:D7:67:76:FD:64:DF
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/mjFiqTJMKS2CPcORXlzXZ3b9ZN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.156.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b5:8a:4a:80:e9:5a:a9:72:db:c0:ff:3b:fd:21:f4:a1:7f:
42:8b:1e:72:89:63:da:06:22:df:e0:8a:2f:fa:f1:43:61:d8:
8a:60:0b:be:4a:72:9f:fa:0e:2c:f2:04:cf:10:94:d8:05:e5:
b5:63:cc:2a:30:5b:db:73:e3:9d:c7:b2:dd:92:30:ef:36:5c:
86:34:10:ef:b1:a2:55:51:10:8b:e3:70:6c:f0:15:db:d4:7c:
d6:49:ab:1e:68:a9:8b:b7:59:4d:57:04:b2:1e:38:69:4c:b4:
41:77:53:ed:c9:cd:eb:94:ce:9f:c3:e9:3c:fb:91:bb:1d:80:
a8:fc:c7:de:7d:79:4d:23:c8:f4:a5:d3:49:44:20:fa:e6:fa:
08:8b:85:5a:ca:47:c6:86:1a:43:a1:23:f0:e6:41:5f:ef:be:
f8:99:92:f3:e9:4d:a1:ba:88:ae:24:a8:12:0b:4a:77:74:06:
6c:d4:4b:7a:d3:f5:47:07:8c:8b:3c:a2:05:98:1a:36:60:7a:
6a:bb:70:c0:00:c4:5f:c2:18:18:60:12:f3:c9:14:b7:61:59:
d8:86:ee:2d:e7:ea:d2:9b:00:27:6d:f3:af:80:c0:da:05:e9:
b3:91:5f:8a:e9:35:dc:8a:cf:ad:06:4c:14:68:40:ad:55:2a:
53:dd:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net