Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/mpAS_N8hsMsBq68wZE5sRuL7Vpo.roa
File: mpAS_N8hsMsBq68wZE5sRuL7Vpo.roa (raw, json)
Hash identifier: QAj3tkpJOPHlnc+LHofUc2a51kUHnt2cZ4M4WyAU/wo=
Subject key identifier: 9A:90:12:FC:DF:21:B0:CB:01:AB:AF:30:64:4E:6C:46:E2:FB:56:9A
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 0184908044E3D4A9189966C6511FE32DD864
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/mpAS_N8hsMsBq68wZE5sRuL7Vpo.roa
Signing time: Sat 19 Nov 2022 15:27:16 +0000
ROA not before: Sat 19 Nov 2022 15:27:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209968
IP address blocks: 185.23.5.0/24 maxlen: 24
2a09:be44::/30 maxlen: 48
2a0e:ec00::/32 maxlen: 48
2a09:be41::/32 maxlen: 48
2a12:49c0::/29 maxlen: 29
2a09:be42::/31 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:90:80:44:e3:d4:a9:18:99:66:c6:51:1f:e3:2d:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Nov 19 15:27:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a9012fcdf21b0cb01abaf30644e6c46e2fb569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:76:c4:f6:01:7b:e5:c3:8a:d7:ed:37:13:
92:c2:d6:7f:d3:23:a1:99:6f:96:f5:cf:4a:46:e8:
2d:f9:66:d0:4c:aa:f8:12:c5:61:76:68:27:13:3f:
29:7d:c4:0b:aa:e3:99:3e:e4:bb:ef:f8:85:59:76:
9a:bc:d3:cf:96:c8:c1:3d:a7:77:c9:8c:88:f9:76:
a8:18:5e:54:0e:7f:22:e3:81:86:f7:67:fc:7d:73:
d9:45:bf:fe:cc:e9:d7:43:ad:5d:29:61:a3:eb:2a:
68:84:97:57:42:c5:5e:21:d6:e9:4c:fc:5e:02:3e:
e7:dd:e5:4b:81:03:8a:1c:0c:50:61:7f:f8:a1:71:
97:69:f5:4a:10:73:7d:86:6e:71:9b:16:a3:47:c6:
b6:d2:4c:d5:fc:cb:e3:d6:c3:67:57:02:d4:ab:75:
24:09:57:77:6b:8d:01:f2:f5:ec:21:82:53:49:f7:
f0:52:88:d3:cd:4d:fe:1b:c3:53:8d:21:e6:a5:f9:
b4:79:6c:36:36:90:82:f9:d2:64:c2:bd:b9:d3:fc:
27:e5:9c:d0:f0:ae:e8:34:3a:23:a0:27:10:fd:2a:
18:94:31:72:55:2a:32:4a:a1:51:b9:78:09:a2:cb:
46:e1:3b:da:1f:ab:55:01:9a:c8:b9:10:4c:01:d3:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:12:FC:DF:21:B0:CB:01:AB:AF:30:64:4E:6C:46:E2:FB:56:9A
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/mpAS_N8hsMsBq68wZE5sRuL7Vpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.5.0/24
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ec00::/32
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:e8:35:ca:ce:12:71:4e:48:73:bb:f3:f7:f0:df:a9:83:74:
f6:a4:d7:b0:22:5d:76:bf:50:7c:6b:17:32:90:a0:46:5d:81:
ba:3d:27:14:60:68:1a:f5:23:88:4a:8f:43:78:2d:77:8b:f4:
95:3c:f0:bb:5d:85:6a:24:1c:84:31:ae:ae:fb:d2:42:d8:9b:
9a:e6:d3:bc:48:10:7b:db:c1:64:7d:b9:f9:ab:44:a5:24:79:
51:5b:52:b1:33:19:36:29:97:2d:60:bf:b9:08:8a:72:93:a0:
6f:68:85:8c:47:84:41:13:e1:c5:70:5a:36:2c:a5:04:2e:7e:
f7:1f:2c:3d:49:85:93:a1:75:c9:83:24:e4:bf:a7:87:71:40:
22:47:ee:07:4c:de:ca:8d:ec:08:7b:d0:48:ea:a0:df:5e:08:
d8:d2:b7:03:1b:53:4c:9e:3a:03:ea:75:f8:38:ec:36:77:cc:
db:19:98:b8:48:1d:7d:9c:e3:ec:af:3a:f4:99:b1:4e:f2:6a:
ee:f9:90:ab:2a:eb:df:fe:6a:69:78:5c:75:27:31:cc:55:e9:
74:2b:03:30:fc:4b:09:f1:2c:f9:99:c6:92:aa:7b:af:bf:11:
6c:ab:3f:e2:13:9a:a5:89:e4:1b:20:7b:8d:6f:b5:fb:c8:61:
47:e5:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org