Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/1mfqiuxZma9pDbdslL-ISrh41TI.roa
File: 1mfqiuxZma9pDbdslL-ISrh41TI.roa (raw, json)
Hash identifier: YyAQjR+nQvRCbEv6aL/pCBxwkYFUf6nv53qPrnL9kOY=
Subject key identifier: D6:67:EA:8A:EC:59:99:AF:69:0D:B7:6C:94:BF:88:4A:B8:78:D5:32
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0182E9D6842D5E5398083933723ADA973A90
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/1mfqiuxZma9pDbdslL-ISrh41TI.roa
Signing time: Mon 29 Aug 2022 13:42:05 +0000
ROA not before: Mon 29 Aug 2022 13:42:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48851
IP address blocks: 141.226.207.0/24 maxlen: 24
141.226.214.0/24 maxlen: 24
141.226.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:d6:84:2d:5e:53:98:08:39:33:72:3a:da:97:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Aug 29 13:42:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d667ea8aec5999af690db76c94bf884ab878d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:d9:e0:c3:a7:e4:55:a5:20:3a:86:5e:3c:
c1:ea:42:37:c0:a9:ab:43:2c:da:2e:e8:28:f5:95:
c6:3c:7f:ca:eb:28:38:23:f0:69:8f:fa:a6:53:1a:
f4:db:ab:1b:c4:cb:f7:c3:87:7a:2b:cc:96:2e:9d:
92:79:84:d7:7a:7e:a2:53:ba:5e:73:43:ef:84:f0:
fa:52:53:93:42:a4:c1:94:ec:27:ad:88:77:a8:43:
ce:9b:6a:af:49:73:a8:e3:03:58:c8:7f:00:c8:9c:
6d:a7:15:d5:61:80:10:4e:ae:3c:ba:ff:89:41:50:
4b:da:8e:a0:17:41:8f:80:33:42:2f:9c:e0:d3:45:
97:cb:35:45:9d:52:b6:e8:ac:ec:60:c2:c4:a9:b9:
bb:43:1a:c0:de:56:9f:ab:b9:af:9a:4b:ce:d0:86:
05:89:15:6e:a7:de:c7:54:59:33:e4:9a:33:69:fc:
3e:f8:d2:66:ef:1d:6a:f2:fe:12:c0:57:4b:ec:ab:
30:85:26:4d:4a:10:59:e7:9f:ed:db:78:90:fa:d3:
f6:3c:fb:27:a5:a6:28:32:86:51:4d:52:c5:f6:e7:
57:38:2c:28:92:0c:2a:38:5f:f0:d0:e0:d0:f6:78:
7a:33:95:89:32:14:4d:1a:c1:8f:49:b8:f6:92:e4:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:EA:8A:EC:59:99:AF:69:0D:B7:6C:94:BF:88:4A:B8:78:D5:32
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/1mfqiuxZma9pDbdslL-ISrh41TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.207.0/24
141.226.214.0/23
Signature Algorithm: sha256WithRSAEncryption
02:76:ac:26:26:10:89:2b:ec:cb:6a:93:0b:9e:06:07:cb:ef:
af:68:26:1e:f2:f9:3b:4b:59:98:42:54:91:ca:f3:b4:f5:f5:
5b:10:9e:82:a9:2d:7c:85:98:30:7a:c8:bc:29:2b:0b:77:14:
e8:da:bc:fa:27:b5:7f:58:20:5a:6d:90:b1:45:f6:ae:c3:4a:
c9:db:5e:84:af:e2:81:07:e1:e4:9c:34:39:b5:b6:90:7e:ef:
23:68:a5:c6:2d:15:5c:f4:f5:d7:7f:b9:3c:f4:a9:0b:9e:5a:
9b:54:68:e7:67:4a:a6:a7:a2:8b:ea:8c:5b:c0:c2:4c:e9:ed:
e9:5e:75:ad:4b:b1:b9:c2:31:69:25:57:cf:42:9b:bb:81:86:
7d:8e:5b:57:01:90:3a:64:e4:88:71:fe:2a:38:c7:43:ca:aa:
ad:01:d1:f1:5d:72:1e:cc:83:05:d8:99:7d:ee:36:62:7c:88:
de:87:b0:fe:df:46:89:86:f6:8e:2f:62:99:ee:6f:0a:d5:a5:
88:85:b4:18:e9:08:e8:ce:8a:bd:dd:33:6c:82:f6:76:01:6b:
d1:65:7c:ea:4e:05:6b:d9:89:dd:3d:c1:eb:86:22:05:ab:92:
88:a1:36:94:d7:42:e0:ab:80:7b:73:a7:15:37:84:43:0a:9c:
cf:76:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-fra.rpki-client.org