Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m1LDxP-2O8xmjVJfU-2qdZj8Akk.roa
File: m1LDxP-2O8xmjVJfU-2qdZj8Akk.roa (raw, json)
Hash identifier: Wg13YRipwtbqww3BX8CgbsK1Udm07TBDxjwl1up7WtU=
Subject key identifier: 9B:52:C3:C4:FF:B6:3B:CC:66:8D:52:5F:53:ED:AA:75:98:FC:02:49
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 058CEEA8
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m1LDxP-2O8xmjVJfU-2qdZj8Akk.roa
Signing time: Fri 11 Mar 2022 12:14:53 +0000
ROA not before: Fri 11 Mar 2022 12:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.61.216.0/24 maxlen: 24
185.61.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93122216 (0x58ceea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 11 12:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b52c3c4ffb63bcc668d525f53edaa7598fc0249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:6d:50:a3:95:d9:f5:df:6a:85:ea:4e:e9:
ce:cf:81:8a:a4:29:4c:55:2a:53:da:70:4e:fa:ee:
d5:81:64:91:6c:3b:75:8d:b1:2b:a8:d2:26:94:e4:
42:3d:da:7f:53:4e:e6:88:61:58:f0:09:fa:c8:62:
35:f6:30:51:4c:d2:9a:24:24:98:84:ae:40:c5:fa:
10:8e:12:27:72:94:64:29:0c:9b:8c:8b:bf:83:d9:
55:2f:70:06:60:31:e4:5b:80:43:36:99:91:97:7b:
89:a3:ee:dc:c8:ec:0e:ac:b1:85:18:82:2d:17:cc:
e8:01:08:7c:a3:26:01:54:8a:1d:5e:d6:c2:d8:17:
d8:54:21:a0:d7:48:d0:6f:ee:b1:fe:4f:0c:d0:6a:
89:02:83:c1:1b:8a:9b:38:97:48:be:e1:f2:13:e1:
c9:01:72:05:83:5d:91:76:79:b1:6d:28:79:44:4b:
3d:de:cc:f3:55:ce:81:5e:c1:f8:81:1b:3f:41:13:
50:6a:7e:da:e5:22:ba:a5:26:ff:4d:a6:a4:54:4e:
02:35:e1:f4:bf:8f:cd:24:5f:6a:bf:03:a3:95:0a:
24:5c:c0:e3:20:6b:c1:ec:7c:49:14:c0:c3:52:bd:
67:df:92:93:89:aa:64:93:53:5f:98:1c:2a:e4:45:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:C3:C4:FF:B6:3B:CC:66:8D:52:5F:53:ED:AA:75:98:FC:02:49
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m1LDxP-2O8xmjVJfU-2qdZj8Akk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.216.0/24
185.61.220.0/24
Signature Algorithm: sha256WithRSAEncryption
96:81:98:84:c2:5d:6b:0d:f0:bf:a0:63:71:bc:08:f5:a6:15:
6f:98:b4:20:79:b6:89:5b:44:ee:e9:b2:33:02:96:1f:32:37:
f0:91:ad:19:48:41:63:75:b2:b6:4a:5f:3e:d6:cf:9a:64:f4:
70:d8:b0:2e:0c:66:48:12:78:7e:60:95:e4:f6:a5:3d:2f:71:
33:41:50:72:eb:a6:4d:73:bb:43:ab:59:c8:ab:c0:f0:c6:85:
4b:4c:90:74:33:10:f1:05:9b:4f:05:d2:13:90:b7:13:54:85:
43:18:c6:5d:8d:92:90:32:02:76:64:45:36:0e:c4:03:5b:2f:
b6:ba:4f:90:06:ef:9a:00:2f:b7:a9:0b:78:12:96:d1:c8:f6:
07:03:23:71:a1:82:47:3f:0b:51:a9:a1:28:bf:43:65:56:eb:
e6:10:30:14:69:45:26:f0:98:15:1b:7d:42:5a:ae:22:10:3c:
be:25:cb:a2:f0:cb:28:35:82:52:f4:58:89:e9:88:04:6d:7b:
5f:ad:01:0c:9e:d1:bc:68:cd:a9:bd:98:ea:dd:9e:ed:81:cf:
0f:68:e1:9d:c0:1a:27:9c:ba:b8:7d:59:22:e4:3e:f7:e7:3d:
8b:83:ce:d6:14:31:68:3a:ae:30:32:43:9c:1f:43:53:5f:e1:
16:15:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org