Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/mD3MwIhoSDP3D_CML6GbaAGMeuE.roa
File: mD3MwIhoSDP3D_CML6GbaAGMeuE.roa (raw, json)
Hash identifier: gyfE4FvMAl9kjWE9MDyCpuR+hV5q7C50VuntG5QlMoM=
Subject key identifier: 98:3D:CC:C0:88:68:48:33:F7:0F:F0:8C:2F:A1:9B:68:01:8C:7A:E1
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0B61AF72
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/mD3MwIhoSDP3D_CML6GbaAGMeuE.roa
Signing time: Sat 01 Jan 2022 13:58:32 +0000
ROA not before: Sat 01 Jan 2022 13:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200436
IP address blocks: 185.164.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190951282 (0xb61af72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 1 13:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=983dccc088684833f70ff08c2fa19b68018c7ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:09:e6:38:e0:25:f5:92:a1:40:1a:cf:cc:
e2:eb:9b:33:3c:ac:45:01:15:17:7e:90:ba:49:f2:
49:8d:7b:e8:ea:29:07:85:5b:07:66:a3:5b:56:cd:
4c:c1:d3:6b:40:58:6e:8c:66:ab:14:3e:7c:49:3b:
6f:4d:8e:1f:33:4c:29:6a:2c:fa:c9:2f:ca:77:f4:
6b:6e:13:f9:af:89:36:5f:ac:37:57:06:25:d2:83:
66:ed:86:e3:b6:9e:53:a5:0d:9a:83:3f:b5:0e:37:
de:b7:9f:b9:69:f3:f9:92:64:b4:a3:75:0d:2d:c7:
e5:e9:24:00:ba:b2:42:40:1f:e7:01:23:24:cd:e2:
4d:9f:fb:43:d8:74:71:f4:18:4a:bc:ed:d6:fc:a7:
44:57:5e:81:e8:c4:b4:cf:16:e5:bf:ba:d3:8e:d2:
1f:72:79:27:a0:a8:36:50:de:52:11:0d:e1:47:db:
82:6b:e0:6b:97:51:fa:5b:00:e9:86:2c:93:97:07:
46:92:7f:89:0f:79:4b:da:e2:59:a0:f9:12:c5:b0:
a1:c9:ed:c9:55:a6:46:23:39:3f:51:ad:91:b8:a7:
45:1e:61:63:ad:3c:50:0a:84:dd:af:79:20:9a:41:
70:c3:bf:b8:9a:ee:29:dd:5c:1a:59:46:60:f9:2b:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:CC:C0:88:68:48:33:F7:0F:F0:8C:2F:A1:9B:68:01:8C:7A:E1
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/mD3MwIhoSDP3D_CML6GbaAGMeuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ee:57:74:e3:9c:14:d6:c3:47:ea:67:01:d6:ec:1d:77:97:
46:a3:29:51:12:86:95:b4:cc:37:16:55:ef:6f:5b:41:68:80:
18:6a:61:c9:75:e2:1e:e7:a3:1e:a2:f4:e9:67:12:ed:12:2c:
27:d4:0f:ab:8b:08:e1:76:1b:1e:ee:3a:4e:ac:97:24:cd:92:
e9:03:15:8f:a4:f0:cb:69:c1:f8:ec:f8:de:4f:8b:cd:b6:13:
08:d3:33:ee:d3:85:b8:45:8d:b2:e0:bc:60:43:ed:a3:ab:18:
aa:14:79:e0:b8:c9:02:8d:18:2b:73:37:7a:99:f1:79:f1:dc:
65:c2:72:57:fa:d5:51:0d:6c:c5:c2:ab:d0:0f:07:1f:96:2b:
e7:cd:4b:5b:9f:dc:82:fe:53:8b:3e:2e:25:a2:93:73:81:d6:
f8:5d:24:a9:16:c1:77:50:ae:40:51:4e:d8:d5:ac:45:3f:62:
6d:1f:90:f8:a0:38:d0:6d:a3:4a:ca:c9:85:75:78:1c:81:db:
4e:05:1f:fc:b0:dc:3f:fd:87:85:7d:d3:84:f9:b9:c3:2b:d5:
26:86:4b:95:5a:0a:f5:e6:0d:c5:13:60:02:57:36:ce:79:d9:
26:36:d4:c4:1c:c2:e0:71:d3:65:7c:a6:ac:9b:44:36:81:37:
7c:7e:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:32 2025 by rpki-client