Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/g_Mq7W5CoFkMIq_bpbwnpQoicIk.roa
File: g_Mq7W5CoFkMIq_bpbwnpQoicIk.roa (raw, json)
Hash identifier: IC82x8+IFPyi0EEd0n5YobgPJKXvDe4SQExdvscYt8A=
Subject key identifier: 83:F3:2A:ED:6E:42:A0:59:0C:22:AF:DB:A5:BC:27:A5:0A:22:70:89
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 03A2F260
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/g_Mq7W5CoFkMIq_bpbwnpQoicIk.roa
Signing time: Sat 01 Jan 2022 02:52:17 +0000
ROA not before: Sat 01 Jan 2022 02:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64413
IP address blocks: 185.42.27.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.42.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61010528 (0x3a2f260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jan 1 02:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83f32aed6e42a0590c22afdba5bc27a50a227089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:4c:d5:ec:9c:9e:9a:40:bc:91:04:ee:3a:
54:9b:c0:33:a0:de:9a:2a:47:ea:f6:c1:44:49:15:
f4:e7:7c:9f:f7:94:34:0e:f8:c4:bb:51:2f:5f:3f:
23:a8:56:9b:f4:f7:5a:3b:52:ed:0b:15:8f:17:24:
5d:3a:2d:6e:61:21:71:e7:b3:42:a9:35:1c:af:1f:
70:77:7e:4d:67:e5:c3:77:97:89:62:4a:58:23:30:
2d:ca:23:c0:ed:8a:38:02:94:a6:93:dd:12:e0:08:
b5:0e:59:50:ae:f9:7e:2c:e0:fb:8a:dc:17:b5:06:
05:02:09:3b:ed:0f:18:b8:ae:de:18:3e:34:f4:24:
9d:44:90:51:4e:0c:b4:89:a2:f3:04:37:a6:4a:84:
2c:64:e7:ec:f9:e3:fd:4b:9f:ef:1a:62:02:33:01:
e2:2b:eb:3e:c0:60:d6:24:71:db:43:21:1c:e1:d4:
31:85:fe:40:26:3c:ee:4e:68:cf:2e:cd:66:9e:c4:
4b:38:48:b8:09:a7:79:7a:35:5b:72:28:d4:b7:45:
6a:72:af:65:93:c5:ec:a5:87:56:c5:30:d3:05:aa:
0f:f4:5e:cc:e4:93:bd:af:ae:60:99:b9:40:a6:ae:
0d:60:04:3f:63:2b:43:c7:1c:77:b9:79:4e:e8:0c:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:2A:ED:6E:42:A0:59:0C:22:AF:DB:A5:BC:27:A5:0A:22:70:89
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/g_Mq7W5CoFkMIq_bpbwnpQoicIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0-185.42.27.255
Signature Algorithm: sha256WithRSAEncryption
10:10:67:79:3d:0a:0c:27:28:36:60:ec:d9:f7:cd:13:9f:7a:
fb:97:d2:27:91:22:51:96:70:c8:b4:d4:45:a2:9f:5e:6c:05:
9e:80:7d:e1:1a:30:4d:99:c4:60:30:bb:86:cc:45:40:ad:0d:
63:1a:74:ed:41:d0:da:25:aa:c3:2e:be:c5:da:96:d8:0e:03:
5f:5a:25:cb:0f:0a:89:6f:d0:cf:d7:e7:53:bd:65:47:da:ce:
74:59:fd:35:c2:40:62:bb:02:d9:e8:e2:45:5f:c8:5c:68:e9:
9f:81:64:cf:8e:a2:14:eb:9b:af:14:d3:9c:97:a1:d9:3f:56:
a1:2a:17:f3:23:75:ac:6b:cd:8d:78:3f:d4:13:51:25:c6:72:
32:d5:d3:60:a6:8a:58:b4:94:77:31:ea:db:20:30:2a:46:24:
72:04:a5:6c:59:ec:42:8b:0f:7a:74:74:df:8e:77:db:42:8b:
62:f7:bb:36:9b:22:20:cf:47:29:21:58:2e:6f:d8:57:05:e4:
f1:af:63:19:b6:18:5b:fd:91:87:f5:35:f8:a7:3f:e6:04:fb:
fa:60:df:51:f1:43:ce:0f:72:a3:a3:ec:c5:90:dc:b6:8f:e0:
8d:a5:40:8b:60:ef:3f:32:e1:9a:25:3b:60:d3:c7:89:af:8f:
04:5c:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org