Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/MTRzShCbPjGf_KmOoRyM-RBtFDM.roa
File: MTRzShCbPjGf_KmOoRyM-RBtFDM.roa (raw, json)
Hash identifier: 9BPdZkrFuE2GwWuy35mB7upEHOZaee805dHuhMPWCqc=
Subject key identifier: 31:34:73:4A:10:9B:3E:31:9F:FC:A9:8E:A1:1C:8C:F9:10:6D:14:33
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 09FAD05D
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/MTRzShCbPjGf_KmOoRyM-RBtFDM.roa
Signing time: Sat 01 Jan 2022 03:59:46 +0000
ROA not before: Sat 01 Jan 2022 03:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204175
IP address blocks: 185.177.43.0/24 maxlen: 24
185.177.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167432285 (0x9fad05d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 03:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3134734a109b3e319ffca98ea11c8cf9106d1433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:e9:8c:33:62:bd:a1:04:4a:d0:3a:79:ad:
57:4b:2d:52:44:fa:eb:bc:69:8e:e0:46:ce:b5:55:
03:f6:9d:1c:79:0d:39:83:96:58:c6:12:e5:63:78:
94:a8:89:39:2f:17:93:4f:23:47:b9:22:ce:38:24:
77:f8:36:db:e6:10:b6:50:03:c1:45:db:36:1f:9f:
57:17:e7:e7:d7:11:68:a4:f7:c0:4a:b1:56:d8:1d:
43:91:a3:ee:2e:73:f4:81:c4:1e:da:94:94:c2:a4:
6e:4f:a9:8b:03:34:1d:9e:6e:8e:7b:84:aa:b0:94:
a0:5d:e7:3b:d3:eb:e4:dd:8f:7a:d9:eb:cc:c8:a9:
91:f3:8e:60:3f:88:a7:50:9c:2a:ec:bf:65:a6:92:
2c:b0:c8:e9:66:90:ac:9b:78:31:af:fd:e5:2e:a3:
c7:55:5e:40:06:93:1b:fc:f6:57:0e:1e:93:41:5d:
6e:04:49:32:92:a3:29:d4:11:d4:a7:56:4c:7c:48:
d2:de:01:82:94:df:de:73:cf:07:35:de:55:21:e8:
65:30:13:98:cd:37:ba:97:59:cf:57:cc:b5:ad:ef:
94:e7:38:72:ac:f5:60:f9:14:ed:23:f0:29:6c:dd:
ac:b0:05:ce:10:45:04:2a:ab:12:66:a0:74:8b:ba:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:73:4A:10:9B:3E:31:9F:FC:A9:8E:A1:1C:8C:F9:10:6D:14:33
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/MTRzShCbPjGf_KmOoRyM-RBtFDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.42.0/23
Signature Algorithm: sha256WithRSAEncryption
80:2c:e5:14:74:43:da:f0:27:fb:c3:4c:e7:48:e3:e6:b5:2f:
42:49:5a:2d:74:3c:d8:47:53:da:c6:a9:6a:0e:44:84:a6:e5:
29:cc:a1:4a:86:7b:af:88:ac:11:97:26:76:7f:0d:7d:7e:4f:
6f:a8:37:9f:25:f9:54:85:d2:d3:38:93:68:6b:3b:76:22:28:
e7:a8:3f:67:92:8d:5e:6f:49:1d:20:d0:18:5d:6d:43:2d:55:
89:2e:08:06:4d:69:4e:7c:ab:ba:fc:23:71:04:73:c6:55:a0:
6e:e5:3a:15:c2:86:29:8e:9c:d4:75:83:d6:31:75:2b:63:76:
e1:0a:ce:83:26:53:fb:7c:68:a7:f7:bf:a0:98:7c:9a:d8:8a:
fb:88:68:36:52:7c:04:42:17:83:43:a0:20:07:c1:5a:b3:ae:
ab:03:e1:17:f8:d4:80:62:72:7a:b2:c8:b1:c5:e9:38:24:d8:
d0:dd:73:68:34:b0:fa:9f:ce:ef:bc:b2:ab:22:9a:a8:56:e7:
64:4d:27:85:e1:b6:8e:9f:c0:bd:34:b5:a7:3c:17:b1:47:67:
73:c1:54:31:59:2f:41:89:8f:ca:32:e1:db:40:bb:71:3f:a8:
e2:d1:a4:2a:55:bb:dd:4b:ca:92:0f:f7:23:4b:03:f2:56:6c:
ef:22:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org