Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/Rfjsrrb3eEShw5LNMg5CwjmFRqk.roa
File: Rfjsrrb3eEShw5LNMg5CwjmFRqk.roa (raw, json)
Hash identifier: 70czLxu1C17X3x4bXGbymSSlWok3FpRKR1v9MUbQmhk=
Subject key identifier: 45:F8:EC:AE:B6:F7:78:44:A1:C3:92:CD:32:0E:42:C2:39:85:46:A9
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 13B860C2
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/Rfjsrrb3eEShw5LNMg5CwjmFRqk.roa
Signing time: Mon 04 Apr 2022 06:31:20 +0000
ROA not before: Mon 04 Apr 2022 06:31:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206037
IP address blocks: 185.14.176.0/24 maxlen: 24
185.14.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330850498 (0x13b860c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Apr 4 06:31:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45f8ecaeb6f77844a1c392cd320e42c2398546a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:7f:c1:6e:e5:39:7c:ea:33:bf:79:d2:b1:
5a:58:a0:de:a9:ba:9a:1b:86:2a:72:24:5a:c7:34:
6c:2f:70:63:f4:7e:ad:5a:fb:63:17:1e:ad:45:6e:
31:6a:6a:7d:dc:95:97:ba:7d:08:23:6f:ef:eb:65:
25:d2:62:ce:0a:f9:08:74:b8:37:ab:7e:0f:f7:86:
f6:d1:6f:74:04:0e:00:37:4d:2c:b5:f7:c4:a1:9b:
07:07:27:ae:49:92:83:17:8c:b4:0c:4a:b7:bb:b3:
b2:ad:36:67:1f:20:b0:40:d6:f3:45:27:d0:01:73:
48:e6:0b:ad:bb:c2:74:cb:78:1a:48:3e:6b:b6:26:
55:a0:75:60:bd:0b:90:f9:72:28:00:83:d7:ad:f8:
78:ee:c1:67:64:75:96:7c:a1:b2:f4:29:75:fc:55:
3f:fc:ab:59:b8:97:eb:41:b0:60:2c:71:01:2a:a7:
ba:99:24:1e:68:62:01:35:58:4a:64:5a:56:c0:a5:
c7:d7:e7:84:70:68:37:89:eb:06:13:dd:fa:a4:20:
29:33:4a:59:d9:19:48:13:5d:1b:fa:88:50:96:a8:
1d:93:10:30:d6:45:33:f5:3c:3c:2d:36:7c:bd:da:
8e:c2:97:da:3f:3b:c6:a1:fb:5b:ea:8f:db:a5:98:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:EC:AE:B6:F7:78:44:A1:C3:92:CD:32:0E:42:C2:39:85:46:A9
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/Rfjsrrb3eEShw5LNMg5CwjmFRqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.176.0/24
185.14.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6f:98:6b:cb:d3:78:57:0f:b7:b5:16:aa:02:1f:a1:2a:af:
1d:7a:ca:ec:b1:e2:0b:03:1f:24:a8:50:a8:5d:aa:03:bf:1b:
f4:86:72:56:44:6c:f5:0b:3e:be:a4:d7:21:c4:b4:82:fa:cf:
01:97:2a:bd:89:cc:18:60:47:4e:fb:76:20:0b:47:a9:af:72:
40:58:be:6a:9f:2b:97:46:e2:b5:10:dc:a5:43:26:1e:d3:e9:
61:7f:f6:ab:d1:33:f6:00:ed:ae:de:91:bd:64:f9:36:b3:20:
c8:26:75:05:33:7a:48:2e:2c:32:c5:3d:f4:f0:76:b1:03:9a:
71:c1:f8:38:ea:6b:45:6c:92:38:bb:5f:bc:f6:f1:84:f9:50:
07:3e:d6:c4:4d:32:7f:38:88:64:cc:13:1e:1f:10:c8:02:da:
b4:eb:ab:a4:bf:74:62:fb:55:48:8f:af:ed:e2:da:43:59:ce:
c1:01:a8:2c:d3:68:5e:96:e9:28:40:1f:c2:c7:b1:46:a4:3e:
5f:d9:cc:34:06:1f:cf:cf:97:a2:16:44:80:2e:6b:f4:cb:cf:
be:64:fe:36:cb:12:07:5e:cf:b2:a2:a9:7e:b1:fa:ee:d0:10:
93:01:09:38:f2:96:75:fb:ce:a7:b8:86:bc:a1:53:72:51:ec:
1c:94:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org