Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/MR3Q7-Yt4TVPkt1WXKr0QQabVFg.roa
File: MR3Q7-Yt4TVPkt1WXKr0QQabVFg.roa (raw, json)
Hash identifier: FF//lMtyAf6tWjV1VK6Xdw6dwnedzlBZu2TXEOzTzpk=
Subject key identifier: 31:1D:D0:EF:E6:2D:E1:35:4F:92:DD:56:5C:AA:F4:41:06:9B:54:58
Certificate issuer: /CN=c7ffd7ebbfa98083307c63f717a3aba7107696a2
Certificate serial: 0E060D5A
Authority key identifier: C7:FF:D7:EB:BF:A9:80:83:30:7C:63:F7:17:A3:AB:A7:10:76:96:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/MR3Q7-Yt4TVPkt1WXKr0QQabVFg.roa
Signing time: Sat 01 Jan 2022 10:59:59 +0000
ROA not before: Sat 01 Jan 2022 10:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 185.216.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235277658 (0xe060d5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ffd7ebbfa98083307c63f717a3aba7107696a2
Validity
Not Before: Jan 1 10:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=311dd0efe62de1354f92dd565caaf441069b5458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:d0:f3:8a:ae:ad:69:98:1c:d6:df:58:b6:
fc:a2:2a:a1:b2:2d:aa:70:64:da:12:47:a1:15:1c:
fa:01:8a:15:1b:62:7c:ca:6d:5a:a9:ba:ce:4c:21:
61:8d:32:9e:35:c0:8a:46:e2:62:8f:2d:4f:09:2d:
a4:99:31:33:8a:61:ee:d1:f2:81:5f:6e:18:2c:50:
d4:53:84:80:82:57:77:a3:eb:73:50:e8:76:51:82:
6b:85:23:28:a0:05:7d:3e:7e:aa:3d:77:7d:b1:eb:
f4:18:e2:75:37:ac:2f:2a:f9:a2:6d:31:07:83:c8:
49:25:49:85:b8:dc:1d:d0:0f:ed:01:2a:96:fd:17:
c8:10:11:84:bd:b8:be:f5:83:2b:53:6d:a9:8c:93:
0f:cb:76:bf:2a:eb:b1:40:9d:f7:b8:cf:6a:fb:a2:
07:a0:60:98:a1:0c:ac:a2:47:39:7e:cb:29:e8:60:
5b:bd:42:60:d6:36:44:f7:60:6a:85:6a:a4:05:87:
5c:dd:69:08:25:7a:17:a3:29:4b:b4:95:cf:c6:8d:
d4:38:70:03:e0:c1:0a:05:15:9a:0e:18:56:89:ff:
cb:50:41:7d:3e:d3:2d:4e:77:0d:1c:41:08:91:3e:
c3:48:00:af:8b:d9:8c:e3:be:1f:a8:9e:d8:c9:1e:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:D0:EF:E6:2D:E1:35:4F:92:DD:56:5C:AA:F4:41:06:9B:54:58
X509v3 Authority Key Identifier:
keyid:C7:FF:D7:EB:BF:A9:80:83:30:7C:63:F7:17:A3:AB:A7:10:76:96:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/MR3Q7-Yt4TVPkt1WXKr0QQabVFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:45:fb:31:d9:42:1f:17:03:a2:54:d1:ab:8f:28:4a:5f:4a:
7b:09:9c:e3:78:1e:78:f1:93:98:f4:b7:c6:82:37:3e:aa:44:
7e:d7:73:81:68:8d:47:0c:1a:0e:8a:fb:77:ef:ed:4b:69:a0:
46:76:f5:4c:55:d2:8f:f6:bf:3f:d8:b7:ed:29:de:9e:ac:d1:
0e:e9:e3:7a:8e:f9:48:b2:64:fa:8c:d0:df:0e:52:de:95:6b:
be:2f:88:30:80:a3:4b:e8:1d:62:2d:2e:be:aa:ca:ae:34:03:
ed:d8:e9:fb:08:ba:de:cc:ea:07:91:ce:b7:60:47:69:db:fe:
a5:01:19:d7:f6:ba:c9:05:94:2b:55:e9:5f:b3:6b:7b:38:bf:
84:54:af:a0:f6:78:4b:22:b6:d7:7a:06:c7:b5:44:35:24:a0:
57:8c:95:eb:54:41:27:03:6f:5a:46:fa:99:00:3a:d6:60:e6:
fa:9d:48:32:ae:92:e1:c6:0c:f4:68:60:46:f0:cd:67:a9:76:
d4:fd:13:6b:20:8e:32:a4:97:85:2f:40:21:76:4d:02:ec:ef:
fb:4c:56:79:18:16:8f:7d:e2:9c:c4:1a:1f:da:9c:e0:38:1c:
d5:d4:d7:bc:e2:50:fc:ac:48:26:f7:63:e3:32:c3:d5:3e:1a:
d0:54:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:07 2024 by rpki-client on console-ams.rpki-client.org