Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mKpExMXS27Kb_xjgFKSUmpFUgGs.roa
File: mKpExMXS27Kb_xjgFKSUmpFUgGs.roa (raw, json)
Hash identifier: vfKWxbAvissy5addaoQDO29er/cm+/1vznverc3wZok=
Subject key identifier: 98:AA:44:C4:C5:D2:DB:B2:9B:FF:18:E0:14:A4:94:9A:91:54:80:6B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184D4763A8E0F96435BEAF3887F4C2918A3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mKpExMXS27Kb_xjgFKSUmpFUgGs.roa
Signing time: Fri 02 Dec 2022 20:10:28 +0000
ROA not before: Fri 02 Dec 2022 20:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
77.83.38.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:76:3a:8e:0f:96:43:5b:ea:f3:88:7f:4c:29:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 2 20:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98aa44c4c5d2dbb29bff18e014a4949a9154806b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:d7:07:f8:45:ac:29:68:6e:0e:f6:fa:ff:
90:a1:2c:34:76:d7:ad:a7:32:5d:91:cd:58:e8:6b:
9a:58:a8:a8:08:3e:82:ec:a3:06:93:04:fc:04:0d:
47:5a:62:99:33:29:6b:c6:8b:a9:1b:73:ee:ce:a1:
c0:81:5e:bf:3e:be:b4:40:e6:5d:0f:3d:30:4d:b1:
4d:b9:da:1f:1c:12:38:1e:1b:51:fa:92:f8:c3:6d:
63:dc:d0:cd:ff:8c:90:86:eb:63:91:85:be:26:c8:
3d:f3:e4:f4:11:bb:d8:ce:b9:e6:30:0b:22:7b:14:
92:b3:38:42:a8:63:07:64:f3:d4:ff:d8:73:2c:fa:
72:c2:eb:13:d9:8f:4c:82:36:39:a1:77:f8:25:8b:
45:16:e7:5a:e8:b5:a9:51:09:44:29:2c:a2:fe:a7:
4a:80:1d:77:a3:da:8e:c3:03:77:03:80:60:63:ac:
b3:64:1d:3d:da:32:af:30:21:97:3d:a7:8b:4e:56:
24:bb:c0:eb:a3:47:8f:15:03:44:80:8c:11:b2:55:
f1:8a:80:62:82:77:07:26:e6:bf:2e:09:9b:88:03:
5b:8a:0b:32:08:35:00:96:17:31:dd:d2:59:9a:2f:
7c:9c:fc:61:01:52:c6:d5:8e:4c:7c:81:9e:96:9c:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AA:44:C4:C5:D2:DB:B2:9B:FF:18:E0:14:A4:94:9A:91:54:80:6B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mKpExMXS27Kb_xjgFKSUmpFUgGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.120.0/23
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
10:74:1c:dc:84:0f:39:c5:6a:38:f6:a8:32:c4:19:b6:ef:1c:
a9:28:ab:28:0a:cc:0a:a9:7b:0c:64:97:7a:64:e3:e6:bb:00:
74:7d:69:a6:21:b6:8e:d5:b8:99:4a:ca:64:56:c9:ff:cf:66:
41:9b:64:8e:cc:b3:3c:b2:d1:56:fe:41:fe:33:68:90:c0:e4:
1d:e8:1c:a1:87:69:fb:8b:5e:61:51:82:91:25:1f:d7:62:d3:
d6:ce:e4:84:b7:c8:b5:d6:56:ce:7d:49:cd:0b:7f:a5:af:4a:
e8:59:d1:eb:e2:19:d4:77:a5:69:37:2d:a2:d2:e4:5f:71:24:
4a:45:40:8b:62:10:67:99:e5:3c:19:27:51:5c:23:4a:c5:b9:
5a:70:e8:3a:6a:cf:b4:63:bd:18:6f:d8:6f:f8:d8:e0:ea:a2:
93:76:cb:90:a3:9d:8a:f4:02:6a:f8:7a:8a:36:0f:02:2d:0f:
1a:1a:56:25:44:0b:3d:fe:81:30:d7:14:58:f3:08:2b:ca:bb:
98:cf:78:9a:b8:a5:e0:32:4e:6a:bf:40:8f:2e:95:43:13:10:
6e:3a:2f:67:f7:6e:41:ff:b5:b4:01:0d:56:d0:95:8e:3d:f0:
bf:71:a6:78:4b:6e:84:77:32:fb:2e:66:fa:94:5d:18:5e:fd:
99:83:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org