Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/MkmemzooLnFnDIjwFm9pITwUp90.roa
File: MkmemzooLnFnDIjwFm9pITwUp90.roa (raw, json)
Hash identifier: PJ/gSp0WxzzyGMiDdbe8JbfLu5M87dffTBUi70zM8nQ=
Subject key identifier: 32:49:9E:9B:3A:28:2E:71:67:0C:88:F0:16:6F:69:21:3C:14:A7:DD
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 06A7655E
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/MkmemzooLnFnDIjwFm9pITwUp90.roa
Signing time: Sat 01 Jan 2022 10:03:40 +0000
ROA not before: Sat 01 Jan 2022 10:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59729
IP address blocks: 185.162.10.0/24 maxlen: 24
93.188.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111633758 (0x6a7655e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jan 1 10:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32499e9b3a282e71670c88f0166f69213c14a7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:bc:63:8a:46:0a:ba:87:30:3f:75:3a:ad:
50:83:8d:59:e8:39:17:c1:39:d8:7a:fb:69:29:87:
37:93:17:78:4f:93:34:80:46:fc:5e:c7:63:fa:c4:
9e:42:a6:86:3d:b1:af:f2:32:8c:b9:63:a2:e0:17:
0b:3b:87:bb:46:a9:ca:ad:7a:33:ca:02:5d:c8:a3:
7b:a2:59:1b:c8:b5:2f:45:27:de:96:d8:6d:31:2b:
4c:9f:59:98:be:f1:bd:be:5c:0a:4b:80:2e:9f:83:
fc:a4:7a:4a:8a:50:2a:b2:d8:6e:f9:e0:2f:76:61:
1a:36:c6:5b:98:a8:70:34:eb:a1:09:a3:e2:bd:ad:
66:a0:aa:cb:4f:b8:e5:76:f3:58:7d:bb:bb:18:4e:
1b:3e:d4:05:81:01:b4:be:15:3d:db:d2:1b:61:ef:
5d:fc:78:d5:3d:1f:4a:28:f3:8f:06:2d:51:55:6c:
37:7a:22:03:d9:13:e9:a5:80:41:d7:0a:87:a3:a8:
3f:db:6a:87:5c:bc:3a:03:43:b0:39:a3:fe:fd:43:
19:ab:d8:86:10:01:0b:0f:67:da:6c:bc:12:ee:25:
19:31:77:79:04:c4:a0:27:7d:f1:22:ec:f8:c5:f7:
36:1f:af:0b:2f:f5:44:f4:f1:24:36:13:9a:fa:ec:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:9E:9B:3A:28:2E:71:67:0C:88:F0:16:6F:69:21:3C:14:A7:DD
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/MkmemzooLnFnDIjwFm9pITwUp90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.155.0/24
185.162.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cc:95:af:ff:56:f2:0a:0f:6f:49:5a:0a:af:d7:a3:84:c1:
05:6f:8b:ac:ce:af:86:8c:d2:2e:ce:bf:02:b9:34:59:fe:b2:
5a:a6:28:d9:96:c8:d9:4c:e1:01:cd:1c:19:a1:93:7a:f9:53:
ad:f1:7e:f9:b9:08:05:69:19:d3:67:85:a8:9b:90:6b:b0:50:
c6:ff:3d:32:5b:78:2c:a4:e3:4d:a7:33:87:c6:f7:17:5d:4c:
15:2a:34:93:d4:83:bf:31:25:94:30:fd:fa:5f:fb:e3:6c:0e:
e7:b3:0c:b1:1d:51:6a:82:13:55:d7:c5:64:f2:45:f5:94:5f:
bb:86:83:5d:23:4f:64:e5:f6:ac:e9:59:c8:75:ab:ad:d8:84:
97:fd:a8:26:08:01:4e:85:56:03:b3:b2:5a:39:55:59:73:73:
73:72:a0:47:94:39:6f:d8:d9:8f:cf:e4:f4:0c:b4:a1:0b:39:
3b:9e:46:08:ba:0d:2e:b6:4d:22:9f:39:c6:67:53:87:45:0e:
8e:1a:cb:81:2f:e1:15:a8:2e:57:57:9a:8b:e8:f0:ed:6c:d3:
f4:bb:50:03:b2:29:a7:5d:b0:57:74:72:4a:6b:8a:9e:f8:69:
a7:b3:69:a5:25:c1:81:aa:e5:5d:96:32:86:d5:e9:04:1e:77:
49:11:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:57 2024 by rpki-client on console-ams.rpki-client.org