Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mSmz7i3B27Q1gJX7RMUWh1v6TKQ.roa
File: mSmz7i3B27Q1gJX7RMUWh1v6TKQ.roa (raw, json)
Hash identifier: IMc2/wtvE544VkWMI+/SVzfQe4PvGaAceYgAxwDgSwc=
Subject key identifier: 99:29:B3:EE:2D:C1:DB:B4:35:80:95:FB:44:C5:16:87:5B:FA:4C:A4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03D97636
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mSmz7i3B27Q1gJX7RMUWh1v6TKQ.roa
Signing time: Sat 01 Jan 2022 13:04:05 +0000
ROA not before: Sat 01 Jan 2022 13:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202147
IP address blocks: 178.19.40.0/23 maxlen: 23
178.19.40.0/22 maxlen: 22
178.19.42.0/23 maxlen: 23
185.229.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64583222 (0x3d97636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9929b3ee2dc1dbb4358095fb44c516875bfa4ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:f9:51:e6:74:0e:d8:43:aa:80:81:2c:46:
08:05:e3:26:29:49:c2:55:9e:c0:52:d3:f7:bc:5e:
70:f8:75:cc:57:15:2d:75:87:52:ba:d4:2e:ab:30:
fc:83:8f:02:91:92:03:77:c0:3d:9f:ec:f6:24:db:
96:b8:1e:fc:22:78:2d:25:13:11:e7:96:3c:59:1b:
c1:08:87:17:5c:2f:fa:bc:d9:c5:68:49:17:f9:59:
67:2f:a2:38:71:1e:4a:0c:33:ec:82:2b:09:11:1b:
b1:87:d9:0d:3f:d8:d7:ba:37:38:7a:b5:48:8c:21:
02:1f:4f:8b:07:49:80:46:14:6f:ed:b5:ba:78:f0:
9a:f0:43:65:ea:f0:25:4a:59:17:ac:d7:61:96:d7:
d4:f8:00:a6:3b:31:03:47:54:09:23:11:d9:12:94:
7c:1c:90:78:ed:dd:f8:f2:e1:03:e7:9d:f4:4d:06:
13:82:8f:48:4d:70:02:32:c5:2e:cb:f3:b9:39:44:
1a:ed:57:5a:ff:24:16:a4:a8:56:27:73:ac:c3:c4:
bd:e3:9a:66:66:3b:38:66:30:35:66:be:a1:eb:65:
31:73:c6:0b:9c:52:00:ae:86:eb:71:60:d4:86:87:
0b:a9:e6:7c:aa:0c:09:a6:a7:28:2c:85:f0:f6:25:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:B3:EE:2D:C1:DB:B4:35:80:95:FB:44:C5:16:87:5B:FA:4C:A4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mSmz7i3B27Q1gJX7RMUWh1v6TKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.40.0/22
185.229.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a0:59:27:41:72:b9:25:6b:9a:f4:09:16:7d:95:ab:3c:9b:
32:b5:ad:9d:a7:6f:de:c5:d7:de:b9:26:ef:7a:3a:d3:ef:34:
c6:9a:c3:64:a1:3c:73:9d:9d:21:f7:1d:00:d9:6d:c2:53:3c:
3f:f8:14:ac:4d:56:08:ee:d9:ce:de:62:e7:5d:3a:ed:06:db:
6b:d2:0e:12:6c:ea:99:0c:28:e7:c0:1d:c5:f1:97:a9:41:04:
cc:04:d0:61:7d:c8:25:cf:20:e4:aa:d8:bf:5c:76:0a:bc:05:
c8:dc:dc:3d:29:6a:60:b5:27:01:27:7b:bf:b5:76:97:dc:dd:
42:e8:fb:d5:43:58:cb:23:1c:ef:04:62:2f:da:e4:e2:e1:2b:
a7:5d:63:53:27:82:69:a1:75:f0:99:d2:c9:8d:9b:e0:a9:0c:
21:11:66:2d:be:a0:ac:ae:ba:b1:8b:48:58:8c:8b:49:6c:3e:
63:32:92:e5:45:44:71:d2:1b:ea:8b:5b:b6:8e:29:c5:60:a3:
cf:8f:6e:f8:f5:eb:ee:c5:d9:df:c3:f9:d3:d2:68:f7:9b:a9:
91:77:51:66:80:0f:a9:71:33:b6:8e:1a:fb:98:6c:be:a3:e7:
d1:14:00:32:3c:73:ca:37:96:d7:7b:7b:7a:5b:81:b8:b8:b6:
f5:22:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:36 2023 by rpki-client on console-ams.rpki-client.org