Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rMpPxpfCRSzbo39A-dqQDLul8fc.roa
File: rMpPxpfCRSzbo39A-dqQDLul8fc.roa (raw, json)
Hash identifier: OcHNenDErlq+cGWfTL/jGrkSITB56eQ6thSk0fPb8A8=
Subject key identifier: AC:CA:4F:C6:97:C2:45:2C:DB:A3:7F:40:F9:DA:90:0C:BB:A5:F1:F7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0882272E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rMpPxpfCRSzbo39A-dqQDLul8fc.roa
Signing time: Wed 11 May 2022 07:16:02 +0000
ROA not before: Wed 11 May 2022 07:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 185.200.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142747438 (0x882272e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 11 07:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acca4fc697c2452cdba37f40f9da900cbba5f1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:3c:f3:57:9b:8a:51:c9:33:fa:87:f8:82:
49:6f:66:3a:e3:2d:2c:3a:67:8f:60:eb:ed:d4:33:
fe:04:8a:23:40:14:5b:f6:a4:cb:33:0f:07:51:fa:
39:9a:0f:7f:fc:7f:ca:86:f5:ba:cd:25:52:1e:f8:
b5:19:a8:e2:9f:7b:75:ab:a6:26:16:63:db:18:3b:
97:3f:de:b8:f3:7e:95:f6:20:26:6d:21:8e:35:3f:
4b:b6:f2:7d:ab:19:27:31:1b:fa:70:e3:36:17:bf:
65:ef:49:50:8c:3e:51:04:42:93:34:67:ec:0e:02:
79:5e:2d:02:ce:8a:45:33:46:37:a0:a8:2e:bb:12:
c8:5c:75:57:1b:80:21:c7:44:ae:f8:78:a7:fe:a5:
31:81:37:f9:f5:fe:6d:0e:87:08:42:76:1e:c5:43:
0c:c6:87:63:a9:87:1d:52:7d:cb:73:b3:4c:41:e0:
80:0d:67:53:e1:c5:49:fd:02:8d:2b:a0:1f:1d:45:
a3:3d:f4:22:3c:5e:44:8a:10:fd:27:74:e9:f1:5b:
f5:a6:48:26:82:ff:2c:37:41:28:fe:63:62:e2:10:
db:a1:9b:29:be:7c:75:c1:32:5a:ae:21:1a:f9:30:
8d:12:31:52:95:f6:ae:b6:97:7b:8f:23:d9:5d:83:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:4F:C6:97:C2:45:2C:DB:A3:7F:40:F9:DA:90:0C:BB:A5:F1:F7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rMpPxpfCRSzbo39A-dqQDLul8fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:64:9a:bd:04:64:b3:f6:89:28:d2:87:bc:3a:90:23:57:ab:
9a:d8:64:2a:9b:8a:28:4e:64:01:a0:82:cb:d4:de:24:c3:7b:
18:39:05:54:ae:7a:77:16:28:8e:0b:0f:09:f5:f2:81:5f:be:
1d:83:31:43:8b:2e:cc:03:8f:ba:9b:5e:e7:c9:fd:e2:aa:52:
02:b8:0b:3e:6b:36:9f:72:00:e9:98:33:29:d3:2d:dd:85:7f:
08:4c:18:a7:2b:c3:61:65:2d:af:9d:2a:ce:13:23:d3:f9:65:
15:df:d9:e7:7a:ac:12:e5:b9:ce:67:59:b0:63:02:e3:12:dc:
29:05:6f:0d:b7:0c:f6:34:8d:7a:e5:5c:bc:74:ec:70:37:bd:
fd:ec:f1:8c:c0:22:65:07:32:17:bf:d8:8a:94:35:95:30:ae:
bc:53:10:ee:94:53:a2:b2:f0:68:ba:a2:d2:b0:a9:69:8c:4d:
78:02:a0:fb:19:2a:43:48:89:80:c3:c9:c3:b7:dd:6f:7e:f3:
f9:28:00:73:21:87:93:b6:93:9e:42:7c:77:92:71:f7:cd:00:
ad:9b:e5:1d:e5:54:5d:27:e5:3c:4f:30:f9:3c:6a:83:ed:6b:
d1:ab:8d:ce:11:61:d8:5e:b3:98:b3:8c:01:d8:2f:3d:dc:3f:
22:60:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org