Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mfmb-tIY2CXBV1dZ9jVn9l9FcQ4.roa
File: mfmb-tIY2CXBV1dZ9jVn9l9FcQ4.roa (raw, json)
Hash identifier: mDM5pzcRhZi126BQTAtHF+tevRwI6kqHErxElVLZri4=
Subject key identifier: 99:F9:9B:FA:D2:18:D8:25:C1:57:57:59:F6:35:67:F6:5F:45:71:0E
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01B55C36
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mfmb-tIY2CXBV1dZ9jVn9l9FcQ4.roa
Signing time: Thu 06 Jan 2022 23:21:08 +0000
ROA not before: Thu 06 Jan 2022 23:21:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.15.152.0/24 maxlen: 24
185.65.68.0/24 maxlen: 24
194.15.154.0/24 maxlen: 24
194.15.155.0/24 maxlen: 24
194.15.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28662838 (0x1b55c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 6 23:21:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99f99bfad218d825c1575759f63567f65f45710e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:2f:1e:e4:e6:98:0a:12:0f:84:db:79:7a:
c8:17:0e:b3:86:b1:8c:e6:d5:ed:6c:87:f6:4c:9e:
b8:85:05:bf:5b:98:72:75:9e:b1:a8:04:4e:fe:24:
f2:ca:33:08:9b:7a:3c:fb:87:6e:c2:d4:dc:c6:c7:
e0:c2:79:ff:0a:f2:1d:58:1d:38:8d:e8:df:8a:74:
77:43:51:3f:86:1f:67:6c:df:c4:21:51:1b:98:c5:
c3:4b:7f:91:78:a9:ef:19:78:f0:e4:72:0b:ed:85:
c7:98:9a:62:5b:74:4f:c9:d9:c2:ac:1e:b8:73:8a:
e7:e4:74:90:73:3d:49:6b:d8:38:8b:bb:d1:20:8f:
dc:e5:35:6f:20:6b:31:c0:a3:df:31:f0:18:eb:60:
bd:2c:66:bc:87:25:4f:97:55:e2:79:22:e4:93:f6:
5f:26:0b:5e:63:55:e3:62:71:37:66:6d:61:d0:f9:
7b:5d:f0:9b:b2:77:49:12:cb:c8:c5:a6:73:5d:01:
93:3e:fd:77:8b:b5:c8:fe:c3:a6:02:f6:c1:28:3d:
ad:b0:e2:5a:4c:ec:4c:fa:1e:03:69:d3:94:ae:38:
3d:80:42:a0:99:df:ee:92:01:83:b2:31:c9:3e:fd:
a7:c9:0f:c1:1f:c9:74:75:c7:8d:9a:c3:40:21:8a:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:9B:FA:D2:18:D8:25:C1:57:57:59:F6:35:67:F6:5F:45:71:0E
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mfmb-tIY2CXBV1dZ9jVn9l9FcQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.68.0/24
194.15.152.0/22
Signature Algorithm: sha256WithRSAEncryption
77:1c:58:87:5a:7d:bc:c7:25:31:5a:b5:37:6d:39:6f:d7:46:
c0:4a:d6:4f:1b:46:70:99:b4:d2:39:a4:96:e0:11:b2:a9:1f:
61:65:63:05:cb:c7:9c:39:4b:9b:47:58:64:47:50:31:16:16:
ab:6d:69:e7:78:1e:25:1c:0b:d1:27:46:dd:ff:6e:5d:f9:ec:
90:d0:df:bc:e2:17:ae:ce:a4:f2:e7:b0:64:d1:6b:4f:d7:05:
46:81:00:07:2d:af:ba:19:2e:43:cf:d5:8d:ff:63:7f:c0:e3:
3b:d1:1c:98:5f:cf:a2:7f:15:03:0c:ae:36:bc:88:5b:4c:b2:
10:e9:32:22:95:f0:ef:1f:ee:f0:d3:6d:05:5b:96:ab:53:68:
3e:38:4a:81:d6:6d:d9:46:dc:04:6f:9f:b5:6b:56:46:9a:6e:
50:71:dc:57:eb:1e:e7:08:88:eb:90:c3:b4:2c:f8:09:4f:19:
99:60:50:a3:0a:8c:74:1d:17:aa:ae:0c:48:2c:8c:35:b2:97:
c4:9a:c6:22:1c:15:a9:ed:ef:7e:ed:de:bb:d1:d8:c1:b3:f0:
d0:d7:c4:c4:0b:67:8e:3f:14:c2:bf:a2:f4:4d:0a:e4:ec:42:
8d:ad:94:a1:29:37:56:24:9f:9f:a4:5e:7b:58:05:a9:87:7d:
fd:1c:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org