Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SMDb34yECwFvyOTFiMa-z7KxKSE.roa
File: SMDb34yECwFvyOTFiMa-z7KxKSE.roa (raw, json)
Hash identifier: tvSE/hMZwcpPg0Bd62q1UrK0A3NNgeotSvn5SPAhkuw=
Subject key identifier: 48:C0:DB:DF:8C:84:0B:01:6F:C8:E4:C5:88:C6:BE:CF:B2:B1:29:21
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 04ECC9BF
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SMDb34yECwFvyOTFiMa-z7KxKSE.roa
Signing time: Sat 01 Jan 2022 07:56:34 +0000
ROA not before: Sat 01 Jan 2022 07:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46844
IP address blocks: 185.61.216.0/24 maxlen: 24
185.77.216.0/24 maxlen: 24
185.61.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82627007 (0x4ecc9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 07:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48c0dbdf8c840b016fc8e4c588c6becfb2b12921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:c2:75:2b:5c:82:3c:02:31:9e:4a:8a:85:
15:56:1c:b4:05:8a:73:6b:42:03:8a:5f:b3:93:f4:
a0:36:11:ec:33:fe:82:62:a5:49:8d:b0:f7:a8:a0:
39:9f:2a:91:08:a4:d4:7a:72:27:67:a4:e6:7e:8a:
dc:0d:bd:fe:ea:82:b9:81:de:46:a5:f1:82:81:89:
83:0d:d8:4a:de:07:eb:b1:54:17:f9:17:7b:15:a3:
64:02:2d:83:51:e6:81:7b:40:4c:c0:22:c1:89:35:
f9:ff:04:1c:81:ac:7e:01:e4:ca:6a:62:a7:8c:cc:
7d:01:9c:e6:a0:50:cc:43:6e:ac:0e:11:c4:2b:19:
ce:2e:53:16:c8:b0:26:23:03:37:29:33:f2:2c:df:
c2:2a:53:9d:e6:12:2d:45:1f:3f:77:43:99:dc:2c:
3b:42:ae:29:99:47:39:32:65:b8:f1:f5:c8:eb:83:
19:f4:be:dc:2c:41:61:89:7c:9d:3b:96:17:df:c5:
94:9b:df:39:f6:3a:d7:59:c8:36:b3:c3:81:fc:c3:
9a:73:35:55:62:c7:0f:f6:33:74:32:0f:63:d7:51:
89:03:19:9a:f4:e4:a4:5a:9f:0f:5e:0c:0b:12:88:
02:80:08:b5:c4:97:5e:0c:8c:04:2e:40:1a:51:30:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C0:DB:DF:8C:84:0B:01:6F:C8:E4:C5:88:C6:BE:CF:B2:B1:29:21
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SMDb34yECwFvyOTFiMa-z7KxKSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.216.0/24
185.61.220.0/24
185.77.216.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9a:ee:91:ba:b8:65:a1:37:31:8f:de:20:c8:a7:90:c8:b0:
73:b2:96:ef:0f:6a:ec:ef:e4:bf:0b:96:b5:35:cb:2f:e2:01:
dc:f7:54:a8:69:31:37:6c:a5:3f:67:05:b9:eb:3a:94:11:d7:
1c:f5:34:4c:83:3c:0f:07:d1:aa:48:b1:5c:57:d0:24:ba:5f:
61:57:97:2a:df:83:fb:2e:58:b2:a1:11:42:de:1c:2b:01:b7:
91:32:77:3b:55:61:35:79:45:d1:8d:7e:9a:c5:8e:9c:99:01:
1b:06:cd:97:74:58:b5:a6:74:69:0e:d3:73:d0:a4:74:81:5f:
62:41:1b:f1:09:10:cb:8d:ce:47:ca:85:ae:57:48:77:ab:26:
78:d8:38:c5:f5:24:4e:ec:bc:18:05:b6:6a:dc:52:f6:2e:b5:
14:da:da:a6:8c:9b:cc:bd:23:c9:d0:5e:a9:f1:e2:9a:58:33:
43:ec:cb:84:3d:2e:5a:7e:3f:a6:57:c7:5b:35:56:01:07:49:
df:e7:a2:2e:16:23:a8:30:8d:29:77:38:30:ac:c5:6d:92:20:
e1:2f:5f:00:ef:b0:c7:08:ec:ab:2a:68:d8:97:66:7f:97:ff:
17:87:bf:79:6f:7c:0e:59:a5:cc:0a:9f:fe:d1:b5:07:87:e3:
b4:99:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org