Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/m4BNZcRhshHMrRMb3g4H0wl4HPk.roa
File: m4BNZcRhshHMrRMb3g4H0wl4HPk.roa (raw, json)
Hash identifier: Vsd6iez0eAeMIaPKCjBNRjdeTYvoc+R/BRZhJMgBPEg=
Subject key identifier: 9B:80:4D:65:C4:61:B2:11:CC:AD:13:1B:DE:0E:07:D3:09:78:1C:F9
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0184A3824F4F15C70A18C1A1ECF879463F55
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/m4BNZcRhshHMrRMb3g4H0wl4HPk.roa
Signing time: Wed 23 Nov 2022 08:02:16 +0000
ROA not before: Wed 23 Nov 2022 08:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.199.150.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:82:4f:4f:15:c7:0a:18:c1:a1:ec:f8:79:46:3f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 23 08:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b804d65c461b211ccad131bde0e07d309781cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:12:c9:e5:f7:be:b2:d1:3c:e8:30:04:97:
9c:25:73:08:b5:53:f4:1d:17:fe:cc:77:97:73:c9:
f1:55:4f:d1:db:1f:36:13:bd:a7:21:9b:e3:eb:20:
1a:24:f8:01:71:b0:11:9c:80:f0:f7:45:d4:41:fa:
e3:de:8b:ab:4f:a9:aa:82:9e:b4:42:c5:41:59:07:
9f:2a:0c:3d:ef:ad:70:c1:0a:ac:35:32:75:34:f2:
95:ac:f6:30:6e:b1:cc:00:76:67:89:0d:cf:38:eb:
0f:c2:86:60:fe:94:93:f3:69:20:3a:95:19:f7:a1:
be:34:01:c5:ab:81:b1:b2:f5:ed:1f:1c:24:24:c7:
26:54:66:36:6b:2c:84:1c:cf:4d:7e:af:5c:74:52:
81:7b:6a:fa:64:3e:27:94:8e:8c:0b:1a:3d:b0:1e:
4e:49:1c:49:8f:39:ce:8e:cc:6f:29:cf:85:48:55:
0b:ec:32:84:d4:63:33:8a:6f:fd:c3:76:79:ce:df:
10:14:14:17:33:a3:4c:15:e0:b9:8c:64:4e:28:ea:
fb:96:28:87:7d:f7:6f:b8:54:9a:d0:fc:4a:b4:56:
58:04:33:60:83:5b:fa:71:2f:85:07:45:6d:58:cc:
1c:60:a2:61:76:13:af:4b:7a:79:55:b3:50:f7:05:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:4D:65:C4:61:B2:11:CC:AD:13:1B:DE:0E:07:D3:09:78:1C:F9
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/m4BNZcRhshHMrRMb3g4H0wl4HPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.150.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e3:0f:9c:3b:0e:0b:2d:8c:66:f6:10:da:7d:72:e4:d0:9b:
e3:8b:e4:00:e2:82:d0:b0:9f:40:5c:e8:13:fe:cc:20:cc:c3:
bf:bb:8f:9c:8a:1d:59:0e:7f:23:ef:a1:61:b0:3f:46:84:11:
22:93:b7:af:b4:27:7c:e5:f9:2f:e6:49:7f:80:4d:94:3e:ed:
0b:04:df:70:22:8a:5d:d1:23:46:07:48:8e:31:fc:34:8e:25:
27:b1:c4:6a:a6:ba:c2:81:6e:21:55:e8:04:54:07:9c:08:58:
e4:25:a4:d3:88:f2:3d:49:7e:ca:56:95:8f:20:c6:85:a0:37:
bf:6a:31:4b:ac:ba:58:9d:1e:08:da:e3:2b:0b:4f:5a:2d:0a:
ae:5f:a8:4b:62:80:25:c9:fc:b2:4e:3a:7a:4f:84:af:23:f4:
51:c4:ef:22:f2:5c:b5:c1:19:be:64:c9:23:5f:cd:95:70:0e:
f6:05:3e:cf:0a:78:08:b8:6a:45:66:43:82:57:f2:8e:64:47:
07:3f:cc:f6:d1:ee:35:2c:08:86:1c:1b:76:db:80:73:d7:48:
c5:e7:e9:8f:6a:a1:9c:3d:73:d8:35:7d:ee:9b:f4:42:24:38:
c5:88:77:50:26:bc:42:5e:78:2c:18:68:9d:b2:d0:eb:2b:76:
68:72:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org