Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/mvtlIBK2vtpGyr9-4JxxDSgcfRM.roa
File: mvtlIBK2vtpGyr9-4JxxDSgcfRM.roa (raw, json)
Hash identifier: K4eSrS+w4BqNCoFczMKXr2BCctQfq32p4FPPuThcKLY=
Subject key identifier: 9A:FB:65:20:12:B6:BE:DA:46:CA:BF:7E:E0:9C:71:0D:28:1C:7D:13
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 05BB9390
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/mvtlIBK2vtpGyr9-4JxxDSgcfRM.roa
Signing time: Sat 01 Jan 2022 16:01:07 +0000
ROA not before: Sat 01 Jan 2022 16:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 212.3.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96179088 (0x5bb9390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jan 1 16:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9afb652012b6beda46cabf7ee09c710d281c7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:75:d3:dc:c4:27:4a:aa:d2:b6:1c:a8:80:
8b:ee:0a:6b:3b:96:dd:ef:a4:78:5f:09:f8:95:bb:
f4:7f:a6:40:79:cd:39:26:e3:3d:31:ee:24:83:b2:
21:7a:3b:b0:4b:0e:fc:dc:ad:98:36:f6:7e:be:1b:
a1:32:40:89:4f:7e:09:ec:ae:20:f9:5a:ca:bb:78:
70:8e:85:dc:1d:25:a8:72:ee:60:c2:15:c6:9a:c1:
7f:54:77:40:0f:8c:3e:dc:06:71:0a:0f:b1:06:73:
4f:86:ed:00:37:59:dc:85:0e:53:e6:ed:26:62:0f:
ae:22:79:a5:1e:73:7f:d9:ec:13:17:ba:65:a0:54:
d0:33:58:df:dd:af:87:48:62:66:4c:fd:77:d5:00:
2d:07:82:bd:05:9c:c8:95:48:61:54:56:63:78:ca:
95:bc:6b:61:c3:e3:ff:08:29:4e:bf:71:c2:63:09:
31:ad:58:e7:89:b1:30:b5:2c:ca:ba:33:6e:84:77:
aa:05:66:59:35:3b:b7:42:59:a2:c4:67:9e:17:b7:
ed:99:75:b7:03:07:79:04:00:37:5a:6c:ab:5f:4c:
1c:86:67:a2:b7:2b:f0:8d:99:2c:e4:94:40:2c:a1:
3a:f4:97:c3:eb:28:60:cd:7a:49:d5:a7:7c:c3:73:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:65:20:12:B6:BE:DA:46:CA:BF:7E:E0:9C:71:0D:28:1C:7D:13
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/mvtlIBK2vtpGyr9-4JxxDSgcfRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.3.221.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:4d:1e:56:f4:12:cd:75:72:e4:13:ce:22:10:67:e5:46:e0:
72:4e:b9:43:90:9d:e8:a0:e8:50:ba:15:e2:22:4f:e1:77:c3:
5f:48:83:4f:02:19:3e:df:4e:d6:41:78:a0:ee:ae:7a:3b:22:
26:ee:ba:42:e6:45:c5:09:b1:43:a7:50:e1:c5:aa:38:65:41:
6c:96:82:7e:98:36:bc:26:9d:a6:98:03:3d:fd:4e:d6:2c:56:
94:3e:81:1f:79:51:e3:c2:0d:55:eb:c9:27:ea:1b:d4:41:45:
0b:7b:24:d5:6f:05:c9:ed:88:a5:b9:8d:db:24:ee:69:bf:7f:
30:08:0e:a5:71:6f:02:1f:1d:56:7c:c0:86:d7:67:06:5f:ed:
f3:8e:57:ad:c2:39:df:ea:96:d3:a8:ab:eb:cb:a9:39:00:ee:
91:f5:bd:40:95:10:fa:91:f1:2e:e1:5b:14:d5:b8:6a:eb:ee:
61:3f:a8:6b:89:7a:d3:c5:0a:8f:04:dd:2c:0b:52:0a:9a:d6:
ee:95:a1:63:5e:63:dd:83:4d:a3:d3:3b:86:60:24:08:fc:a0:
c0:4c:a1:2d:bf:98:ba:af:e9:ba:bd:84:cd:b8:07:70:9d:59:
dc:b9:a6:d9:37:ef:ed:67:30:e7:ec:00:ec:17:e7:2a:db:3d:
bd:7f:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net