Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/MYT8qCpMZNwOtqL9HNECIf2TrfI.roa
File: MYT8qCpMZNwOtqL9HNECIf2TrfI.roa (raw, json)
Hash identifier: hqAsfrjxR+o80kf5NsjV37lStrEXdIwsWrjnPXB62l8=
Subject key identifier: 31:84:FC:A8:2A:4C:64:DC:0E:B6:A2:FD:1C:D1:02:21:FD:93:AD:F2
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 0EB5960B
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/MYT8qCpMZNwOtqL9HNECIf2TrfI.roa
Signing time: Sat 01 Jan 2022 04:56:18 +0000
ROA not before: Sat 01 Jan 2022 04:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35320
IP address blocks: 185.12.140.0/23 maxlen: 23
80.93.112.0/20 maxlen: 20
78.154.160.0/19 maxlen: 19
2a02:5f0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246781451 (0xeb5960b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Jan 1 04:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3184fca82a4c64dc0eb6a2fd1cd10221fd93adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:6b:16:9b:da:91:a6:97:14:16:1f:5a:e3:
ef:7f:ee:f4:cd:d0:36:6c:09:ca:de:35:ec:30:64:
91:f8:ee:cb:61:4f:00:5e:a6:a7:44:9a:d3:7d:1e:
8a:e0:fa:46:e9:25:f1:96:3b:67:28:2c:e7:69:54:
67:79:b2:91:e3:3f:ad:96:6e:df:0b:93:3d:34:a0:
db:0f:e1:df:15:c3:c7:cb:27:da:88:cd:fd:8a:ca:
20:6d:ed:cd:48:93:15:c6:ab:f6:18:50:fc:cb:44:
6a:6c:de:ad:c7:98:cf:0c:3d:02:a0:81:a5:af:f7:
35:ae:57:95:f5:cf:41:65:92:ca:0c:a2:9e:f8:90:
0d:f7:1f:86:50:54:31:68:86:45:d7:4b:d7:63:aa:
fb:b9:b5:a7:55:be:a5:da:7d:92:fa:78:2f:c3:69:
e3:be:b1:eb:09:70:d1:1a:11:20:ba:45:a1:03:c8:
2b:45:0d:ec:7d:92:9f:16:78:6d:30:f2:bd:47:4a:
14:5d:08:9f:4e:6c:a4:a1:a1:1b:45:df:54:b8:d3:
2f:f1:be:0b:fa:59:0a:8f:ea:a2:b1:f2:a9:aa:47:
60:2a:8b:a6:08:b9:55:04:d1:d4:e6:b2:c8:f4:69:
2e:8c:ac:18:82:f5:f5:ea:b8:33:4e:14:96:6f:fb:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:FC:A8:2A:4C:64:DC:0E:B6:A2:FD:1C:D1:02:21:FD:93:AD:F2
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/MYT8qCpMZNwOtqL9HNECIf2TrfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.160.0/19
80.93.112.0/20
185.12.140.0/23
IPv6:
2a02:5f0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:02:7c:13:6c:db:a3:4f:14:12:5b:e5:54:be:79:55:cf:bc:
ee:7f:c9:88:eb:8a:03:91:1d:d4:0c:42:8a:36:58:47:18:ee:
fd:fa:31:7b:89:55:8f:ae:d6:e6:2f:23:3a:3e:c3:7f:9a:89:
83:76:ed:8c:8f:15:e3:22:c9:2a:e2:f1:17:cd:3a:e1:d8:0c:
ab:4d:93:da:a6:07:6a:a7:48:c3:89:90:bf:5e:c9:4a:fd:06:
b9:43:8a:10:0f:9d:1e:0a:3c:05:28:b8:ff:51:c0:04:b7:e6:
ad:b8:00:b5:c7:a0:9b:4b:f4:0c:45:a6:2d:a7:6e:3c:66:ec:
aa:21:2a:66:51:59:5a:ac:51:bf:f4:71:57:c4:0b:a8:b1:10:
f3:c9:29:65:ef:ad:65:df:f7:1c:0c:da:27:d7:72:16:e0:6b:
d7:04:be:70:9f:91:49:03:db:d9:ad:74:e5:64:fb:c3:29:fc:
40:c9:63:57:02:e1:09:b7:11:54:62:fe:5c:8f:03:c1:5b:a4:
5f:46:78:40:f2:77:8a:a7:c0:bd:bc:8c:56:e1:25:e1:82:55:
0e:94:f6:56:eb:b8:1c:90:eb:ec:f5:f8:38:24:ed:c6:e3:17:
75:37:a5:68:53:c4:3c:15:8b:34:86:24:dd:bb:3d:be:ad:9a:
87:ba:e9:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:58 2023 by rpki-client on console-ams.rpki-client.org