Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MHXTynCXwyQeJftnWxzWNd4H6cU.roa
File: MHXTynCXwyQeJftnWxzWNd4H6cU.roa (raw, json)
Hash identifier: F1A2kC49oZ0a6p/yzCJgSXSsYyfRkH5RjstTK2Q2DcU=
Subject key identifier: 30:75:D3:CA:70:97:C3:24:1E:25:FB:67:5B:1C:D6:35:DE:07:E9:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01821ACB3EC5C71861EB6AC19646C00FFB56
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MHXTynCXwyQeJftnWxzWNd4H6cU.roa
Signing time: Wed 20 Jul 2022 08:48:23 +0000
ROA not before: Wed 20 Jul 2022 08:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 212.87.204.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
94.154.160.0/24 maxlen: 24
94.154.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:cb:3e:c5:c7:18:61:eb:6a:c1:96:46:c0:0f:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 20 08:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3075d3ca7097c3241e25fb675b1cd635de07e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:c6:e5:ee:5e:03:13:f5:d1:7f:70:59:c8:
d8:5d:5d:b2:9d:4a:38:09:20:22:7f:14:67:7a:67:
43:7a:0b:66:17:40:a5:f4:96:4f:11:86:25:98:f9:
5a:5e:66:2f:eb:5f:2d:81:7d:5a:01:1e:8b:ea:19:
6a:41:b5:e6:09:a2:f9:52:46:de:95:f3:c7:8c:13:
f9:ba:d8:aa:a5:f5:53:ae:6a:36:10:55:1e:36:5e:
21:ee:2a:8c:42:9d:09:5c:9a:ab:e8:bf:78:a0:f7:
a0:f0:c0:3e:15:26:a2:f6:b9:7c:c4:20:17:5d:16:
af:d3:d4:88:95:e4:d9:08:2f:07:96:7b:fa:a0:97:
2d:0f:5a:77:52:5d:7a:c5:58:05:cd:f8:e0:46:78:
e1:6a:1b:ba:dc:fc:72:ec:b0:47:2a:9c:75:33:a8:
36:3b:10:b9:3a:10:75:62:1b:41:64:d5:21:78:d2:
f1:70:dc:dc:09:bb:8c:37:74:f0:33:60:79:8b:dc:
98:b5:ed:69:de:33:6b:0a:31:b4:4c:72:c6:dd:77:
02:66:13:9b:83:4d:3b:df:23:d6:be:a5:01:21:5e:
cb:8c:25:25:e5:a1:42:3d:27:9f:2b:57:a3:51:0b:
67:ec:b6:74:71:9f:7c:ce:cd:97:81:59:2a:9b:76:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:75:D3:CA:70:97:C3:24:1E:25:FB:67:5B:1C:D6:35:DE:07:E9:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MHXTynCXwyQeJftnWxzWNd4H6cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
85.31.44.0/24
94.103.124.0/24
94.154.160.0/24
94.154.173.0/24
109.206.242.0/24
185.218.138.0/24
185.225.74.0/24
185.246.222.0/23
194.48.250.0/24
194.55.186.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f7:7c:a9:34:60:ab:ee:05:b8:46:28:1f:9b:51:d7:4d:98:
ae:56:ba:21:96:a3:c0:39:0e:10:0f:06:27:57:30:11:d8:b8:
22:67:e3:d4:af:7d:55:69:53:d8:eb:b7:e9:17:a6:c1:94:03:
0f:e5:18:0d:a3:49:79:31:a6:77:40:12:f0:c9:72:70:b3:cf:
c5:7f:2f:3c:e3:84:f2:a2:89:99:76:6e:91:a3:d6:92:d3:97:
8d:f1:99:e3:b2:78:fb:e2:17:2d:83:82:24:08:f5:7f:bf:28:
83:6a:75:b3:8c:41:8d:d6:4d:5c:bc:67:d6:06:dc:bd:6a:ea:
4a:61:7f:26:d0:7e:fd:7b:f1:53:71:89:2f:b0:ee:4b:71:40:
91:e2:e7:97:f4:60:1c:10:45:8d:a1:2f:14:ec:ab:b2:93:ca:
bf:3c:bf:aa:01:86:5c:d5:1b:d5:dc:14:61:ee:71:d2:e3:64:
d4:c0:15:d1:68:59:cb:e9:85:b9:4c:ac:70:e0:4e:6c:34:89:
19:fa:f1:44:b2:24:cc:69:fc:dc:72:77:eb:33:3c:66:b4:5f:
08:98:02:46:0e:4d:c4:f6:93:45:48:a8:af:05:49:73:5e:f3:
88:fb:bb:2c:b6:22:9f:fa:48:55:71:c4:73:9f:cc:ec:c8:81:
b6:ce:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org