Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/mZ2EMvyFAaC4xJ0iQyAgBEuzHM0.roa
File: mZ2EMvyFAaC4xJ0iQyAgBEuzHM0.roa (raw, json)
Hash identifier: +Y88n5IIJGleCjmP1BrGIiLoVGDvBO5t6rXGi9APhw0=
Subject key identifier: 99:9D:84:32:FC:85:01:A0:B8:C4:9D:22:43:20:20:04:4B:B3:1C:CD
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 096CC1F6
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/mZ2EMvyFAaC4xJ0iQyAgBEuzHM0.roa
Signing time: Sat 01 Jan 2022 15:58:24 +0000
ROA not before: Sat 01 Jan 2022 15:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212693
IP address blocks: 213.185.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158122486 (0x96cc1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Jan 1 15:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=999d8432fc8501a0b8c49d22432020044bb31ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:6f:0c:30:b9:b6:75:43:eb:ae:aa:f6:a1:
2d:a5:a3:eb:1f:d7:5d:15:06:e6:df:ac:d2:14:5d:
63:63:2c:54:49:01:41:ee:7e:95:35:a8:16:76:80:
a9:bd:97:7e:13:ec:3a:49:cb:26:84:bf:b5:bf:9b:
03:9d:80:21:22:0a:e6:c7:b8:b3:89:b7:72:38:84:
e1:94:97:5b:6f:e1:33:18:0b:48:12:c2:51:43:91:
23:b7:49:c7:34:68:a1:6e:1c:5e:65:82:c3:3c:eb:
6f:e1:d1:fe:8a:c9:b0:45:30:30:e2:0d:59:4c:6f:
d3:be:e6:d6:f1:92:0f:ce:a7:a9:cf:2b:3f:31:b0:
3d:55:47:33:8b:d5:f2:01:5f:a1:15:fa:e6:31:1e:
a2:2f:e7:2f:68:60:40:15:ee:90:d5:8c:f1:ab:84:
95:df:9b:5a:10:be:0c:c0:a2:9c:7b:8c:a7:c8:f6:
a4:dc:9c:ee:2a:d3:c0:36:76:60:7e:b9:02:64:24:
05:83:9a:7a:9c:4c:62:25:4b:9c:21:1b:23:25:ae:
58:ef:4c:68:23:df:a7:bc:53:d0:31:0d:06:3e:22:
cc:65:cb:20:94:12:63:11:34:46:b2:1f:47:68:bc:
c1:cf:db:2f:d7:7b:5f:90:09:05:f2:a4:d0:1d:ad:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:84:32:FC:85:01:A0:B8:C4:9D:22:43:20:20:04:4B:B3:1C:CD
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/mZ2EMvyFAaC4xJ0iQyAgBEuzHM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e5:de:d6:d8:1a:ff:69:6d:46:b0:d8:9b:4a:b2:3f:49:03:
84:b9:98:7e:cc:96:94:2f:eb:9c:db:90:30:bb:75:f7:36:bc:
30:f8:2a:fd:58:9d:06:de:39:7b:bf:ec:32:3f:e9:4f:60:bc:
75:49:3c:2f:ad:b8:57:23:eb:e4:76:14:69:bc:11:31:77:b9:
af:f7:aa:c2:ef:cb:c4:c5:3b:0d:3c:5c:b7:a6:bc:94:fa:b1:
fc:a7:db:28:8b:71:4b:a9:55:3a:fa:24:c7:0d:8c:e2:9d:f8:
3a:e1:ea:00:a6:ee:27:a4:56:fd:a1:17:b1:72:1b:f5:da:7c:
8d:2c:e4:ae:a7:af:f9:e7:2e:b9:a9:6b:91:33:57:13:42:f9:
0a:45:d7:b6:dc:04:86:15:fa:e0:b2:e7:44:17:7a:91:a7:8d:
4e:4f:67:96:e7:8a:cf:8e:40:96:21:53:ff:13:56:c5:3d:88:
2d:b0:fe:f1:ca:bc:1c:5c:01:8a:0d:e3:a8:33:dc:ba:87:2d:
90:1d:f8:f7:72:cb:b0:03:a9:8c:83:e4:74:59:48:52:de:c4:
21:e8:7d:16:f6:8d:ab:ea:18:8b:42:ba:92:59:fb:ee:f2:0c:
7f:93:c1:5b:1b:08:2e:77:be:b5:e2:52:66:94:f8:5f:ac:1f:
13:6a:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org