Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/mckILac5Ods1uDXEEkln8ASmjBY.roa
File: mckILac5Ods1uDXEEkln8ASmjBY.roa (raw, json)
Hash identifier: leN1PDKxhoSiG3Mc1/a+nYhMG/7HuKP1huX1vH+o5M4=
Subject key identifier: 99:C9:08:2D:A7:39:39:DB:35:B8:35:C4:12:49:67:F0:04:A6:8C:16
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 01231FB4
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/mckILac5Ods1uDXEEkln8ASmjBY.roa
Signing time: Sat 01 Jan 2022 09:01:28 +0000
ROA not before: Sat 01 Jan 2022 09:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33011
IP address blocks: 185.235.236.0/22 maxlen: 24
2a0d:8100::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19079092 (0x1231fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Jan 1 09:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99c9082da73939db35b835c4124967f004a68c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:36:9a:d9:e9:e8:f2:32:03:45:93:b9:70:
90:0d:03:79:59:e4:2c:9c:d3:46:d2:d1:b9:54:55:
1a:f3:b4:17:8d:03:32:ce:44:72:8d:f3:2d:24:25:
00:2c:21:62:c7:9b:bd:54:93:8b:35:f0:21:f9:09:
2e:d2:e0:09:26:b0:78:14:03:13:70:54:16:12:13:
7a:ae:c8:15:44:71:26:35:a4:53:59:f1:7c:56:b9:
f1:c9:83:c2:8b:35:82:18:74:83:53:e9:2d:4d:3e:
a4:e0:b0:a3:b2:9e:e7:9a:02:39:43:7e:37:b9:e6:
b6:35:05:43:bc:c3:4d:df:48:b4:3a:63:3d:70:bc:
3d:e2:b0:bf:35:11:08:a0:39:c4:3d:b0:08:bd:f7:
35:00:b3:c7:70:b2:ef:21:06:09:10:ab:ad:34:57:
59:e9:d8:0a:98:a5:60:8d:d3:a6:37:ee:74:d6:20:
10:e1:ad:9b:12:82:a7:13:e0:02:78:c5:21:84:e3:
be:45:85:53:90:17:f9:21:5a:fa:f1:ba:22:1d:09:
2c:db:33:88:28:2f:5d:5d:69:f5:b5:8e:0b:4d:13:
d5:b0:ee:94:2c:90:a9:0d:96:d8:6c:18:e6:25:07:
b1:05:18:66:5b:9d:1e:0c:05:08:dc:f5:1f:0c:71:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:08:2D:A7:39:39:DB:35:B8:35:C4:12:49:67:F0:04:A6:8C:16
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/mckILac5Ods1uDXEEkln8ASmjBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
IPv6:
2a0d:8100::/32
Signature Algorithm: sha256WithRSAEncryption
7e:56:0e:4c:76:dc:d2:90:22:bc:cf:86:e3:e2:8e:14:44:7d:
34:73:ca:b7:67:df:56:88:ab:3f:f8:56:8a:bf:ea:fa:7d:8d:
46:19:dd:42:29:19:c9:ff:55:32:3f:0f:5a:66:0f:38:66:10:
a3:ed:77:c4:d6:76:a7:4b:c5:e7:4b:26:9c:99:22:aa:ac:85:
e8:bb:62:dd:2e:2f:32:21:f2:fd:e3:6b:11:f3:fd:26:39:7c:
20:2d:62:bf:b2:6c:7e:cd:0e:10:fd:9e:6d:e7:94:69:82:cf:
25:df:60:4d:ff:ae:47:88:88:a7:e6:36:37:ee:7e:95:cd:b6:
7a:76:88:92:69:36:27:c1:b9:11:e1:3f:6b:b9:fb:96:f4:d3:
fc:91:a2:cd:c6:8c:9e:e0:3a:43:f1:8c:4b:a2:aa:88:3d:07:
8f:f3:01:b1:b4:b9:e3:7e:99:5e:31:d8:4e:19:55:a0:0f:85:
71:43:d1:00:3e:8d:1c:d1:a7:1e:70:d9:64:74:f8:db:41:6a:
22:7f:cc:b4:6c:b1:81:c5:ae:2e:6d:2b:76:5b:5f:5e:99:96:
9f:12:2f:7f:6f:40:f8:c8:bd:aa:eb:c4:7a:f2:36:8c:1d:93:
cd:ce:49:aa:15:2f:3a:5a:01:cd:b6:37:c7:5a:0e:89:ea:ff:
b8:48:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:47 2024 by rpki-client on console-fra.rpki-client.org