Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MI4odhefQ25DPxYIGNjQUCKFPC4.roa
File: MI4odhefQ25DPxYIGNjQUCKFPC4.roa (raw, json)
Hash identifier: 5A7IJdsu8jfNpHFlwFUEAaf5a7a2h3RmTdD/1BNYuek=
Subject key identifier: 30:8E:28:76:17:9F:43:6E:43:3F:16:08:18:D8:D0:50:22:85:3C:2E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01BE7264
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MI4odhefQ25DPxYIGNjQUCKFPC4.roa
Signing time: Sat 01 Jan 2022 04:53:45 +0000
ROA not before: Sat 01 Jan 2022 04:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50670
IP address blocks: 109.237.192.0/20 maxlen: 24
176.241.64.0/21 maxlen: 24
185.51.212.0/22 maxlen: 24
178.20.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29258340 (0x1be7264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 04:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=308e2876179f436e433f160818d8d05022853c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:7e:70:e8:41:6b:cf:9d:fd:78:40:29:88:
9b:b5:f4:ec:69:95:6d:91:8b:81:09:64:80:ba:77:
c0:92:b2:96:18:1f:11:2c:b3:ab:03:9e:18:5a:fc:
8e:f6:d3:aa:a8:65:9f:c8:4a:8b:d2:2d:15:8f:37:
b4:be:5c:1f:8e:f9:e5:3c:27:dd:c8:85:89:0e:3f:
aa:5a:0e:aa:fd:23:fe:dd:36:cf:ae:06:94:7a:47:
6a:0e:3f:59:68:af:43:21:fa:79:61:e4:90:6f:bf:
ba:dc:52:29:d8:9b:85:22:14:04:51:cd:eb:33:70:
35:1c:c4:72:9a:f3:aa:71:3b:dd:2d:d6:74:94:04:
c6:c1:84:88:23:6e:2d:66:40:7a:de:86:20:ac:a4:
7a:75:94:bf:94:27:2b:7e:4a:12:27:f9:35:b7:ce:
ca:9c:88:0a:eb:ba:9b:d1:16:9c:62:06:47:6e:ca:
1f:7e:9b:f1:2f:74:29:0d:d2:83:2b:a1:cc:72:0e:
92:61:ed:50:a7:2c:fe:58:40:e8:20:e4:f3:fc:74:
c2:1b:c3:cf:9b:e9:1c:47:b7:fb:67:8c:de:b3:92:
25:50:ba:76:c6:12:56:1d:75:72:ea:f8:05:26:8e:
a1:77:82:bf:ea:e7:2d:ad:b1:f7:25:e2:3d:1d:91:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:28:76:17:9F:43:6E:43:3F:16:08:18:D8:D0:50:22:85:3C:2E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MI4odhefQ25DPxYIGNjQUCKFPC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.192.0/20
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
Signature Algorithm: sha256WithRSAEncryption
51:2e:74:54:5c:2c:eb:07:35:c1:04:ca:7b:54:0c:c9:ca:79:
e3:52:75:0c:00:ea:3d:22:9d:bd:23:ab:01:4a:e7:af:d8:2c:
54:e9:3e:82:64:c4:aa:2e:26:a9:d2:d0:20:70:67:15:e4:4d:
1a:ce:a8:3a:22:89:61:75:87:f1:8d:11:eb:0c:b1:44:e9:b9:
2f:81:f5:fe:e5:68:36:1a:41:e0:3a:94:61:5d:8b:f7:07:3a:
d8:0d:af:f2:4d:4e:ad:2c:8f:1b:2f:85:86:d8:d6:99:bc:68:
dc:76:8b:b8:a4:b9:2b:db:d6:9e:c2:21:07:29:aa:b3:5c:1a:
99:25:2c:78:b1:32:04:1f:7d:92:5f:0b:b4:45:11:75:85:3e:
3d:64:be:4a:ac:b9:4b:88:6c:b1:55:f8:12:43:40:4b:58:5c:
e0:15:3c:19:89:ea:3a:22:72:c4:a0:b7:ae:95:91:df:da:f0:
d0:68:62:94:47:40:be:4c:2f:0c:30:d6:95:45:28:35:9c:83:
f6:12:d0:ae:05:af:b0:ee:ce:2a:23:75:9c:7c:8a:34:ff:f6:
9f:01:12:31:b6:c0:5b:f4:2c:17:01:9b:b5:39:ff:19:9f:84:
a2:15:8c:97:96:05:74:19:7f:6b:b7:3f:bf:13:0b:fc:79:cc:
3a:1e:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org