Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/mNb6RvbiISBYvV8M0TOrffAtLGI.roa
File: mNb6RvbiISBYvV8M0TOrffAtLGI.roa (raw, json)
Hash identifier: bZMZ0QLG2SOYvr6oSut2m7enc9yBaDH62qwJEmxyqxE=
Subject key identifier: 98:D6:FA:46:F6:E2:21:20:58:BD:5F:0C:D1:33:AB:7D:F0:2D:2C:62
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 0A617310
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/mNb6RvbiISBYvV8M0TOrffAtLGI.roa
Signing time: Sat 01 Jan 2022 07:54:58 +0000
ROA not before: Sat 01 Jan 2022 07:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204647
IP address blocks: 185.244.116.0/22 maxlen: 24
2a0d:2c80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174158608 (0xa617310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Jan 1 07:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98d6fa46f6e2212058bd5f0cd133ab7df02d2c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:af:de:c6:6c:3a:5b:45:fe:94:ea:6d:cf:
14:ea:a4:1e:17:73:15:74:43:0a:29:fb:45:0d:5c:
89:be:a9:86:63:ce:30:d1:0e:1d:fe:d4:0f:5b:6b:
7b:a5:70:c9:2e:c6:66:23:19:ff:7c:91:79:71:18:
4b:0d:37:bd:c5:a7:de:df:aa:c0:e0:0c:b3:bc:3a:
60:0f:26:14:f9:1b:a4:08:f1:c1:67:b5:13:71:fc:
b7:43:af:90:bf:33:53:32:4e:cd:8e:5b:55:c1:b2:
d7:3d:8c:4f:2e:f2:3f:7e:76:4f:35:b6:37:c3:1f:
a9:ab:07:b2:76:92:0c:06:eb:f9:39:93:55:0a:88:
46:0c:e0:00:92:56:1e:86:fb:ed:f3:3e:e0:f3:02:
11:18:41:ed:31:b5:24:f8:a7:48:6a:5f:60:af:6c:
6e:ef:2a:cd:21:0f:27:2d:f6:3e:0b:5b:25:62:cd:
5d:bf:db:e8:29:59:84:eb:ce:d1:50:44:b7:72:cd:
86:27:e4:10:f6:d7:30:ca:06:2a:50:c8:c7:f7:2b:
44:b4:88:67:32:19:4e:df:60:83:12:47:f2:d8:4e:
5f:fa:f1:f0:38:bc:c7:55:bf:35:95:0a:87:59:33:
fd:c6:5c:87:db:27:d2:d4:b4:42:70:87:a1:1e:0a:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:FA:46:F6:E2:21:20:58:BD:5F:0C:D1:33:AB:7D:F0:2D:2C:62
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/mNb6RvbiISBYvV8M0TOrffAtLGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.116.0/22
IPv6:
2a0d:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
0e:38:85:17:20:fb:29:6c:ad:87:15:1c:3c:5a:5b:3b:ab:9a:
5e:1c:32:25:8d:55:e4:b7:e1:f3:bb:d8:51:b9:9a:54:c7:44:
e5:f9:2b:3e:d3:be:92:77:a5:2e:6c:7a:2f:79:a1:1f:21:6a:
23:56:fe:57:22:af:b9:3b:75:6b:60:23:67:57:bc:4d:4a:82:
46:89:e0:17:01:88:f0:ac:2f:71:7d:8c:02:eb:e9:c7:c5:71:
70:b2:39:fd:27:61:e4:82:e8:55:6a:00:b6:1d:bc:34:0a:01:
a2:e3:9f:c7:61:96:a0:85:f5:99:fb:f5:46:f2:6b:39:ab:34:
81:17:70:05:60:48:7b:10:e3:22:cc:41:1f:04:11:53:76:4d:
07:1a:d4:7c:2d:16:1f:50:b6:d6:cd:b8:98:82:57:f7:c7:2b:
06:78:a6:4c:36:07:b5:23:8f:a1:ce:1b:ef:ff:f5:2c:a6:67:
59:09:c3:1c:d2:2a:9b:9f:53:5d:ae:fc:b2:14:46:cd:5f:f0:
73:2c:b4:d6:d5:0a:61:13:c0:49:4c:e8:62:47:eb:38:13:0b:
53:4b:00:90:fb:6e:b0:21:32:81:08:93:a2:a9:a3:e8:44:76:
fa:84:80:0b:9c:a0:2b:92:17:41:86:5b:ec:2f:6e:0d:f6:40:
7c:73:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:51 2024 by rpki-client on console-ams.rpki-client.org