Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/rIc_MhNxUegURMUQ14k9P9bvKaw.roa
File: rIc_MhNxUegURMUQ14k9P9bvKaw.roa (raw, json)
Hash identifier: iioTbHx1CG8VU4G/Py9kBXd5ZqW3Mv8bLbLOTswAwJY=
Subject key identifier: AC:87:3F:32:13:71:51:E8:14:44:C5:10:D7:89:3D:3F:D6:EF:29:AC
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 08017583
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/rIc_MhNxUegURMUQ14k9P9bvKaw.roa
Signing time: Sat 01 Jan 2022 08:54:42 +0000
ROA not before: Sat 01 Jan 2022 08:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2906
IP address blocks: 37.77.184.0/21 maxlen: 24
185.2.220.0/22 maxlen: 24
2a00:86c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134313347 (0x8017583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jan 1 08:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac873f32137151e81444c510d7893d3fd6ef29ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:49:59:f9:cc:43:2f:32:16:94:eb:4c:ff:
bf:10:fd:31:45:be:e3:ac:a1:b6:44:5a:5a:1c:44:
9a:05:d5:19:f1:1a:14:02:0a:9a:cc:56:52:42:ba:
bd:b7:1f:0a:2b:c9:4e:c5:e8:91:56:42:6e:b0:d0:
37:ef:e9:bd:fc:83:bb:4f:3c:1a:cf:dd:86:26:dd:
a8:95:ab:42:6e:8a:33:ca:ae:dc:74:a0:64:0f:f6:
39:56:48:9c:35:f3:4c:1f:55:77:ac:5b:ac:18:e8:
07:cd:05:af:a0:07:1e:8e:72:ad:44:dc:bb:de:24:
17:11:93:72:82:ac:f2:4a:94:d4:f7:b4:79:c6:69:
83:a3:58:80:2a:12:9d:ae:a4:61:be:6f:ac:0f:54:
3b:5c:47:5e:58:49:1e:b5:24:18:bf:50:59:2d:94:
c0:28:76:68:d9:43:fb:c3:f8:db:09:32:37:cd:33:
8d:2b:dc:06:41:16:82:ec:08:e0:d3:2c:5c:1a:0c:
42:fc:7b:19:f4:f2:8d:d0:3b:05:f5:25:cb:17:ab:
49:6a:fb:bf:7f:38:4f:72:10:65:22:80:99:e6:ec:
ad:a4:42:58:5f:4a:c2:ee:99:0b:44:77:3a:36:6e:
1a:b5:c1:70:6a:9f:11:9f:81:dc:34:50:01:fb:11:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:3F:32:13:71:51:E8:14:44:C5:10:D7:89:3D:3F:D6:EF:29:AC
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/rIc_MhNxUegURMUQ14k9P9bvKaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.184.0/21
185.2.220.0/22
IPv6:
2a00:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:87:d7:a3:f2:f0:1d:72:0c:3a:28:b8:11:ae:eb:c5:2a:33:
52:79:77:b9:87:61:0e:4f:94:45:f7:87:d7:c0:93:ee:76:2f:
b2:0c:bf:0c:c8:3f:bf:1a:7b:00:99:c4:15:67:66:52:b6:87:
37:72:a1:ff:f6:ac:2a:6e:e5:45:6d:20:0e:8a:1c:0d:35:09:
28:f2:b2:da:38:99:59:75:0f:46:2a:3c:fc:76:ea:3f:6c:fb:
86:2d:64:63:76:81:d2:16:74:e7:dd:00:18:90:5f:ac:21:e0:
3c:b3:3e:32:0c:5a:bf:aa:d1:64:6e:8d:16:25:79:e4:c4:20:
ec:09:d2:2e:73:3a:1c:fe:5f:98:45:8a:96:d0:87:37:75:c3:
ab:44:a9:58:fb:5e:12:31:e5:ba:0b:28:62:87:21:be:48:5c:
cc:c7:dc:7f:bc:bc:8c:86:76:88:52:6d:85:7c:43:9e:fd:28:
b7:28:5d:16:7a:78:72:67:f6:af:5a:be:b2:64:f4:54:8d:e0:
e9:91:e8:9b:f6:ac:29:44:6b:54:14:ac:45:8f:b5:3b:48:a2:
2e:2a:2c:8c:e9:43:f9:7a:c4:18:6c:ef:90:6d:56:62:fe:2c:
7e:32:30:57:17:5f:84:19:2f:84:64:8f:48:6c:54:a9:8d:89:
30:b3:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:33 2024 by rpki-client on console-ams.rpki-client.org