Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/MwiuJlzxNcOjz1AhIwLXI56Mc_Q.roa
File: MwiuJlzxNcOjz1AhIwLXI56Mc_Q.roa (raw, json)
Hash identifier: mdJUxfnnARqwAMZ68ohVad9qFrrsYT370zZ0073MLB4=
Subject key identifier: 33:08:AE:26:5C:F1:35:C3:A3:CF:50:21:23:02:D7:23:9E:8C:73:F4
Certificate issuer: /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial: 08A1F3D0
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/MwiuJlzxNcOjz1AhIwLXI56Mc_Q.roa
Signing time: Sat 01 Jan 2022 01:55:41 +0000
ROA not before: Sat 01 Jan 2022 01:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200796
IP address blocks: 185.95.152.0/22 maxlen: 22
185.95.152.0/23 maxlen: 23
185.95.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144831440 (0x8a1f3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Validity
Not Before: Jan 1 01:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3308ae265cf135c3a3cf50212302d7239e8c73f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:56:57:07:37:6a:30:29:75:b4:4c:33:b9:
9a:75:fb:9f:b6:14:63:08:5d:42:2c:c8:f6:25:7e:
9a:cc:0b:6e:c1:87:25:a9:07:64:0f:a7:b9:24:37:
02:96:05:94:da:78:6e:7b:79:ea:8b:84:93:f9:f6:
51:e4:9a:d3:88:7e:7a:9e:37:a5:49:eb:2f:33:bc:
d1:56:37:98:da:08:a9:c4:09:13:ed:a0:92:ed:06:
4a:90:fd:3d:ef:bd:36:ca:44:6b:6e:c0:c3:29:b5:
b7:56:cd:c7:c3:ad:14:d1:f9:02:e7:b7:51:9b:cc:
1f:d9:4e:9d:c9:9f:b8:da:9c:d1:eb:20:31:07:c4:
53:95:67:2a:c1:00:8d:71:57:e1:df:96:fc:f4:8d:
46:f3:ec:a0:8b:6d:02:0e:53:f4:d2:6a:5e:31:07:
4a:53:33:38:49:6e:10:85:04:e3:8d:17:91:ce:86:
e7:c8:02:a5:1a:99:ed:37:f7:f8:ce:c6:87:cc:1f:
86:8d:36:85:08:da:a0:cf:2a:b0:5c:47:6d:7f:e4:
34:35:5a:53:63:58:c7:87:e8:0a:3d:95:2f:e8:a2:
f1:81:47:9f:5b:e5:98:5c:89:2a:e7:49:6c:ab:ea:
67:14:e9:a6:26:87:20:40:44:58:0d:8f:df:cf:90:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:AE:26:5C:F1:35:C3:A3:CF:50:21:23:02:D7:23:9E:8C:73:F4
X509v3 Authority Key Identifier:
keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/MwiuJlzxNcOjz1AhIwLXI56Mc_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:9a:51:fc:7f:1a:fb:aa:f9:0a:bd:4b:ac:e6:d3:a7:90:1b:
00:59:52:3b:d7:70:db:22:c5:be:1a:1d:4b:12:7f:ae:ea:94:
2f:e7:6c:f9:4b:f2:2a:3c:6c:76:52:32:c7:bc:e3:19:12:42:
b8:a3:86:25:29:95:fd:ea:21:64:b2:4b:7c:f5:f4:4d:98:f0:
28:22:8f:5a:e4:61:d6:a2:e4:a3:00:82:2f:42:5b:df:ad:48:
1a:97:ff:3f:6b:7b:6a:49:26:64:26:ae:44:9b:11:c8:e2:09:
f3:95:a5:c7:82:b1:95:aa:58:85:a0:1c:50:6e:6d:14:ca:ea:
43:f9:9b:25:58:ed:85:76:55:d2:9a:62:30:64:1f:15:ab:43:
73:73:8b:e8:1d:35:3b:57:0d:0a:c6:e2:41:e4:2d:0d:fe:ab:
e9:0e:46:e4:c9:43:65:47:f0:81:19:07:ee:26:b2:fd:74:3f:
21:2a:1d:77:33:a4:15:c8:92:a0:f0:f0:4b:d6:58:1e:f2:40:
68:07:7f:bf:88:29:85:02:14:0a:ab:8c:eb:bc:6e:74:ec:19:
84:81:fe:9d:7b:a3:97:25:48:fa:da:89:91:b1:a5:27:57:18:
fc:3f:d1:23:75:22:ff:20:2f:a7:55:e6:6d:2d:40:ab:0c:e7:
ae:5d:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-fra.rpki-client.org