Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/MB_2VTWIqv2Cd1uzJyFbRyJC4Hk.roa
File: MB_2VTWIqv2Cd1uzJyFbRyJC4Hk.roa (raw, json)
Hash identifier: 0B0djDa5p2u2bnywTAke1tTZAqFb3/6dUU3T8Wqb34g=
Subject key identifier: 30:1F:F6:55:35:88:AA:FD:82:77:5B:B3:27:21:5B:47:22:42:E0:79
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 0733BF23
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/MB_2VTWIqv2Cd1uzJyFbRyJC4Hk.roa
Signing time: Thu 21 Apr 2022 05:10:07 +0000
ROA not before: Thu 21 Apr 2022 05:10:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 185.8.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120831779 (0x733bf23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Apr 21 05:10:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=301ff6553588aafd82775bb327215b472242e079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:b3:c4:84:48:34:2c:9e:98:f9:df:0c:76:
4b:82:69:95:d8:b0:a4:94:cd:a9:3b:99:d6:0c:98:
72:2e:11:7b:a3:9d:dc:59:56:56:14:d9:7d:34:b8:
f7:89:52:af:40:04:e8:6a:e1:5f:e0:9c:4e:55:96:
59:86:18:3f:ae:d1:2d:20:22:35:3e:c4:b1:87:9c:
0e:13:c9:a1:17:d8:d4:e7:4c:ee:c4:ac:ce:cd:cd:
ca:27:27:ec:9a:bb:01:3e:11:ce:0f:73:23:f2:6c:
55:8e:ed:cf:16:fe:03:f1:f7:1c:f3:24:ee:8a:f2:
d4:1a:f7:ff:c0:3d:cf:b1:ee:2f:77:c8:96:2b:6c:
72:3f:41:ea:b5:75:70:c8:7b:41:20:3c:87:75:da:
d1:a9:fe:d7:42:45:45:14:b3:e9:d0:c6:f8:3b:43:
a6:6d:81:6c:f1:e4:df:ad:3f:0b:c2:9d:73:e8:29:
64:6f:9f:d5:ca:b6:17:59:6c:a3:99:30:ef:0a:a5:
6a:53:08:79:03:77:32:8c:ab:f4:fc:d0:f6:ae:9c:
82:85:4a:e2:76:24:19:92:aa:fb:a4:2b:72:e4:72:
88:53:8d:d5:e5:b9:3e:4f:0d:64:82:65:1a:40:a9:
6c:77:f3:14:58:33:8c:b3:7f:89:e7:8b:7f:de:49:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:F6:55:35:88:AA:FD:82:77:5B:B3:27:21:5B:47:22:42:E0:79
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/MB_2VTWIqv2Cd1uzJyFbRyJC4Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.143.0/24
Signature Algorithm: sha256WithRSAEncryption
88:67:46:af:58:fd:78:09:5a:6d:4e:eb:eb:3c:00:2d:43:de:
7a:73:a6:75:58:31:04:35:61:b5:76:e6:88:a9:5d:35:cc:74:
96:df:cd:a3:0e:66:c4:10:fb:b1:d0:cf:1c:29:22:55:9b:06:
6b:64:8e:59:a1:82:ed:d7:b6:f4:19:ea:97:8e:73:c0:9e:68:
50:0a:d7:b6:11:26:b6:bd:58:1c:ed:2f:b8:68:09:1e:68:33:
af:3f:4b:be:16:e7:11:ab:ae:62:03:a8:9a:7f:dd:c6:27:50:
ee:e3:4c:36:01:ff:e0:04:53:8d:72:ee:76:e5:48:8c:84:98:
01:9b:d1:57:48:c4:4d:4d:21:e0:78:0d:71:94:a7:f1:72:24:
45:55:0d:cc:c5:ca:a8:83:4a:a2:b3:a7:c5:7b:10:21:db:c3:
00:eb:cd:dc:80:dd:69:da:c8:39:ef:0d:b1:06:9b:1a:cd:90:
a9:f1:cd:be:01:78:a2:56:88:45:45:28:87:b2:fa:71:d9:b8:
98:d4:4c:78:66:c1:5f:a7:ba:17:be:87:77:8e:48:b1:33:eb:
d7:18:85:fc:88:bd:37:f4:9e:4f:37:0a:42:b5:a0:7b:05:9c:
47:cc:8e:b1:ad:3a:ce:10:a6:e1:15:5e:35:6b:61:58:8f:15:
61:db:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org