Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MQgkud_Boev9dW9bN3TkExR6jI0.roa
File: MQgkud_Boev9dW9bN3TkExR6jI0.roa (raw, json)
Hash identifier: bNJD/c5grLWKI9sTOuv58m0YuQr+yUCL03H93XeTjps=
Subject key identifier: 31:08:24:B9:DF:C1:A1:EB:FD:75:6F:5B:37:74:E4:13:14:7A:8C:8D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B5784EC
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MQgkud_Boev9dW9bN3TkExR6jI0.roa
Signing time: Sat 01 Jan 2022 08:58:33 +0000
ROA not before: Sat 01 Jan 2022 08:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31654
IP address blocks: 84.44.29.0/24 maxlen: 24
84.44.30.0/24 maxlen: 24
82.150.71.0/24 maxlen: 24
84.44.42.0/24 maxlen: 24
84.44.67.0/24 maxlen: 24
84.44.68.0/24 maxlen: 24
84.44.65.0/24 maxlen: 24
84.44.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190285036 (0xb5784ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=310824b9dfc1a1ebfd756f5b3774e413147a8c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:39:66:1a:c8:4b:25:b3:6b:63:f3:4f:8a:
a4:e9:8f:6a:eb:38:3f:54:42:ae:29:f5:6b:dd:f2:
35:96:fd:24:1e:84:dd:8d:04:a3:d1:b3:65:94:35:
8a:0e:5a:50:fe:28:bb:e5:9e:39:f6:be:57:d0:c6:
1c:4e:49:4a:33:79:8c:67:83:4c:08:13:39:6b:e3:
ea:f8:22:4e:95:50:0c:29:86:9a:66:87:25:8d:15:
94:68:48:ef:0a:e6:af:fa:89:73:f1:15:3d:9b:15:
4a:18:56:83:0d:c0:13:d6:dc:a3:3e:1c:8a:02:ef:
69:ec:5a:b1:43:f6:b5:ee:42:d4:23:3e:a5:05:0b:
5d:50:79:a7:e9:0f:da:2d:2a:1f:68:a4:89:4e:94:
0b:23:7e:77:5d:f2:13:14:92:43:c7:f0:9b:e6:59:
d5:fb:5d:d5:89:16:61:67:52:05:76:0b:4c:61:49:
93:f7:dd:8d:ca:c7:a7:cb:23:b4:4f:b5:0f:f2:77:
68:3b:de:0c:2b:a4:1b:ff:47:e0:24:58:c9:82:40:
98:f7:f9:1c:d3:03:cb:41:74:9a:23:06:4f:3a:f3:
e4:9c:4f:38:03:d1:03:e8:b1:0c:aa:7e:58:e2:42:
28:4b:6d:18:fe:65:88:b7:c6:e7:72:51:c2:ce:2a:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:24:B9:DF:C1:A1:EB:FD:75:6F:5B:37:74:E4:13:14:7A:8C:8D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MQgkud_Boev9dW9bN3TkExR6jI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.71.0/24
84.44.29.0-84.44.30.255
84.44.42.0/24
84.44.65.0-84.44.68.255
Signature Algorithm: sha256WithRSAEncryption
83:6b:15:26:00:db:bc:e3:f7:60:8b:86:0c:1b:95:ef:71:0a:
6f:75:62:28:77:96:20:12:86:8b:4e:da:df:62:be:0f:87:30:
5c:d0:f0:f7:98:27:cb:62:e2:5b:05:bd:99:a3:df:45:ed:dd:
1f:00:a7:d4:63:0d:4c:ce:9a:fe:c0:71:60:3d:c8:10:6a:80:
2f:d0:41:91:9b:63:03:c0:52:d5:20:79:f9:e0:71:c3:bf:ea:
10:97:9f:7c:43:f5:c2:5b:a9:39:93:37:3c:6a:89:b1:07:5f:
10:82:5b:67:29:72:bb:19:72:9e:8a:57:70:e6:a0:84:03:72:
1c:2a:b8:d5:f4:82:f7:ab:e9:79:7d:45:1b:47:b9:4a:b6:8e:
e5:d5:54:21:5b:3c:21:86:36:4d:fd:6e:ea:79:ea:ec:1a:50:
04:45:41:90:6f:01:34:9e:09:31:6b:a9:04:8f:51:3e:4e:dc:
d4:ba:c8:7d:00:f6:fa:da:2b:aa:ce:4c:f6:be:db:fa:a9:4f:
f3:1d:0d:e0:09:89:d3:1c:97:6b:f0:4b:34:2f:12:41:5c:5f:
2f:f9:c1:5f:b0:e8:2c:8a:b5:e2:2d:10:4c:f8:c1:ae:5f:da:
3d:75:b3:2f:8c:65:d8:1e:b0:68:18:82:eb:7f:f5:9f:06:1a:
e1:f3:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org