Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/mipJ3btUoQQ_uv1RZMGQ11iBMzw.roa
File: mipJ3btUoQQ_uv1RZMGQ11iBMzw.roa (raw, json)
Hash identifier: eA4wq02yKIcd2JcXKbUuLmZ621zzu7g5CidfPVHdzmU=
Subject key identifier: 9A:2A:49:DD:BB:54:A1:04:3F:BA:FD:51:64:C1:90:D7:58:81:33:3C
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0182C6DA0FCA2095EABB7F7B5A7F1B58ACCC
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/mipJ3btUoQQ_uv1RZMGQ11iBMzw.roa
Signing time: Mon 22 Aug 2022 18:39:15 +0000
ROA not before: Mon 22 Aug 2022 18:39:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5511
IP address blocks: 185.89.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:da:0f:ca:20:95:ea:bb:7f:7b:5a:7f:1b:58:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Aug 22 18:39:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a2a49ddbb54a1043fbafd5164c190d75881333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:5a:08:00:91:33:7b:4e:01:ff:30:3e:52:
d0:f8:d7:d8:15:f3:22:5b:65:cd:4d:e3:57:1e:2c:
bd:98:68:f6:1b:25:ac:e5:98:39:e3:36:d2:bd:55:
51:d3:93:2c:de:98:7a:dc:fa:93:e0:e4:45:83:e8:
4e:86:71:5c:7a:ee:3e:ec:3a:77:74:ef:ee:85:02:
a0:d9:96:e5:be:7b:80:5d:3d:23:25:a4:f6:82:b5:
88:2b:52:94:07:51:38:f8:cf:94:93:1e:a8:13:bd:
13:f8:59:e0:0a:07:45:1f:59:69:92:84:61:53:c3:
fe:39:33:fd:5d:f9:43:2f:5a:1c:d1:d2:5c:14:bb:
f1:08:24:ed:77:fe:67:2a:7b:90:06:29:00:ef:9d:
d9:c2:be:5e:65:16:97:ea:55:0f:f6:cb:cb:90:b1:
c4:2f:14:62:da:d0:77:ba:d1:ac:8b:16:a7:62:fb:
9e:24:90:c3:0d:93:ec:df:2f:52:9a:47:d1:7e:fe:
f1:7b:f6:ef:af:60:cb:76:90:4f:4f:4f:8c:8c:7f:
80:c3:ad:c7:3d:23:d4:8b:d6:d9:75:b6:e0:94:d0:
10:f0:c5:24:e1:56:43:77:92:04:83:bc:85:11:c5:
b4:e0:4c:d7:64:88:86:bf:41:bd:d0:53:9e:3a:ae:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:49:DD:BB:54:A1:04:3F:BA:FD:51:64:C1:90:D7:58:81:33:3C
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/mipJ3btUoQQ_uv1RZMGQ11iBMzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.251.0/24
Signature Algorithm: sha256WithRSAEncryption
24:96:e7:95:b5:75:a9:a6:40:d9:2f:39:e3:78:3d:36:68:e2:
95:2b:61:ec:94:90:d9:ea:c2:5c:3c:1c:76:db:69:f7:ff:95:
98:35:d9:f0:f6:ac:f3:18:7b:35:89:5b:03:7f:31:06:d9:b4:
a0:86:4d:2c:ca:eb:91:8a:de:12:f1:24:cf:39:bb:2d:66:76:
b2:c6:cc:58:1f:f7:4f:d2:12:7d:b3:d3:18:03:98:c8:fd:38:
0e:7b:0d:e4:cd:70:30:40:c9:f5:c6:50:4b:88:ea:8e:f9:8e:
ee:aa:01:57:88:4e:dc:1c:7a:b0:eb:5c:1e:6f:42:77:81:cb:
fc:bc:b9:ac:8d:e4:73:62:85:7c:b7:f0:c2:b6:56:27:19:7a:
ae:3e:33:a2:c1:a3:60:6b:19:40:eb:ed:e1:8c:db:28:ad:ac:
db:19:ae:71:36:2d:40:32:cc:69:23:c4:ee:7e:c6:06:c0:c1:
d6:8f:b1:0d:82:08:6b:07:a1:c3:72:df:30:43:dc:32:81:b7:
b6:a4:01:62:3f:54:ae:5a:d6:da:76:8d:0b:e1:7d:05:00:c6:
f6:f5:e7:20:10:6c:7a:98:62:c2:e1:ba:6b:bf:ab:3d:b0:05:
94:cf:5b:8e:e1:42:81:9f:60:14:10:78:1b:c9:d2:cb:6c:64:
b2:88:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-fra.rpki-client.org