Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/mlGmt3AKS5HDkwDusBYEmS8TlsY.roa
File: mlGmt3AKS5HDkwDusBYEmS8TlsY.roa (raw, json)
Hash identifier: yoaNt0R1whFI20Hq27TAKilh2vcfeI+jR6V/zAMR5k0=
Subject key identifier: 9A:51:A6:B7:70:0A:4B:91:C3:93:00:EE:B0:16:04:99:2F:13:96:C6
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 14F6821A
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/mlGmt3AKS5HDkwDusBYEmS8TlsY.roa
Signing time: Sat 01 Jan 2022 13:06:26 +0000
ROA not before: Sat 01 Jan 2022 13:06:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198976
IP address blocks: 213.135.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351699482 (0x14f6821a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 1 13:06:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a51a6b7700a4b91c39300eeb01604992f1396c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:19:1e:27:70:6b:91:7e:bd:02:ff:99:b2:
62:92:b7:ef:05:6a:68:0f:55:91:eb:66:3d:88:3d:
fd:d8:6c:bf:42:e3:c0:dd:71:8b:de:40:27:69:6a:
d8:3c:c3:69:13:92:0f:0c:0a:05:d7:22:d7:15:22:
13:e6:ed:75:17:31:b9:5a:bd:37:07:5b:a2:c2:98:
9b:07:1b:d9:4d:5d:fa:88:fe:72:e4:7b:a4:b1:f2:
b7:15:54:bf:51:4d:b1:f2:06:25:fe:56:87:7a:9c:
59:dc:d2:2c:ce:1d:2d:a7:b2:18:79:c3:61:44:6b:
fe:73:aa:92:c2:eb:f8:a3:a2:3b:a0:12:b7:b5:7d:
5d:72:5d:68:23:ab:fb:87:b5:a8:1c:55:99:d7:dc:
af:d0:0e:78:a0:c2:20:1a:2f:74:14:75:fc:bd:bb:
3a:60:a2:64:f4:05:f5:ed:2f:47:7a:fa:7e:35:01:
fa:ea:e3:1f:43:8f:95:ca:a5:5e:13:4c:5f:66:3d:
1f:b8:23:86:bc:7f:dd:e6:6b:1f:d8:6a:7b:e4:bb:
41:6d:da:c9:33:dc:d4:e3:e6:43:d2:c2:b1:cd:04:
1e:61:d2:90:9f:87:3a:cc:d3:e3:4f:99:40:0b:c4:
07:a1:fd:38:2d:b6:45:c6:f6:a7:ce:24:af:52:b0:
3d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:A6:B7:70:0A:4B:91:C3:93:00:EE:B0:16:04:99:2F:13:96:C6
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/mlGmt3AKS5HDkwDusBYEmS8TlsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2b:62:bb:5d:48:2e:4b:db:91:d4:da:28:94:78:59:e3:68:
b1:06:22:50:04:33:1e:5e:07:6f:8a:cc:0c:51:ca:71:fb:ae:
37:d7:23:8f:d5:c1:db:70:cc:12:04:83:fa:d8:70:f9:ae:0a:
a2:0d:d4:b6:de:9d:3d:23:de:53:8b:7b:0a:40:f6:7b:e8:fb:
42:1c:27:63:c4:91:1f:13:bc:63:0b:24:ef:75:36:e3:fc:91:
65:38:98:e9:11:fb:37:d0:3f:d9:b7:8e:d6:0c:85:57:8a:93:
05:4b:62:e8:fe:af:0c:28:8a:40:e5:f2:a6:c2:fc:6a:fa:1c:
39:06:0d:d3:7e:a6:ea:89:45:53:b6:4c:f6:34:c3:49:b3:60:
4a:2c:1a:fe:e8:18:b3:cb:e8:ed:93:70:8b:99:67:2a:97:8b:
ff:8a:ab:03:5b:4a:fa:55:43:6b:98:4e:96:56:bf:44:d0:a1:
8a:23:f5:aa:4b:6d:83:e5:8c:93:f8:8d:35:46:ba:bd:45:c4:
7b:17:5c:33:c0:66:e6:ff:fd:79:af:8a:5c:3f:37:ed:04:ae:
2c:f9:17:59:d4:d0:2a:d3:22:44:27:e5:7b:ff:c5:89:87:e2:
f0:4c:25:89:5a:33:1b:19:b0:e7:98:1e:e1:d6:2b:d3:9f:73:
df:a3:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org