Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/MNEPnkAff44wXKMkszFXRLT1Oxw.roa
File: MNEPnkAff44wXKMkszFXRLT1Oxw.roa (raw, json)
Hash identifier: FWhX6sRmEvIxffkgeI74aFrdR9m3eHPreH6FallW0fg=
Subject key identifier: 30:D1:0F:9E:40:1F:7F:8E:30:5C:A3:24:B3:31:57:44:B4:F5:3B:1C
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 0F73E3C2
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/MNEPnkAff44wXKMkszFXRLT1Oxw.roa
Signing time: Sat 01 Jan 2022 15:01:59 +0000
ROA not before: Sat 01 Jan 2022 15:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206559
IP address blocks: 194.105.132.0/23 maxlen: 23
185.183.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259253186 (0xf73e3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Jan 1 15:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30d10f9e401f7f8e305ca324b3315744b4f53b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:41:71:59:d6:39:7e:e8:6e:17:53:9c:c6:
11:a8:bd:16:24:76:72:48:6b:cb:c3:c0:55:60:d7:
b7:86:90:2d:8c:bc:be:98:41:62:31:23:17:f5:3e:
0d:b4:e8:bf:20:64:2b:58:7d:c2:f9:22:bd:7f:13:
74:97:e0:d8:0d:45:a6:d0:ed:43:7b:0e:3a:70:2f:
47:fc:63:8a:fc:5e:1d:2f:00:7b:71:7d:29:71:b0:
d5:2b:75:1d:ea:94:56:d3:49:ea:ae:be:91:46:9f:
9a:00:a9:46:25:5d:f4:f3:31:21:bc:bc:2d:ac:50:
ba:f3:4b:36:f2:09:6c:ab:6c:0e:8d:5f:f9:02:dc:
33:11:87:12:57:06:8c:44:6d:89:4b:d2:47:3d:1f:
72:6c:4a:3c:30:2c:e9:71:f6:32:6f:ed:1a:87:fc:
a6:7a:d2:a5:4d:bb:45:1e:9e:59:1b:d3:87:0a:c3:
4b:a6:95:bd:5b:c2:f8:8e:fd:e4:57:6e:31:58:14:
84:82:24:49:ce:41:2b:35:b7:a2:6a:cc:a3:ac:04:
cb:78:e3:9c:00:2e:5d:f4:67:02:41:67:94:97:a6:
9c:ad:2a:e1:2b:b7:b1:51:57:f2:0c:af:69:99:26:
a0:53:41:cd:e0:f4:c5:fb:26:7f:3b:05:37:98:48:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:0F:9E:40:1F:7F:8E:30:5C:A3:24:B3:31:57:44:B4:F5:3B:1C
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/MNEPnkAff44wXKMkszFXRLT1Oxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.36.0/22
194.105.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:b7:6a:fd:7f:af:6e:98:9d:83:9f:1c:67:38:56:e2:fb:4d:
1a:66:f9:d7:c3:e2:70:81:0d:7a:20:39:ab:12:e6:0a:bc:90:
ff:a2:6b:3e:c5:50:aa:e8:7d:b2:a7:ce:b7:6e:90:12:3b:6f:
41:d2:1b:bf:55:8f:a6:57:fb:e7:d6:23:e9:72:c9:66:94:08:
f3:46:a0:64:fd:61:05:5b:56:3c:71:dd:1c:fa:7b:a2:2b:87:
9d:99:d9:b0:2a:58:dc:63:96:aa:a1:c4:9d:e7:4a:e5:43:02:
c1:d3:e3:b1:83:e3:e0:45:25:7e:e0:74:8a:20:b5:db:b5:79:
cd:60:e0:41:a5:41:79:83:71:97:a8:79:cc:50:ba:ec:9d:58:
ce:d2:ae:3a:cf:a3:67:ab:4c:9f:e7:5d:2e:82:31:60:3f:3a:
8f:3e:eb:2c:13:f1:85:0c:38:3c:30:7c:78:16:3c:11:0f:ab:
8b:ef:f4:40:1e:b0:bc:c7:c4:63:48:d2:d6:49:33:a1:f6:b0:
6f:70:d3:03:99:c1:b0:6c:98:1f:95:63:be:d8:5e:f1:15:db:
be:13:2c:a3:c9:61:9f:de:5d:4d:c8:76:98:87:4f:e5:c8:cf:
62:85:55:a8:93:f5:46:ee:8f:01:d4:0f:08:ca:76:f2:99:ad:
02:e9:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org