Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/M221nqV3El9_hw9Hs8B03yleDwY.roa
File: M221nqV3El9_hw9Hs8B03yleDwY.roa (raw, json)
Hash identifier: wQPgzfgBEFwxu+Wp9FtHCO2WXJs6becb/Fnj388XtC0=
Subject key identifier: 33:6D:B5:9E:A5:77:12:5F:7F:87:0F:47:B3:C0:74:DF:29:5E:0F:06
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16D1C5AC
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/M221nqV3El9_hw9Hs8B03yleDwY.roa
Signing time: Sat 01 Jan 2022 12:01:30 +0000
ROA not before: Sat 01 Jan 2022 12:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48219
IP address blocks: 37.230.143.0/24 maxlen: 24
185.2.35.0/24 maxlen: 24
141.101.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382846380 (0x16d1c5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=336db59ea577125f7f870f47b3c074df295e0f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:ce:72:aa:7b:f9:59:38:99:ff:e4:75:de:
47:46:04:18:5d:10:c2:fd:29:59:ff:9b:9b:2b:1b:
d0:90:52:d6:54:18:f1:c3:88:d2:75:32:b3:f6:75:
44:5b:a5:c7:27:99:77:ac:86:0f:ce:79:5d:e2:37:
2e:4b:d9:96:42:c2:a8:c0:69:9c:cb:8e:e6:89:66:
cb:a4:54:5c:c5:79:c2:56:f4:96:af:dc:a4:0a:d1:
0a:e6:5e:d1:4d:c9:dc:80:ca:0c:a3:a6:c8:ad:a4:
3a:8d:95:56:a6:16:28:33:aa:38:01:09:bd:c7:f3:
36:84:2e:d5:4a:40:f8:0a:86:4c:bd:98:c1:27:99:
20:ce:ec:34:4d:2b:c1:54:ca:8b:a4:7d:e0:2f:16:
cb:42:3f:42:c7:7d:40:1e:56:90:b0:04:2c:fb:e8:
16:37:5e:17:da:7e:39:9a:8f:e8:13:69:00:0d:c3:
29:fc:2e:1d:cd:65:4e:d6:52:de:92:8a:87:ef:ff:
36:ed:88:f0:e1:cf:a8:82:55:75:46:58:35:c9:e1:
4b:ea:25:62:d8:1f:d8:4d:af:a3:51:13:3c:b0:57:
42:d6:23:b5:c3:e0:33:fe:7d:32:3f:a5:4b:93:5b:
2c:b8:24:59:03:a8:9b:cc:d0:94:1d:72:dc:0b:0c:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:B5:9E:A5:77:12:5F:7F:87:0F:47:B3:C0:74:DF:29:5E:0F:06
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/M221nqV3El9_hw9Hs8B03yleDwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.143.0/24
141.101.246.0/24
185.2.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:13:66:5b:46:8d:0a:71:36:9f:7e:c4:a1:87:99:05:9f:7a:
1c:32:43:9d:db:64:f5:e8:20:1a:73:fe:c3:e9:fc:f2:87:2d:
b7:00:22:29:10:37:93:74:6c:12:60:61:56:42:ec:3a:42:83:
72:ed:73:0a:96:65:88:0b:41:db:4b:32:b4:6e:a1:2b:0c:ff:
ae:63:a4:a4:05:2b:47:c7:5f:3e:9e:59:b4:03:7a:7a:2c:be:
01:78:32:46:b7:d1:8b:f9:45:ee:a6:45:43:36:f4:e1:78:24:
26:7b:64:d8:93:05:a0:c6:37:11:6b:8a:af:79:81:4e:ce:7f:
b3:e0:e9:74:ea:16:39:87:97:87:40:db:1e:cb:d5:28:53:12:
a5:7c:59:e2:b5:b2:36:37:3a:71:42:41:fd:be:75:af:1b:06:
b8:61:c3:f5:9e:1a:b2:7d:5b:e2:55:24:b7:e5:ca:e6:5e:a4:
e2:6f:b4:e3:56:9c:96:54:e3:c5:9d:e6:42:dc:a8:88:d0:8d:
4e:4f:a2:46:2c:4a:40:a6:5e:0f:c4:60:7e:93:c9:cc:da:38:
4a:1d:d8:1c:b5:a5:39:f4:07:9c:6f:7a:4c:30:15:73:7f:c6:
04:38:6b:36:57:b4:e3:47:1b:33:bb:b8:07:3a:79:f2:14:1b:
88:65:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org