Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mMlLnpY3s-TJeTYsWd-KjZkWKTk.roa
File: mMlLnpY3s-TJeTYsWd-KjZkWKTk.roa (raw, json)
Hash identifier: gGZbfecVTRAAbjme1F4BiUT1pOVuNiXrPchVxJBuHbY=
Subject key identifier: 98:C9:4B:9E:96:37:B3:E4:C9:79:36:2C:59:DF:8A:8D:99:16:29:39
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03D0EF7A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mMlLnpY3s-TJeTYsWd-KjZkWKTk.roa
Signing time: Sat 01 Jan 2022 13:04:00 +0000
ROA not before: Sat 01 Jan 2022 13:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 185.244.230.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64024442 (0x3d0ef7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98c94b9e9637b3e4c979362c59df8a8d99162939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:80:24:d5:73:1a:e3:f7:43:d0:34:24:d8:
7b:2a:a7:63:41:37:1d:7f:51:1f:e6:d9:3c:fb:e2:
1e:be:c7:45:3f:ce:2e:95:5a:5d:02:7e:26:20:09:
23:5b:cf:ec:8e:75:2c:60:15:b7:9a:69:4d:81:00:
0b:2a:61:7a:56:12:5b:bb:c6:5d:1a:3f:25:cb:3c:
32:b0:91:22:10:f2:dc:4f:c2:86:ad:2c:a2:e0:04:
a5:93:ea:ea:af:43:39:32:91:c4:27:14:df:06:1c:
18:3f:f6:ac:df:b7:17:ba:a4:45:c0:51:17:a0:30:
fd:f9:ef:e0:4e:b8:c2:3a:cd:53:e4:64:4f:a0:14:
94:e4:b0:8f:2f:e7:c3:4c:5d:8e:16:90:27:58:0c:
cf:f4:bd:72:1f:48:b6:85:fc:4d:a7:af:63:7e:85:
1d:b6:c2:3a:3e:e8:80:d1:69:cf:25:5f:57:93:c3:
91:19:90:5a:09:da:d0:65:0a:db:bf:5c:b6:c7:de:
2f:8c:8f:df:ab:04:36:58:c9:90:bb:dc:2e:81:4f:
1c:5a:1c:57:3f:07:c1:68:cc:c4:e4:1d:d7:46:97:
0d:84:e5:07:60:f1:b4:d3:4b:17:41:d3:05:1a:cc:
c4:e0:f6:d4:db:ac:7d:ce:dc:f0:2e:ab:28:92:c6:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C9:4B:9E:96:37:B3:E4:C9:79:36:2C:59:DF:8A:8D:99:16:29:39
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mMlLnpY3s-TJeTYsWd-KjZkWKTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.51.0/24
185.231.187.0/24
185.244.229.0-185.244.231.255
185.246.13.0/24
185.246.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:77:67:9f:3b:16:29:10:cc:f4:f0:c9:74:ef:e5:72:ca:38:
ef:95:26:f8:06:e2:52:80:79:95:8c:58:5e:4d:27:f7:4c:8a:
1a:34:d9:3f:89:12:82:6b:d4:ba:cf:9b:ef:b9:51:c1:b8:dc:
43:ec:3e:05:1e:7e:f0:20:57:09:bd:0e:53:08:f6:89:6b:0d:
6c:3f:41:1d:5c:2d:fb:ae:cb:83:3c:7c:c4:4d:22:11:0e:63:
f8:54:72:28:7d:ff:89:21:8d:ca:f2:3e:50:e5:ef:23:dd:b5:
b8:20:00:56:41:18:29:c9:94:68:66:0d:56:25:75:55:88:32:
7a:4f:18:83:9d:86:66:0d:01:ee:75:d2:b2:cb:c6:3d:b9:9b:
bd:2a:63:aa:48:9a:3b:df:c4:46:55:47:db:bb:d2:9b:b7:b9:
bc:7f:d1:65:d4:87:bb:e7:a0:d2:fd:8d:b0:d1:49:f3:1e:5a:
93:e5:3b:1a:f7:bb:fb:be:4d:a7:a9:56:dc:e4:d9:0e:24:69:
f1:2a:e0:35:46:25:fd:72:74:63:97:97:6a:4c:e4:f6:1d:6a:
bc:cb:e9:cb:a4:89:e8:e0:74:a3:a7:56:2b:7f:af:2b:00:e2:
33:4a:ca:a8:74:87:9c:df:7b:3d:57:26:61:17:89:4c:12:07:
27:0b:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:36 2023 by rpki-client on console-ams.rpki-client.org