Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/m3wQJue2EMrMAgMs46rAkjcE4Mw.roa
File: m3wQJue2EMrMAgMs46rAkjcE4Mw.roa (raw, json)
Hash identifier: KdFrAMr3w+eydaciUcF/QMWCyjnJhmoJqPVa2hG64DM=
Subject key identifier: 9B:7C:10:26:E7:B6:10:CA:CC:02:03:2C:E3:AA:C0:92:37:04:E0:CC
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0B05ECD1
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/m3wQJue2EMrMAgMs46rAkjcE4Mw.roa
Signing time: Sat 01 Jan 2022 02:51:12 +0000
ROA not before: Sat 01 Jan 2022 02:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200020
IP address blocks: 185.122.116.0/22 maxlen: 24
185.113.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184937681 (0xb05ecd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jan 1 02:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b7c1026e7b610cacc02032ce3aac0923704e0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:6f:98:8b:0e:f0:0e:03:e4:b5:14:ee:67:
6f:72:bf:71:24:70:ce:a9:62:70:30:28:46:98:cf:
71:5c:21:d9:f2:86:b1:a0:7c:34:fa:de:d2:16:7e:
c0:0f:68:27:e7:75:ba:68:08:7b:b6:45:ff:87:b8:
59:e0:4b:db:d6:9f:79:65:38:73:a4:21:e8:d3:ac:
2e:52:9b:54:72:b3:d2:e1:0c:b1:f7:e9:e5:eb:1d:
d1:ee:27:54:85:e6:c5:ed:3c:d2:7f:af:94:51:2f:
55:05:9d:1b:b3:bb:9c:e5:ee:a0:70:cc:b5:c4:c3:
56:6d:88:2b:61:02:9c:2f:b7:84:db:bd:75:70:d4:
93:8d:fb:15:db:d7:2a:29:b4:79:23:20:90:c3:10:
12:2e:69:ba:24:06:58:0d:e6:ba:a2:f5:b6:ef:ff:
c3:b1:7a:88:8e:a2:ea:35:a4:a6:72:8d:ba:d5:06:
72:7b:e0:37:12:96:b5:d5:1d:26:b3:9d:10:10:be:
3c:da:c7:4e:6f:65:19:22:33:83:26:62:ab:f3:80:
d6:b4:46:2b:20:1b:d5:f5:f4:00:c9:91:6b:a9:7a:
f2:e2:30:d8:b6:54:76:d7:0e:5d:fc:60:bb:e6:99:
7d:89:48:5f:b0:59:ce:c1:ae:3d:1b:9e:b6:31:f0:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:10:26:E7:B6:10:CA:CC:02:03:2C:E3:AA:C0:92:37:04:E0:CC
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/m3wQJue2EMrMAgMs46rAkjcE4Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.84.0/22
185.122.116.0/22
Signature Algorithm: sha256WithRSAEncryption
03:8d:c7:9f:fa:b2:95:5b:bf:c0:72:48:d9:b6:e5:96:40:83:
d1:e8:3d:f3:be:77:f1:28:ed:80:ac:95:ac:ab:23:68:92:da:
50:09:68:7f:2c:9f:55:99:4c:8c:5f:84:31:4f:90:b2:09:a6:
f8:d0:23:c4:db:28:0e:30:53:8f:2f:64:94:87:3e:67:5a:49:
08:aa:af:d0:84:c8:73:88:b8:4a:41:0d:28:ed:71:6c:78:9f:
8b:e8:39:05:93:4a:a5:6c:45:d2:e2:1e:1b:b6:d0:37:41:5e:
3f:68:50:79:b3:a8:d0:6d:11:f6:2c:1e:35:c4:5a:a5:eb:2b:
7d:16:3e:9f:7b:e0:9e:4b:a0:52:c5:57:96:ee:a4:a9:ce:fa:
c3:cb:b9:3e:bd:72:fc:43:c3:8e:d9:32:50:c8:ba:42:a9:b1:
f7:75:89:0c:87:ab:28:d6:ae:68:a7:6d:f1:02:7d:23:9d:df:
5b:06:58:85:c9:85:8a:7b:af:dc:d7:8c:71:56:ed:24:f4:e4:
93:f4:19:8f:ca:06:c6:ba:bc:10:69:dc:4f:ee:f5:5f:4f:63:
09:20:72:83:31:ec:96:13:be:85:cc:bf:25:51:f6:6d:f8:55:
0b:4a:17:a8:5d:67:ac:ed:eb:23:93:48:d8:c2:80:34:17:32:
ec:8d:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:23 2024 by rpki-client on console-fra.rpki-client.org