Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/mCOW5TiywUXDLkFjQ3phY-IGrdo.roa
File: mCOW5TiywUXDLkFjQ3phY-IGrdo.roa (raw, json)
Hash identifier: ncrbVM+yTZ0wCwu+ff6QNtT+uGMdDr5WSmw8xRz6yww=
Subject key identifier: 98:23:96:E5:38:B2:C1:45:C3:2E:41:63:43:7A:61:63:E2:06:AD:DA
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 01820077DFC7C14C0FDC701BC99063C5367F
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/mCOW5TiywUXDLkFjQ3phY-IGrdo.roa
Signing time: Fri 15 Jul 2022 06:07:12 +0000
ROA not before: Fri 15 Jul 2022 06:07:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202120
IP address blocks: 185.73.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:77:df:c7:c1:4c:0f:dc:70:1b:c9:90:63:c5:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Jul 15 06:07:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=982396e538b2c145c32e4163437a6163e206adda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:5c:e8:5e:c3:a0:9d:7b:07:6b:1c:e9:de:
67:33:c5:7e:5a:76:c8:06:cc:a5:ea:dd:4e:8b:16:
18:d4:1c:bf:6b:db:5f:a6:ea:80:f2:df:2f:27:f4:
bf:35:3b:b8:3e:bb:cd:cb:27:7a:f9:08:98:b7:17:
9b:d4:6f:1b:0b:ce:4d:23:a6:34:76:bb:6c:95:f2:
e0:cb:2f:60:7d:95:f8:92:62:1b:3d:c4:16:a1:8e:
98:50:98:fd:1b:74:ab:32:d8:40:68:98:5e:0a:8c:
ae:66:83:d0:73:02:37:ca:ef:02:79:d6:f6:3d:bf:
d2:3b:f7:50:e4:ab:c1:5a:82:5f:03:07:82:d3:c1:
85:bd:4b:81:7a:2a:74:ab:6a:45:6b:1f:6e:26:1d:
14:24:60:66:91:48:4d:f1:a6:37:f2:f4:9e:51:8d:
b7:e3:da:04:e2:71:bd:54:73:1d:cd:a2:3c:82:2c:
0c:13:32:19:98:89:da:f9:a8:02:cd:e8:b1:7d:6d:
5e:83:a6:c7:42:8e:78:56:d8:72:80:f1:d6:ae:9f:
d6:ad:a6:dc:9d:74:21:0c:eb:d1:4a:d8:50:77:8d:
bb:0e:fc:81:43:ab:ce:f4:0f:66:b2:17:89:f0:28:
8f:79:a6:6b:a9:e7:41:91:62:25:1c:18:b9:35:05:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:96:E5:38:B2:C1:45:C3:2E:41:63:43:7A:61:63:E2:06:AD:DA
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/mCOW5TiywUXDLkFjQ3phY-IGrdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.95.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f1:be:c3:4e:e4:9c:80:70:e7:57:82:d2:2e:3c:6f:6f:ed:
c8:4f:9d:0c:47:40:d5:99:9d:7a:0c:d3:8c:9a:7e:ec:0e:94:
66:98:1f:10:eb:b1:2e:0e:8b:43:19:d3:55:00:fc:84:9a:3d:
7c:b6:bd:bc:69:f4:63:f5:99:f9:b4:8a:6c:0a:eb:ae:dc:34:
41:a3:ed:59:d8:2a:e9:d0:9a:24:1a:25:b4:a0:db:42:ed:d0:
fe:5b:76:2c:4b:e0:56:77:42:3e:87:1a:85:4a:ed:1e:48:b6:
cb:25:be:0f:cb:8a:fa:50:4d:99:6f:c2:3e:9c:f4:26:8f:c9:
4c:1f:77:c9:c5:6d:7f:36:aa:ef:80:c3:77:4c:20:9d:92:19:
ae:90:8f:0d:1c:76:f6:3a:f1:4b:ab:e1:0a:e7:0e:da:7e:c8:
16:25:1b:e8:41:25:10:09:3b:bd:ae:71:30:34:d0:6c:0d:1a:
43:fc:e2:5f:98:54:8b:e3:06:8e:99:b1:4e:95:8c:77:5a:e6:
72:fa:98:a4:d5:18:15:f1:f2:79:9d:b3:b1:1e:7c:94:fc:10:
e4:bf:9c:eb:ad:19:0d:11:aa:ab:18:1c:41:73:2b:e5:26:5a:
09:05:36:98:55:db:6d:bb:cc:1a:fe:5a:6b:b6:d9:51:d4:ba:
fe:84:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:33 2023 by rpki-client on console-fra.rpki-client.org