Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/MQY5mNBA--UPD9t53PgJldXBv_c.roa
File: MQY5mNBA--UPD9t53PgJldXBv_c.roa (raw, json)
Hash identifier: jiW+haiW0SAw20OTrOVBDkl1l0uepx2aMS3FB4PCV7w=
Subject key identifier: 31:06:39:98:D0:40:FB:E5:0F:0F:DB:79:DC:F8:09:95:D5:C1:BF:F7
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 082D684E
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/MQY5mNBA--UPD9t53PgJldXBv_c.roa
Signing time: Sat 01 Jan 2022 06:56:09 +0000
ROA not before: Sat 01 Jan 2022 06:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202699
IP address blocks: 185.117.8.0/24 maxlen: 24
185.117.11.0/24 maxlen: 24
185.117.9.0/24 maxlen: 24
185.117.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137193550 (0x82d684e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jan 1 06:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31063998d040fbe50f0fdb79dcf80995d5c1bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:65:71:91:52:fd:db:34:e8:06:57:d0:e6:
d3:7b:8c:e1:4e:98:88:35:32:06:de:91:61:31:35:
27:db:f5:fb:4c:54:f8:b3:3a:2f:17:cf:cd:5e:ff:
4b:d1:d8:b0:cb:ef:a8:4c:7f:09:f4:3a:f2:b7:f7:
f4:8d:62:c8:95:61:f7:9a:bb:1e:cf:63:3a:ef:ec:
73:53:d0:40:20:d3:f4:48:36:53:9c:a9:78:53:3d:
88:be:1e:04:36:cd:83:43:14:e4:cf:82:ce:b1:ac:
a9:3b:64:2e:90:7f:d5:a1:39:f3:b0:e0:15:66:10:
f7:7e:58:6e:ad:11:c4:c9:1d:a4:3e:9a:3a:35:1d:
74:e4:9b:56:ff:ee:28:91:be:31:36:6b:74:e2:bc:
10:fe:14:ef:82:35:a0:eb:16:ac:53:48:b3:55:3c:
9b:4d:9c:63:08:fe:c8:e4:60:2e:e6:bd:a5:e2:1b:
8c:bc:64:63:ca:b5:7c:95:5c:b6:c7:c8:bd:75:71:
f5:01:11:20:82:e2:2e:c3:f6:fb:7a:66:8e:d5:d0:
23:aa:ee:2f:1f:ba:6d:60:66:1c:3d:17:94:f5:ed:
b7:a9:31:8b:07:0a:9f:26:e4:62:b7:a1:e7:88:b2:
12:db:98:b3:06:c6:91:3f:da:b5:ee:90:96:34:5b:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:39:98:D0:40:FB:E5:0F:0F:DB:79:DC:F8:09:95:D5:C1:BF:F7
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/MQY5mNBA--UPD9t53PgJldXBv_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
22:0d:2e:9c:29:d6:4e:49:e5:60:d8:bc:02:e6:a6:49:02:c7:
34:5d:8e:56:ec:4c:5f:0a:15:69:67:ae:14:ab:fc:73:fa:f9:
bf:fb:b7:d9:00:85:22:e4:0d:b7:26:18:a4:95:f2:4a:df:5a:
09:44:8f:89:00:8e:6b:09:da:37:a9:33:c8:b2:dc:57:99:03:
dd:a4:0b:5f:ec:2f:6c:7d:81:bf:71:9b:31:64:36:64:3a:3a:
73:a3:50:17:3c:19:02:3f:fc:92:8a:a0:21:3c:8a:d7:9f:6a:
c5:da:1a:e9:e4:df:7d:68:a2:a3:bf:32:b6:95:1d:91:41:3a:
17:22:7e:48:20:e0:8b:dd:8d:a5:60:9d:47:7d:26:a7:06:e2:
e3:d1:67:b2:c2:1f:5f:c8:ec:3a:e9:e6:5e:b6:d5:a2:80:4e:
13:b7:e4:d7:a7:cf:8a:62:79:76:66:40:53:f9:d2:2f:4c:58:
01:8a:27:59:af:3d:a7:a1:78:7d:4e:92:84:de:56:27:6f:df:
81:57:ec:f0:58:51:d2:ee:8b:c5:08:6a:b8:13:ef:03:ec:e5:
07:4f:07:e3:45:b1:0c:b1:df:24:73:0f:b4:34:c1:cb:97:b3:
b6:42:5e:c3:53:51:b2:ee:6a:f3:6c:82:4a:a2:f6:8f:da:88:
68:dd:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org