Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/3MIavCUCPGOefcqvJxHlJlcWObo.roa
File: 3MIavCUCPGOefcqvJxHlJlcWObo.roa (raw, json)
Hash identifier: ZajmjHCY4XYTwlp7l//OzAp3++QKXq71MNK6L9idwoY=
Subject key identifier: DC:C2:1A:BC:25:02:3C:63:9E:7D:CA:AF:27:11:E5:26:57:16:39:BA
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 039E6B
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/3MIavCUCPGOefcqvJxHlJlcWObo.roa
Signing time: Wed 06 Apr 2022 13:06:56 +0000
ROA not before: Wed 06 Apr 2022 13:06:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 185.72.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237163 (0x39e6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Apr 6 13:06:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcc21abc25023c639e7dcaaf2711e526571639ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:4a:36:7a:6b:87:8c:e3:32:a5:4b:01:1d:
43:64:63:16:94:0d:45:c1:fd:29:33:ee:fd:be:64:
66:4f:f7:ea:e1:f5:22:9d:45:f1:eb:09:0d:bd:a6:
25:73:8f:13:32:87:90:f8:86:fa:2f:79:3f:fa:c3:
29:e7:0d:32:49:88:a4:17:e5:3d:18:19:34:89:fe:
5f:52:5b:ab:8f:05:8a:b9:2e:19:9a:a4:5c:fd:39:
91:74:c1:a0:12:22:04:af:9b:5a:ff:98:1a:47:60:
6b:dd:ff:f4:b7:0e:09:a6:09:90:af:68:13:bf:51:
21:19:1a:1a:23:e0:ec:8e:a6:b8:46:6a:3b:fd:f7:
96:13:a3:08:9c:dc:13:8a:f0:b2:bd:41:ed:b8:c8:
f3:b0:6d:99:56:23:5a:09:27:6b:d7:28:7a:d3:2b:
76:19:28:4c:60:7b:f4:b8:37:ea:86:fd:ea:1d:37:
3e:70:4c:39:6b:8d:b0:8e:06:cf:43:64:ef:2d:2d:
cd:92:cd:67:ef:74:cd:a5:db:4d:04:0b:bf:8f:2b:
74:20:81:e2:f8:18:b2:e6:8c:f6:91:c2:8d:4c:21:
d3:0e:99:59:c3:64:c4:b7:bf:2e:70:e0:61:04:72:
e8:0e:7b:39:4a:9c:2c:39:e1:46:c9:2f:a6:ee:84:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C2:1A:BC:25:02:3C:63:9E:7D:CA:AF:27:11:E5:26:57:16:39:BA
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/3MIavCUCPGOefcqvJxHlJlcWObo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:60:8f:b1:42:a6:ad:fe:30:9f:f6:dd:38:71:12:14:c1:2f:
5d:27:cc:83:9f:ff:ff:76:ef:a9:f1:64:7c:80:7c:cb:4d:92:
9b:9c:e0:4d:19:fc:52:83:1e:b0:bc:a8:f0:56:8c:98:c6:d3:
34:98:0a:42:21:ee:9c:fa:c3:de:f4:3f:d1:ee:ff:69:8c:4d:
2f:38:ba:04:84:d2:0a:51:9a:f1:2c:6d:74:39:20:5d:d5:db:
ec:ec:7b:05:aa:cf:93:bd:32:00:d3:4a:12:20:0e:ee:d5:4e:
c8:51:f0:4e:f4:23:1d:a7:f1:b7:87:ff:48:2d:0f:9a:0f:d0:
b2:1a:b6:f0:4b:f1:4f:85:aa:aa:76:5a:10:89:da:f3:96:5d:
73:d9:33:f9:ff:5c:0c:e0:5d:fb:c0:2d:d8:f3:1d:43:98:c3:
61:9f:4b:2f:9b:12:73:36:29:93:63:fc:8c:26:8b:3a:4d:a2:
0f:a8:af:23:2c:27:57:3e:28:4b:ce:9b:b3:75:d3:0c:26:ce:
72:b5:6f:26:c2:3c:de:1f:55:22:ac:e6:7f:bc:c9:80:77:32:
d6:65:6a:ad:39:3c:f7:3c:03:05:3d:80:88:b0:6e:b0:ea:a4:
67:14:a6:4e:e7:c1:6d:59:74:0a:57:28:e9:da:8a:69:0a:64:
3f:c0:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-ams.rpki-client.org