Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/8mxbIimu3GBslMgsSvKtx9_Uh2g.roa
File: 8mxbIimu3GBslMgsSvKtx9_Uh2g.roa (raw, json)
Hash identifier: 7C1EGyKMhmGb4et9gcxxNR7HZRO4ACk3xoyEvv0a4VU=
Subject key identifier: F2:6C:5B:22:29:AE:DC:60:6C:94:C8:2C:4A:F2:AD:C7:DF:D4:87:68
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0184010B59DA427C4C12C5AFAD5E3C27A480
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/8mxbIimu3GBslMgsSvKtx9_Uh2g.roa
Signing time: Sat 22 Oct 2022 18:53:51 +0000
ROA not before: Sat 22 Oct 2022 18:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203978
IP address blocks: 185.176.104.0/22 maxlen: 24
185.106.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:0b:59:da:42:7c:4c:12:c5:af:ad:5e:3c:27:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Oct 22 18:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f26c5b2229aedc606c94c82c4af2adc7dfd48768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:90:6d:f6:11:c7:51:7d:4f:68:49:8b:3d:
8c:13:2b:bd:46:79:09:03:0b:25:92:85:54:43:77:
8a:37:1b:60:55:bc:4f:0d:50:08:34:35:24:8b:96:
0c:b2:46:08:0e:f1:49:44:81:2e:3e:39:5c:8c:d9:
74:4c:da:f4:2e:c1:de:0e:2c:2a:42:07:6e:a8:a6:
68:16:8d:85:b2:27:8e:12:f0:3b:16:5a:c0:b3:dd:
08:45:23:b6:e2:3b:0c:85:cf:4b:24:6c:71:cc:06:
1b:21:d2:cd:d2:cc:8f:7f:51:c6:92:a1:1f:b3:19:
fd:1c:ec:14:36:96:02:c3:63:19:8f:dc:43:fe:24:
a3:ec:12:29:d2:57:8a:95:18:48:67:4c:ae:28:a0:
72:fc:d2:26:a6:30:55:34:45:56:4e:40:05:03:d2:
f2:f8:63:45:d6:27:c2:50:e0:b0:67:07:dc:6f:17:
4a:9b:48:df:ef:77:0d:68:fb:d8:36:23:fd:b2:f9:
8e:bb:5f:21:96:55:a7:10:6f:8b:29:7b:17:bf:33:
03:8f:d8:8e:b5:38:0e:41:16:96:a0:17:77:74:42:
ee:d7:b9:b9:95:2b:53:8f:9f:6e:d7:6f:e7:a9:b6:
d0:ff:b8:3d:42:36:6c:bf:de:30:1d:5b:32:58:ef:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:5B:22:29:AE:DC:60:6C:94:C8:2C:4A:F2:AD:C7:DF:D4:87:68
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/8mxbIimu3GBslMgsSvKtx9_Uh2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.44.0/22
185.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:7a:23:36:7a:c5:d9:18:19:53:ed:8b:2b:dc:f5:fa:51:2f:
ff:a9:dd:38:91:21:73:2a:46:96:a7:4d:ad:6e:65:9e:45:04:
59:ce:e2:fe:8f:86:4b:90:a1:51:5b:e3:ba:8a:2c:2d:59:0a:
bf:a8:9b:46:d8:26:8b:30:ba:52:1d:71:23:00:c1:4c:0e:5e:
47:10:44:53:a6:74:c4:bb:d2:12:cc:25:3c:1c:48:c8:ce:fc:
c4:03:28:52:09:e9:70:7c:cb:b7:f6:77:d5:17:73:de:1a:38:
4f:0c:36:45:c1:9e:96:d1:66:20:35:9c:22:f3:28:55:cf:98:
cd:8b:c1:a9:9a:b9:e7:58:a2:42:7d:c6:84:8a:15:f7:d8:57:
35:c1:4b:5a:28:b5:1e:f5:c1:d0:32:99:4e:97:81:de:9b:85:
7f:b3:30:c0:88:80:72:ed:0c:16:62:22:be:85:de:a5:fb:9f:
f5:ab:4e:bb:98:89:8f:26:68:cc:fd:00:91:53:a3:65:f5:a1:
88:a5:ef:21:98:c9:01:b8:9c:d7:b6:a8:6f:bd:ec:ad:7a:d3:
b6:5c:93:15:3a:4e:e4:4e:2b:41:82:28:17:4f:92:76:f8:06:
c9:68:0d:2e:c0:a8:08:19:6e:87:60:0b:1f:38:46:97:38:d4:
73:f0:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org