Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/mcfrRHh3YriBG1Lg-_aF91KleeY.roa
File: mcfrRHh3YriBG1Lg-_aF91KleeY.roa (raw, json)
Hash identifier: 0NLKHSoD9J1v0xa8C+gyUsvV97mvdsymSvZshILj3kQ=
Subject key identifier: 99:C7:EB:44:78:77:62:B8:81:1B:52:E0:FB:F6:85:F7:52:A5:79:E6
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 1189F1B2
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/mcfrRHh3YriBG1Lg-_aF91KleeY.roa
Signing time: Sat 01 Jan 2022 10:57:30 +0000
ROA not before: Sat 01 Jan 2022 10:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207758
IP address blocks: 185.158.4.0/22 maxlen: 22
46.182.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294252978 (0x1189f1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 1 10:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99c7eb44787762b8811b52e0fbf685f752a579e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:19:d0:19:d2:ab:f8:f0:27:17:71:f1:22:
34:4d:cc:cc:18:be:a0:56:63:50:dc:ca:ab:6e:34:
e7:a9:1b:66:7f:8f:77:7d:eb:e5:c0:ab:08:20:b5:
cd:f9:2d:56:62:ba:48:51:c1:90:fc:0d:b3:67:14:
c9:76:c6:a2:8a:55:9f:04:b3:5c:0e:b2:9c:3c:75:
21:89:40:ae:bb:1e:98:cc:1d:75:b6:ad:ce:bf:b5:
6c:29:8d:cc:b1:1d:49:3e:6b:b2:24:a2:92:36:ae:
fc:ff:a1:cc:ad:23:a7:36:9a:c4:aa:44:a1:ad:e2:
4a:db:da:97:af:c9:cc:ae:e6:2d:0b:79:b7:8b:9c:
45:30:fd:c1:62:d3:23:b4:18:4b:22:89:8f:a4:0c:
bc:c0:14:63:a1:65:3a:87:74:30:f3:60:7b:35:bb:
92:19:34:7f:c5:14:8a:1d:40:97:13:35:11:83:d0:
99:bf:aa:cc:fe:b5:7f:ed:91:d1:de:9d:b9:13:9f:
99:a5:26:bf:55:8e:23:ac:fc:0b:82:a1:0b:74:8d:
a0:f6:68:cb:cc:7f:f6:38:14:84:2c:75:8b:be:37:
bd:66:8f:b1:87:a2:d5:3d:2f:45:0f:02:b5:19:2f:
a9:9b:be:20:5c:1c:3b:60:b2:12:b3:4c:b2:9f:28:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:EB:44:78:77:62:B8:81:1B:52:E0:FB:F6:85:F7:52:A5:79:E6
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/mcfrRHh3YriBG1Lg-_aF91KleeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.0.0/22
185.158.4.0/22
Signature Algorithm: sha256WithRSAEncryption
33:31:39:29:07:47:70:fa:36:cf:dc:8a:bc:4b:39:29:cc:65:
a3:7b:7a:47:45:93:a9:e8:e1:24:41:ab:f0:c9:8b:af:0b:4b:
79:5c:4f:18:c7:62:eb:e1:e8:88:09:94:62:6c:de:88:1b:6d:
77:55:f1:a7:e6:0e:c5:3f:94:f7:e3:b8:a6:6c:bc:a3:7f:e1:
d4:ae:b6:87:38:5e:49:12:ab:30:61:da:03:80:99:d0:4b:7a:
01:4b:75:94:cc:99:7b:ed:d9:49:ce:8b:f0:b8:6f:52:85:c1:
e2:9e:b2:c1:da:f9:ae:be:e8:6f:13:35:a1:8a:c2:5e:3e:9d:
df:73:5d:ee:68:6b:2d:9f:2b:22:c4:8d:6d:7a:61:8b:0b:1f:
3a:0d:5b:84:fb:30:ed:ec:41:19:6b:87:9e:d9:3a:0b:1a:b5:
55:f3:90:a4:8e:d1:62:d8:7a:5f:50:47:0a:21:10:96:d6:3e:
b2:3e:85:04:ec:dc:02:95:cb:13:3a:cf:76:20:aa:06:6b:9b:
75:df:76:09:ab:0d:39:01:4f:72:80:a5:40:c4:04:44:d1:23:
15:88:a1:8d:93:3e:a9:ab:6e:33:c9:4d:91:e2:11:fc:7c:06:
81:50:6a:9b:a6:e0:6e:3e:f7:78:1d:e2:ea:06:f8:14:3d:1f:
47:89:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:39 2025 by rpki-client