Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mKpoLJhlq6pfc8A3ua3VcUR77xg.roa
File: mKpoLJhlq6pfc8A3ua3VcUR77xg.roa (raw, json)
Hash identifier: GHe8vEQPpPojiEX+VMMnVLo9rYYppeb5OWXpbMOSgwE=
Subject key identifier: 98:AA:68:2C:98:65:AB:AA:5F:73:C0:37:B9:AD:D5:71:44:7B:EF:18
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01850FC73ABF1EA38C5EC7B0CFC8D721DC2A
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mKpoLJhlq6pfc8A3ua3VcUR77xg.roa
Signing time: Wed 14 Dec 2022 08:36:32 +0000
ROA not before: Wed 14 Dec 2022 08:36:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58192
IP address blocks: 185.239.0.0/24 maxlen: 24
5.159.49.0/24 maxlen: 24
5.159.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:c7:3a:bf:1e:a3:8c:5e:c7:b0:cf:c8:d7:21:dc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 14 08:36:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98aa682c9865abaa5f73c037b9add571447bef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:92:1c:ca:f6:e5:f1:18:1c:fe:fe:96:b5:
53:17:a5:85:35:d6:9b:ec:90:d2:c8:ec:79:4e:93:
37:84:ec:85:3b:69:2d:11:bb:fc:a4:80:f4:e2:d3:
79:a5:50:f7:4c:7d:12:7f:8a:42:50:49:4f:cf:07:
30:6e:f9:68:ed:e2:e1:16:a4:66:0f:06:a4:2e:0e:
dd:4e:18:af:ae:1b:fa:83:79:87:60:3e:75:aa:49:
1f:a0:21:83:14:06:1e:70:e4:06:40:67:26:b4:df:
16:a3:04:f3:83:60:9f:3a:37:da:1b:aa:e2:c0:0c:
01:62:5a:2b:60:a7:0f:4b:2f:99:bd:cd:31:d9:41:
a4:69:42:4d:1f:1b:d0:f8:05:14:d6:be:59:2f:df:
08:70:18:37:38:d2:86:c4:3b:9b:68:ba:7c:fd:19:
da:30:2f:c9:68:11:35:84:cf:fe:87:2a:c4:a0:e0:
a3:ec:2c:d2:73:67:28:90:74:e8:ae:20:72:3b:ac:
07:d0:f1:fa:77:58:a0:2c:b0:ff:f2:18:6e:19:3c:
7f:b4:99:ba:ac:3f:34:8e:81:31:f4:6b:ee:8c:9f:
35:d8:85:1b:ae:b1:90:6d:89:06:dc:db:7d:97:25:
a5:c2:66:b8:09:fd:d3:03:6a:c1:cb:75:13:ec:86:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AA:68:2C:98:65:AB:AA:5F:73:C0:37:B9:AD:D5:71:44:7B:EF:18
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mKpoLJhlq6pfc8A3ua3VcUR77xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
5.159.54.0/24
185.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
04:62:a5:91:58:a0:86:ab:e4:94:94:8c:07:38:82:a5:f2:a3:
99:7c:85:3e:2a:46:85:a6:c2:2c:dd:0e:27:72:30:6f:2d:33:
7c:28:e1:83:fb:a1:a8:b9:e0:ca:a5:2d:65:08:0a:d4:e9:65:
14:d8:e3:f3:2b:71:f4:48:61:af:4f:f6:73:3a:d5:c7:e5:d0:
e6:46:48:2b:9d:49:e1:f3:67:83:4f:dd:ad:90:d2:f6:97:92:
ec:a9:93:40:7e:b1:e5:c6:f2:9f:40:57:83:42:90:cc:a9:c5:
88:16:30:3a:48:64:c3:fe:7c:67:0e:19:e2:74:22:8a:a6:dd:
d0:cb:ce:80:b8:01:b6:d6:c5:97:f0:9d:a7:be:f4:66:87:b1:
90:db:a3:2a:ce:5c:85:af:48:0a:f8:0e:3d:fb:bc:0c:58:ae:
b1:c1:7f:44:d8:e6:eb:47:54:3e:ea:dc:b9:1b:78:d3:22:44:
d2:0f:cd:3d:14:9b:09:2e:31:6e:e8:d9:2a:43:c6:02:a1:a5:
3b:c6:cb:dc:14:fe:fb:6b:2c:4f:36:2d:a0:5b:5a:a5:6f:99:
e3:6b:5d:96:8d:6b:32:2d:6f:31:eb:4c:f0:e6:39:30:5a:af:
bb:1c:13:4b:9d:4e:9c:7d:ac:8f:b6:27:fe:dd:92:f7:b3:f5:
2f:ed:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org