Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/MCiEbha7oEmwLvSRCKYKhio9dNs.roa
File: MCiEbha7oEmwLvSRCKYKhio9dNs.roa (raw, json)
Hash identifier: 5ZF03HoyWr1SllA41rlctkzNUtIQNi4XMbxjL2kYYWE=
Subject key identifier: 30:28:84:6E:16:BB:A0:49:B0:2E:F4:91:08:A6:0A:86:2A:3D:74:DB
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0183A484BC52F3E2FCBDA8D9C0C4368B833B
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/MCiEbha7oEmwLvSRCKYKhio9dNs.roa
Signing time: Tue 04 Oct 2022 19:41:45 +0000
ROA not before: Tue 04 Oct 2022 19:41:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.156.226.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
94.176.96.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:84:bc:52:f3:e2:fc:bd:a8:d9:c0:c4:36:8b:83:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Oct 4 19:41:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3028846e16bba049b02ef49108a60a862a3d74db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:9a:cd:7e:8a:43:d1:ea:8d:94:be:cc:b9:
5c:f4:32:58:ce:ba:aa:de:eb:f1:58:0f:80:32:4e:
ab:4f:93:c2:f7:4c:0e:65:6e:64:bf:b4:4a:9f:e5:
bc:b5:8f:de:f7:e4:50:40:4a:b2:02:dd:dc:3d:a2:
78:79:a7:40:1e:c0:0f:ee:11:c6:7c:e6:f7:f6:1f:
8f:f3:70:c3:d2:69:f9:17:32:04:aa:46:8c:7e:48:
03:76:87:c1:3a:aa:8b:c3:37:9e:25:19:db:b7:b9:
c0:69:7b:86:0f:a6:23:30:10:67:61:90:19:1c:a1:
0f:37:6e:4c:28:12:10:08:9d:b7:27:4b:79:e2:c6:
eb:02:3d:34:65:0d:91:2c:8a:db:5e:c1:09:fd:14:
bc:a2:04:d2:50:93:82:63:99:85:a8:ad:47:31:8b:
01:47:86:76:7f:a9:18:d0:5f:ff:6c:71:a0:7f:37:
08:51:34:b8:2f:a3:f2:6e:5f:ce:76:9d:fd:c8:98:
49:d5:a3:8c:b2:45:6b:00:b3:b9:bf:d5:e5:bf:c1:
66:28:fb:9c:f1:7a:00:62:a1:bc:9e:21:34:db:16:
ac:04:47:ca:2c:5b:5a:0a:d8:4b:17:17:ba:06:65:
f8:0f:1e:37:51:f4:46:51:a9:d1:eb:ba:40:eb:bc:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:84:6E:16:BB:A0:49:B0:2E:F4:91:08:A6:0A:86:2A:3D:74:DB
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/MCiEbha7oEmwLvSRCKYKhio9dNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.226.0/24
46.102.116.0/24
87.121.136.0/21
89.44.77.0/24
94.176.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:db:47:e3:f2:93:34:27:70:bb:24:3e:73:13:df:ba:c0:9d:
82:d9:63:25:ef:da:a6:3f:e6:13:bf:d5:eb:65:45:3b:8c:c4:
96:9d:a5:44:97:2a:a8:41:cf:92:1e:9a:ce:f3:f1:f0:08:93:
8e:c4:94:a1:92:a9:bf:fb:02:85:7d:d5:af:fd:ed:81:3b:b5:
dc:b3:12:01:6c:31:0d:bf:6c:53:33:98:64:bf:72:95:eb:0b:
86:a7:82:10:33:36:62:c3:98:6e:8d:4e:11:60:64:d9:ea:67:
40:46:f8:f4:12:c0:9a:a9:e2:99:3d:81:d1:0c:05:9d:f2:a2:
66:ea:64:a7:9a:23:30:58:76:85:11:56:c2:c5:56:6b:ce:15:
82:f8:59:c4:73:40:71:02:42:1f:87:3b:03:5e:ea:6c:0c:3c:
d6:df:49:1a:52:51:8c:61:92:66:c2:07:db:c3:3d:78:5f:ae:
8b:06:6a:b7:0a:d5:73:28:0a:68:ca:23:1d:cc:8a:34:0e:e2:
1d:12:4f:39:54:33:b3:d5:19:66:d9:cd:c2:5a:ba:44:75:84:
1a:f6:d6:f7:c2:87:fb:36:b8:b4:92:18:dc:12:1b:5b:cc:11:
a7:2f:72:09:bc:f7:71:f1:4e:54:57:2e:ee:eb:1b:67:fb:9a:
e4:bb:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org