Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/mHxrOrXp4CF0eUJnTgp4o0ccAyM.roa
File: mHxrOrXp4CF0eUJnTgp4o0ccAyM.roa (raw, json)
Hash identifier: Imes2oBPSvoS0vGwMes4LEAjn0CZboOygZwa7fW/GFI=
Subject key identifier: 98:7C:6B:3A:B5:E9:E0:21:74:79:42:67:4E:0A:78:A3:47:1C:03:23
Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial: 380F1060
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/mHxrOrXp4CF0eUJnTgp4o0ccAyM.roa
Signing time: Thu 21 Apr 2022 10:46:55 +0000
ROA not before: Thu 21 Apr 2022 10:46:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34574
IP address blocks: 188.64.144.0/24 maxlen: 24
188.64.145.0/24 maxlen: 24
188.64.147.0/24 maxlen: 24
2a00:1120::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940511328 (0x380f1060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Validity
Not Before: Apr 21 10:46:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=987c6b3ab5e9e021747942674e0a78a3471c0323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:34:d2:ef:e1:e8:cd:9a:6e:c8:e8:18:c6:
b9:3c:5f:57:68:da:db:8d:e3:20:c0:55:d2:12:2b:
39:4e:91:f3:5a:87:f4:11:2f:e3:93:eb:97:40:64:
fa:e8:aa:cf:6c:71:46:85:d8:01:2c:98:67:f9:15:
45:8d:5e:f4:f2:cb:d6:a3:bc:ff:31:7e:3d:47:4b:
67:27:c5:7f:46:09:eb:3b:4e:96:b4:db:e9:be:fc:
e0:ee:05:86:5d:c5:8b:36:f4:cb:51:da:3f:d0:f0:
3e:07:e9:a8:f7:4a:ff:3a:a2:d0:ad:d0:8d:eb:97:
17:0e:9e:d2:70:f4:48:2c:de:9e:9a:d6:c1:d3:f4:
d2:29:d6:df:46:57:7b:1b:60:66:a9:32:0d:29:31:
56:92:c6:5f:75:cb:94:4f:4c:c7:d6:da:59:fb:af:
24:9b:4d:27:8a:03:90:3b:da:eb:da:ee:88:3d:1b:
da:c8:cd:32:d0:34:69:42:58:4a:cb:6d:97:74:58:
70:fe:ea:c1:f0:91:ea:0c:66:a3:82:ae:5d:0e:20:
7d:ed:e0:74:8b:61:d1:69:72:95:67:14:01:fd:38:
cb:0f:8c:24:bd:63:aa:bc:21:94:23:42:3e:10:55:
bb:cb:5f:89:5a:50:6e:0b:eb:b9:6c:df:e4:1a:e3:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:6B:3A:B5:E9:E0:21:74:79:42:67:4E:0A:78:A3:47:1C:03:23
X509v3 Authority Key Identifier:
keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/mHxrOrXp4CF0eUJnTgp4o0ccAyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.144.0/23
188.64.147.0/24
IPv6:
2a00:1120::/32
Signature Algorithm: sha256WithRSAEncryption
34:1f:4a:9a:03:f9:1f:8f:08:a8:88:a2:47:81:bf:6d:98:ee:
c0:fa:9c:9e:f4:e1:73:b5:65:4a:e2:8e:90:f7:f8:f0:d0:53:
f3:87:0d:4d:9b:c9:41:b4:6a:89:60:30:19:bc:5a:4a:8f:ac:
19:94:36:63:76:f4:41:b3:38:07:9c:4c:ea:05:b7:ef:fb:a2:
c2:c4:18:c6:9d:5e:72:71:d1:50:80:0b:8e:9a:51:77:74:f3:
3c:0c:2b:37:f1:df:68:9d:7a:28:c1:26:7e:29:8c:f8:3a:3f:
45:cc:09:20:5d:89:1d:68:f8:33:cd:26:c8:c7:65:ca:a4:bb:
7b:f7:cc:2d:a9:67:83:18:f3:ac:a3:32:d7:2b:6f:a5:71:23:
e8:7e:8b:cf:02:1b:fd:b5:65:dc:40:32:29:9f:b7:3a:c6:16:
ae:48:74:13:43:48:71:82:f6:64:33:57:7f:90:f0:1e:43:6e:
47:3d:12:fd:36:db:42:ec:25:b1:5a:a9:52:30:ae:46:cf:29:
70:c8:f7:83:40:8a:a4:eb:38:b6:af:33:2c:95:fe:ba:72:30:
61:92:cc:f2:81:d1:4d:66:01:51:26:8c:b7:0f:e4:6e:37:0b:
91:fc:25:30:bb:ab:37:9f:7f:7b:b1:d9:4c:33:78:be:ac:f6:
88:b7:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org