Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/MAFh_m6ndqGEQZ2XWem9BJYQnzg.roa
File: MAFh_m6ndqGEQZ2XWem9BJYQnzg.roa (raw, json)
Hash identifier: jGvVX/JucKlRvNk+D7rxDI2xcWLgdZJKwy17UBD22Ps=
Subject key identifier: 30:01:61:FE:6E:A7:76:A1:84:41:9D:97:59:E9:BD:04:96:10:9F:38
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 1389C0E3
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/MAFh_m6ndqGEQZ2XWem9BJYQnzg.roa
Signing time: Sat 01 Jan 2022 12:05:30 +0000
ROA not before: Sat 01 Jan 2022 12:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3290
IP address blocks: 185.124.245.0/24 maxlen: 24
185.124.246.0/24 maxlen: 24
185.124.244.0/24 maxlen: 24
185.124.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327794915 (0x1389c0e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jan 1 12:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=300161fe6ea776a184419d9759e9bd0496109f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:92:e0:c6:d0:87:02:60:79:e8:b3:37:15:
bf:17:a3:c5:fa:c1:57:68:20:e8:ab:42:81:67:11:
00:49:3b:88:30:cf:65:fb:e5:2d:98:a5:99:91:27:
d3:4e:d4:09:c3:23:8f:21:4f:38:22:34:84:e2:b5:
d2:e4:59:cb:77:ca:f7:5b:2c:7e:1d:cb:3b:b3:84:
cf:a5:2b:82:b2:20:75:2a:88:0a:1a:07:d5:31:f7:
2c:bf:9d:e7:7b:cb:0a:c0:fd:ab:63:fd:7f:7c:03:
0c:f5:ac:03:36:d5:9c:6b:57:fb:01:34:7e:4c:80:
20:57:a1:38:27:e2:99:71:83:46:89:ad:4e:18:43:
6e:c7:3d:61:54:d0:4e:1a:d9:cd:19:7e:31:91:c2:
53:27:ef:12:ca:ed:3c:48:ec:15:a5:aa:33:53:90:
0a:5f:07:86:dd:15:e6:dc:49:b5:79:e3:6a:48:cd:
eb:dc:56:a9:27:bf:3e:d6:7e:0e:c8:09:8b:aa:a0:
d4:90:7a:98:49:4f:96:d2:60:48:5e:46:92:7d:20:
93:09:2e:ae:f6:6e:cb:e4:b2:cb:ec:be:30:2e:46:
83:19:e2:6e:2d:6c:da:d1:42:c4:59:6a:15:93:b4:
be:c9:89:55:ad:61:15:af:d3:ea:83:94:99:ef:4e:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:61:FE:6E:A7:76:A1:84:41:9D:97:59:E9:BD:04:96:10:9F:38
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/MAFh_m6ndqGEQZ2XWem9BJYQnzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.244.0/22
Signature Algorithm: sha256WithRSAEncryption
69:cf:62:4c:c8:79:12:87:a7:f4:82:8b:11:6b:a1:a2:4c:ba:
1d:16:4c:6d:ba:c1:b8:82:87:11:ce:0e:45:02:c9:de:e7:a1:
be:fb:c0:d5:7a:ca:77:16:82:96:52:c7:26:b6:e7:77:dc:4c:
6f:44:6e:a1:03:e2:64:10:87:a8:b6:49:18:a5:49:36:e3:d5:
eb:b4:58:bd:b6:f9:13:f3:b6:ee:b8:e6:6c:3a:44:83:30:63:
d2:4f:6b:a1:1f:1d:c9:8a:ee:f4:50:7a:be:e2:9c:87:27:4b:
41:47:46:0a:0f:d2:a0:ef:29:4f:ec:25:d8:4c:d9:24:d9:5f:
99:3b:d4:af:95:ce:d0:88:2c:b6:9e:9f:9d:11:0b:ec:48:0b:
71:1a:94:43:89:47:91:cb:d8:14:70:42:78:72:bf:3b:6c:d6:
ae:fa:14:bb:7d:19:65:60:82:f6:cb:d1:a9:8a:f9:30:8f:01:
fa:16:27:da:0d:66:03:98:53:65:72:98:2b:77:86:26:37:86:
6b:d1:c9:10:3c:88:c7:5d:56:28:66:d8:04:18:9f:e8:b3:11:
9d:f5:92:6f:55:57:8a:5c:df:c0:8e:d5:ba:c7:f0:54:fc:f0:
9b:f9:25:65:ab:33:c7:95:61:a8:33:e9:9d:c6:b0:22:23:b1:
82:11:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org