Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/mi4SClV_N2RP3o_LNr-KO4OtR2E.roa
File: mi4SClV_N2RP3o_LNr-KO4OtR2E.roa (raw, json)
Hash identifier: iY8ZD64eHMK9KXVt9ExZpUHdZYTpx66kJVGPll1eHTw=
Subject key identifier: 9A:2E:12:0A:55:7F:37:64:4F:DE:8F:CB:36:BF:8A:3B:83:AD:47:61
Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial: 09E1B39F
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/mi4SClV_N2RP3o_LNr-KO4OtR2E.roa
Signing time: Sat 01 Jan 2022 05:53:31 +0000
ROA not before: Sat 01 Jan 2022 05:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.43.192.0/24 maxlen: 24
185.43.195.0/24 maxlen: 24
185.43.194.0/24 maxlen: 24
185.43.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165786527 (0x9e1b39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Validity
Not Before: Jan 1 05:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a2e120a557f37644fde8fcb36bf8a3b83ad4761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:be:e5:47:b9:01:cd:62:a0:99:99:80:ab:
b0:80:16:b5:a5:10:9f:b2:5c:54:8c:83:01:62:d3:
78:94:e8:2d:ad:f8:f9:da:f6:bc:f0:fa:28:07:01:
26:50:71:b8:0f:3a:96:b9:0a:6d:de:80:3d:7e:6e:
85:79:3b:d3:2e:20:0f:df:f3:a8:09:46:aa:68:2b:
1b:bb:8f:d3:f2:cf:f6:ed:d2:5b:bc:3b:5d:cf:74:
a9:7f:69:ea:1d:bf:5e:c9:da:fe:88:3c:a0:09:65:
f9:3d:75:66:2c:59:27:17:a6:b1:8c:18:f2:f5:69:
75:a8:37:28:ec:25:ab:d0:e2:5a:08:05:b0:4d:0f:
f9:67:ae:e7:2e:85:1f:de:79:11:24:e8:6a:5d:17:
b3:69:e8:8a:e3:6f:d0:2a:a1:38:90:16:08:aa:07:
f9:23:c4:2a:0f:79:88:ca:4d:fe:a2:f6:8e:ff:96:
72:e6:c0:84:45:fc:fe:d2:58:ce:0c:0b:d7:3a:5d:
93:09:ea:ff:09:33:8a:df:a9:5c:3c:bc:b5:fd:0c:
6b:42:fc:04:6f:43:49:f7:a5:47:af:6a:4e:20:a1:
b5:56:68:68:08:bd:83:52:ac:e8:f7:5b:40:7f:3c:
22:de:af:7e:38:0c:8f:cc:1e:ef:98:7c:fb:02:b2:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:12:0A:55:7F:37:64:4F:DE:8F:CB:36:BF:8A:3B:83:AD:47:61
X509v3 Authority Key Identifier:
keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/mi4SClV_N2RP3o_LNr-KO4OtR2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f9:db:31:ba:57:8a:85:14:cc:7a:3b:b2:b0:29:74:db:cd:
51:50:f1:cc:ee:f3:ad:e7:b4:12:9b:e7:8b:67:7a:4d:aa:e1:
6a:ad:00:d0:ff:45:6b:a0:eb:ab:d2:24:a6:61:a9:10:eb:b8:
c2:dd:74:36:4b:11:c2:2d:a0:2f:a5:e5:b1:aa:66:f6:88:38:
1b:aa:b6:01:f1:35:96:09:7c:43:7b:55:dd:26:70:f4:9c:2d:
5b:6c:26:17:9e:fa:f3:dd:3f:ed:41:74:75:b3:7a:d5:99:3e:
61:75:98:8e:f0:25:11:64:54:24:7d:cc:08:8a:7e:d1:7d:6d:
ab:f1:e9:32:49:9b:0b:64:08:97:37:32:f6:1a:f0:eb:1a:5d:
7f:ca:6e:14:bf:49:d3:d5:d5:f1:bf:20:3c:0c:46:4f:7e:c1:
e3:6a:10:f1:9f:ab:c1:df:af:6c:da:00:12:cd:2f:a2:87:9f:
bd:bc:ef:c5:4f:05:87:b0:c2:d3:a0:e7:50:5b:8e:ae:c4:8a:
5d:3c:7b:7b:41:64:37:b2:e8:09:cc:cf:41:99:85:5b:3d:77:
ad:5a:44:88:fd:a2:b4:bb:8f:61:49:17:d1:f1:c9:ae:6a:e8:
ec:f6:8a:cd:28:e2:3e:a0:a0:9f:2c:e4:63:55:e6:83:a7:a9:
69:37:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:13 2024 by rpki-client on console-ams.rpki-client.org