Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/MVLwh0PjR2gS824LGYSo5OBN_1Y.roa
File: MVLwh0PjR2gS824LGYSo5OBN_1Y.roa (raw, json)
Hash identifier: UCbIA+ePAQ8Y5H54GhTK7D6+p8Ps7gphmwjApw2ZO78=
Subject key identifier: 31:52:F0:87:43:E3:47:68:12:F3:6E:0B:19:84:A8:E4:E0:4D:FF:56
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 0184A35AECF3F4D84A9448FB33B964FD6AC0
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/MVLwh0PjR2gS824LGYSo5OBN_1Y.roa
Signing time: Wed 23 Nov 2022 07:19:15 +0000
ROA not before: Wed 23 Nov 2022 07:19:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205836
IP address blocks: 185.204.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:5a:ec:f3:f4:d8:4a:94:48:fb:33:b9:64:fd:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Nov 23 07:19:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3152f08743e3476812f36e0b1984a8e4e04dff56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:55:7f:b4:55:7d:a0:f4:5d:e5:34:c8:1c:
1f:b7:97:e7:25:d7:b6:e3:29:6c:42:c7:81:22:56:
40:79:a1:2a:7e:3e:31:a0:17:95:5f:24:68:77:74:
80:8b:09:5b:f3:f0:73:43:c0:ec:5a:89:b7:fc:d6:
6f:68:29:44:66:3c:cd:9c:80:a4:4e:e6:a0:05:66:
bc:3d:f7:66:ca:ce:b8:45:f4:37:cf:36:dd:e1:2f:
41:4c:17:74:10:4b:b2:0b:f7:28:ce:e9:04:36:f2:
02:d8:3e:38:1e:51:15:bf:0b:5a:11:57:d7:e4:5e:
68:0c:a7:fe:85:fa:4b:49:b1:2d:3e:43:b5:fa:06:
56:93:fa:fe:bc:56:80:da:da:9e:07:a3:b2:94:81:
31:dd:27:ce:00:18:db:08:e8:55:c8:0d:72:c7:a8:
ca:74:78:e0:a2:fb:21:5f:7c:dc:bd:f6:37:73:b9:
c9:6a:36:64:f1:0f:bb:06:c9:3a:d7:65:71:52:26:
10:98:69:f6:7d:28:b8:d0:37:60:02:d7:f7:7c:16:
ab:a2:da:70:b3:59:c9:de:67:41:f6:94:c8:15:d5:
41:e9:ef:d0:5b:2b:7b:f4:8b:4b:2f:7a:4d:9c:7d:
7e:0e:3c:a8:dc:5b:ff:af:c2:2a:04:1b:1e:15:12:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:F0:87:43:E3:47:68:12:F3:6E:0B:19:84:A8:E4:E0:4D:FF:56
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/MVLwh0PjR2gS824LGYSo5OBN_1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.202.0/24
Signature Algorithm: sha256WithRSAEncryption
75:50:dc:d6:f3:6e:85:6e:de:43:01:2b:54:12:d1:f2:44:9e:
e0:0a:f2:40:42:45:6a:ac:6a:b6:ea:ad:5b:31:17:c9:57:25:
a2:43:42:dc:fb:a2:d3:2f:a5:a9:6f:e6:b9:e0:b7:bd:5a:69:
a2:19:2f:84:dd:eb:0f:6d:50:bf:73:b4:a6:51:b8:79:7c:9d:
fb:0c:3f:8a:33:11:d4:df:c9:e5:8c:39:fa:9b:78:cc:8d:b6:
cb:7b:fb:18:96:61:cb:39:33:c5:32:fe:fe:c2:02:39:4a:a0:
d1:d3:e7:83:90:b2:24:61:05:4b:37:1e:92:d4:4e:06:96:85:
59:07:b5:f4:11:e9:d8:72:04:cc:90:46:26:b7:7a:52:9f:b0:
78:15:cc:73:70:1e:b8:4c:0a:b5:ac:91:5b:8d:ca:4e:62:b3:
29:2c:8b:13:6b:1f:02:57:f7:c3:81:ac:a5:c0:f7:7e:93:87:
cc:c9:97:d6:3b:1d:af:cb:0e:71:97:59:3a:f2:88:14:a8:65:
26:64:b8:6f:bf:f4:e2:a4:35:ed:e9:19:e8:c0:3a:ef:d2:cd:
42:50:bf:c2:27:c5:86:da:05:33:b5:5e:df:bb:45:5a:50:63:
6b:0a:31:bb:a5:18:9c:cb:0e:60:a3:d4:0e:c0:bb:98:26:ea:
34:9a:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:13 2024 by rpki-client on console-ams.rpki-client.org