Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/MQwy05dCSiJ5JfuQ-l7FcD84Auw.roa
File: MQwy05dCSiJ5JfuQ-l7FcD84Auw.roa (raw, json)
Hash identifier: UhSc8DgZ7JwmdCpUX1V7Ub/S0gmTtEcdZqn8M0B4Mqk=
Subject key identifier: 31:0C:32:D3:97:42:4A:22:79:25:FB:90:FA:5E:C5:70:3F:38:02:EC
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0C7BA600
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/MQwy05dCSiJ5JfuQ-l7FcD84Auw.roa
Signing time: Sat 01 Jan 2022 10:58:57 +0000
ROA not before: Sat 01 Jan 2022 10:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.210.92.0/24 maxlen: 24
185.210.95.0/24 maxlen: 24
185.210.94.0/24 maxlen: 24
185.210.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209430016 (0xc7ba600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jan 1 10:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=310c32d397424a227925fb90fa5ec5703f3802ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:0a:37:0f:90:44:20:f3:03:d4:42:e2:e8:
cc:ed:c7:b6:1c:e4:15:5e:8d:03:c7:32:b6:f1:1f:
d6:01:bc:48:93:cc:8a:0d:94:38:41:90:d7:3e:5c:
9b:9a:a3:5f:9b:d4:14:ed:82:a7:a3:98:c8:8a:50:
83:7a:b9:65:02:a3:69:5f:70:8c:9a:2d:1d:9b:ec:
8c:dd:85:8d:dc:34:e7:1d:32:4e:cf:db:80:e8:82:
28:20:44:9f:87:6a:00:ca:c4:27:c2:0c:01:fd:8c:
45:0c:c5:64:63:10:35:97:52:aa:f2:b2:b4:c8:d8:
d9:71:54:7c:06:52:a3:bb:57:72:a6:f1:9b:b0:c7:
25:8d:09:0c:3c:74:b6:35:78:86:5c:d4:87:16:51:
9f:f4:f8:e8:b2:5c:26:64:1d:b1:db:19:6e:0f:8b:
49:6f:9e:96:1f:65:51:94:d9:bd:26:a1:29:a7:ee:
7f:e8:de:14:55:90:af:60:26:e1:66:8f:ba:8b:65:
6d:9f:cc:6a:fc:53:25:49:2b:29:66:9b:02:b0:0b:
88:51:7f:70:98:27:03:87:66:02:a0:a2:1e:4c:ac:
c3:c4:cd:c6:88:76:96:fc:58:f5:30:cb:b6:40:2a:
69:a9:ab:65:59:6f:06:d2:35:1c:dd:30:40:f5:0b:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0C:32:D3:97:42:4A:22:79:25:FB:90:FA:5E:C5:70:3F:38:02:EC
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/MQwy05dCSiJ5JfuQ-l7FcD84Auw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:60:93:2f:52:41:8b:62:ab:a6:54:c3:57:b0:ca:87:e5:3a:
ee:8b:07:bb:96:bb:30:f5:5a:ba:2f:f4:5c:2d:a3:0c:59:51:
7c:f6:5f:58:82:60:79:02:ba:b4:08:b5:48:18:3a:45:b0:9c:
4a:85:0d:af:2e:03:07:28:57:f7:f5:39:d6:17:11:4e:0a:42:
3d:f8:66:fb:df:4d:0b:9d:66:0d:b1:42:d2:f9:55:7e:03:b9:
4a:59:6e:49:45:55:a2:bf:a9:28:ab:7c:76:1d:88:f8:d5:82:
b2:1d:2b:44:5f:19:3b:58:a7:f3:8a:51:90:1b:d6:47:d7:90:
0f:45:5d:b8:74:f6:60:35:d8:00:27:b4:35:a4:ea:19:30:cf:
d4:d3:32:e1:e4:60:16:25:84:bb:b9:f9:68:db:15:76:0a:aa:
b9:e8:e3:f2:38:ee:00:0f:24:07:40:e8:61:a9:b5:f1:fb:64:
8b:d6:57:dc:aa:a4:45:b3:71:bf:6f:74:3a:df:30:97:ed:73:
37:fc:ee:c6:43:8c:38:f1:1e:b3:af:72:c4:f4:ff:ea:b2:ba:
02:bb:59:15:4f:77:2b:96:59:88:7f:1d:da:15:56:4d:35:3a:
39:fa:bc:fa:e3:03:72:2c:73:a0:77:13:c3:7a:9b:e9:04:5a:
b0:83:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:32 2024 by rpki-client on console-fra.rpki-client.org