Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/MIGXPtlg4eXGpBsmGpQCKG1VyvA.roa
File: MIGXPtlg4eXGpBsmGpQCKG1VyvA.roa (raw, json)
Hash identifier: 8q5Vtgt9VmAPJiljUrBhd929egv0EiKlCaoJWCAe4Z0=
Subject key identifier: 30:81:97:3E:D9:60:E1:E5:C6:A4:1B:26:1A:94:02:28:6D:55:CA:F0
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 0E371123
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/MIGXPtlg4eXGpBsmGpQCKG1VyvA.roa
Signing time: Sat 01 Jan 2022 06:58:43 +0000
ROA not before: Sat 01 Jan 2022 06:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45040
IP address blocks: 185.216.160.0/22 maxlen: 22
2a0b:b9c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238489891 (0xe371123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jan 1 06:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3081973ed960e1e5c6a41b261a9402286d55caf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:36:ec:6f:be:b8:52:b0:1b:e3:47:c1:92:
80:e0:32:0d:f4:21:fa:c7:a0:37:a7:8b:94:f9:0f:
9b:07:c9:fc:85:f5:fe:8d:fe:71:3c:1a:3a:34:18:
0f:20:9b:f9:64:7b:68:2b:08:08:70:ee:e1:41:0f:
ec:7e:83:35:ca:01:56:b2:2f:bd:df:fe:6b:9f:a9:
f5:5f:c8:6e:49:d5:0c:78:d0:1d:6b:83:51:9e:50:
f3:57:b6:d4:f9:c5:74:44:cb:8a:f3:15:45:af:43:
51:87:d0:f3:d3:a0:f3:d6:fa:91:f5:d7:db:33:31:
93:f5:dc:7d:3d:cb:6b:44:3a:66:79:28:a3:31:c9:
f1:fb:5f:5c:04:49:30:6b:05:e8:8a:ba:eb:ad:d8:
e1:3f:51:33:7b:87:8e:4b:78:af:b3:06:ca:02:c8:
fc:36:39:5e:e0:d8:ea:e7:6c:fd:ad:7c:fa:b7:a9:
31:18:1a:66:96:1b:31:3b:62:b5:5a:51:a6:f7:b4:
cd:ec:86:1b:51:59:f4:34:50:a3:eb:bc:c0:07:d9:
8b:cf:8e:dc:7e:be:c2:48:62:dd:3a:61:26:ca:f7:
4f:19:0a:54:70:71:ca:ff:17:16:8e:c3:8c:2f:a7:
f1:7a:67:e6:9d:92:c3:ea:82:5e:c1:00:63:ae:d7:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:81:97:3E:D9:60:E1:E5:C6:A4:1B:26:1A:94:02:28:6D:55:CA:F0
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/MIGXPtlg4eXGpBsmGpQCKG1VyvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.160.0/22
IPv6:
2a0b:b9c0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:9e:97:0c:fa:47:bc:e3:10:d3:bb:92:f7:dc:e6:43:dc:94:
f7:d4:c0:f4:2e:6c:12:77:3f:fc:78:a8:94:20:45:36:05:32:
81:f1:a4:cc:26:88:ee:56:ac:83:e7:d9:ba:f6:73:26:03:cd:
18:19:9e:0e:ea:00:25:94:95:40:71:54:96:20:60:44:a2:ea:
3e:6d:3f:4e:7b:57:3a:2c:d7:51:1e:e6:9a:13:5e:70:3b:95:
95:ac:50:d6:3d:af:51:c3:b4:b9:1b:67:a5:bd:83:27:04:0e:
34:51:1e:99:2e:c9:7d:84:e5:bd:65:05:04:86:a9:76:c7:81:
b9:2d:25:f0:02:61:0b:79:e0:25:c4:8d:29:b3:40:ed:62:4d:
09:9a:32:e9:d5:5f:07:8f:82:41:b2:1a:f5:d2:39:4e:15:f5:
87:4d:f7:12:b1:ff:b6:7e:31:b2:b5:3a:bf:64:62:89:46:f8:
5f:84:29:dd:15:9d:d3:fb:b4:5a:7c:53:17:b1:87:db:81:30:
ad:50:c6:9a:c7:b0:53:7d:c9:bc:34:80:61:6d:33:f5:bd:53:
66:c6:8b:ec:07:59:57:46:0f:fb:10:b7:96:d9:28:de:01:52:
b0:bc:cf:c6:28:5f:44:b1:25:79:10:14:1c:f7:82:0b:e1:2f:
b6:5b:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org