Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/nMK_srRbrkc3_U7P1YcX75VfUp4.roa
File: nMK_srRbrkc3_U7P1YcX75VfUp4.roa (raw, json)
Hash identifier: aIuLyEunBCYLAUw1/FlmEDcEYT0jA5Lhb2xD1cVoaks=
Subject key identifier: 9C:C2:BF:B2:B4:5B:AE:47:37:FD:4E:CF:D5:87:17:EF:95:5F:52:9E
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 17ECC42C
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/nMK_srRbrkc3_U7P1YcX75VfUp4.roa
Signing time: Sat 01 Jan 2022 15:59:02 +0000
ROA not before: Sat 01 Jan 2022 15:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59944
IP address blocks: 185.65.98.0/24 maxlen: 24
185.65.97.0/24 maxlen: 24
185.65.96.0/24 maxlen: 24
185.65.96.0/23 maxlen: 24
185.65.96.0/22 maxlen: 24
2a03:1ae0::/48 maxlen: 48
2a03:1ae0:10::/48 maxlen: 48
2a03:1ae0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401392684 (0x17ecc42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Jan 1 15:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cc2bfb2b45bae4737fd4ecfd58717ef955f529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:de:82:b6:30:61:c0:ee:8b:42:aa:be:4c:
30:57:dd:8f:e6:13:87:e9:1f:e9:c1:cf:05:ac:12:
5e:ef:68:24:d7:69:8e:bc:9c:77:65:e7:cb:4e:47:
97:17:46:83:12:fe:45:9c:75:78:89:f9:28:fc:91:
f6:f4:6a:f8:83:97:09:4a:c5:25:34:82:57:8b:f6:
87:62:01:b0:7b:5c:f5:2e:6e:8c:64:6c:80:e4:f6:
25:d1:ed:21:b2:2c:33:5a:ac:18:87:68:30:5e:ad:
19:d3:8b:d4:42:c3:75:9f:13:10:aa:89:74:66:a4:
66:6d:2c:e5:4d:e2:d2:89:b4:de:79:6c:c7:bd:63:
79:c5:aa:62:72:49:cc:de:c0:75:74:98:7c:a6:d4:
06:0d:7e:4b:e3:ef:2a:f4:ef:87:38:fd:bb:c6:0b:
bf:9d:c4:a9:95:05:7e:17:a6:8b:0a:5c:28:e9:43:
dc:a8:74:7e:42:98:86:7e:57:79:eb:72:37:ca:55:
48:d7:41:5b:0d:14:f6:41:d6:ff:18:ac:36:59:cc:
85:d7:4b:ff:52:51:2f:80:2c:ad:11:25:e6:e4:40:
50:fd:ff:2c:98:1f:e0:f4:41:2b:2b:e2:a7:9e:82:
f7:b4:5b:78:90:d2:43:1c:38:29:bf:83:d8:91:56:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:BF:B2:B4:5B:AE:47:37:FD:4E:CF:D5:87:17:EF:95:5F:52:9E
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/nMK_srRbrkc3_U7P1YcX75VfUp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.96.0/22
IPv6:
2a03:1ae0::/47
2a03:1ae0:10::/48
Signature Algorithm: sha256WithRSAEncryption
11:ad:31:aa:2d:39:9b:e9:46:f6:9c:82:09:2d:8c:1c:c0:30:
bd:c4:2f:a8:a1:e0:83:04:59:0f:91:6f:76:e6:a6:c5:9e:4c:
10:ac:0e:71:37:e5:f1:50:06:d1:6e:4c:6c:ea:4e:52:27:15:
35:32:b5:74:c7:6c:02:d9:4c:c3:96:44:c6:12:91:11:ad:3e:
38:6c:ae:df:8e:dc:d2:f1:3d:92:e3:88:a0:92:92:03:69:74:
28:b4:36:bd:4e:c4:a3:df:be:76:56:ff:26:6a:3f:46:eb:ca:
54:41:8d:cb:8c:4b:11:ba:a2:f3:b5:38:4b:75:ae:65:c7:07:
05:07:64:36:55:de:fc:15:07:92:65:23:84:98:f5:b7:9f:08:
a5:7f:5e:64:c3:fe:6a:3f:53:84:43:cf:95:31:b5:f5:42:e3:
27:f4:1d:27:f2:37:f0:51:d0:65:a8:d3:7b:97:c5:17:1f:28:
53:67:45:70:db:16:52:5a:be:87:2c:24:dc:4b:fd:6b:62:63:
c6:9c:8e:3b:2b:44:bf:69:05:6b:74:45:80:ed:23:94:5e:75:
88:67:40:7a:8b:a6:ac:cf:8d:67:df:e1:9f:d1:18:93:15:63:
03:93:c2:ba:2a:e5:92:7e:68:84:53:7e:e8:a0:df:fd:59:c3:
46:12:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org