Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/MNqT0JfZRhFuDi1WLeGhjfZj7Ko.roa
File: MNqT0JfZRhFuDi1WLeGhjfZj7Ko.roa (raw, json)
Hash identifier: /bNCmqhxod5D+slZATHvLDc3aVILvg6c0BzHgvjpfj4=
Subject key identifier: 30:DA:93:D0:97:D9:46:11:6E:0E:2D:56:2D:E1:A1:8D:F6:63:EC:AA
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 10C94F9A
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/MNqT0JfZRhFuDi1WLeGhjfZj7Ko.roa
Signing time: Sat 01 Jan 2022 10:05:27 +0000
ROA not before: Sat 01 Jan 2022 10:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57958
IP address blocks: 164.138.233.0/24 maxlen: 24
164.138.232.0/24 maxlen: 24
164.138.237.0/24 maxlen: 24
164.138.234.0/24 maxlen: 24
164.138.239.0/24 maxlen: 24
164.138.236.0/24 maxlen: 24
164.138.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281628570 (0x10c94f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Jan 1 10:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30da93d097d946116e0e2d562de1a18df663ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:4a:86:ff:e2:85:1f:ac:07:02:eb:32:03:
c4:fe:5f:5e:96:7c:c7:6c:84:6e:91:1a:bc:68:14:
8d:52:5e:e5:08:62:7e:d0:6b:5b:65:60:29:e1:cd:
be:24:42:00:3a:12:e4:a9:23:15:68:a1:20:89:a9:
5b:59:bc:2e:81:dc:6d:7f:3b:5b:8e:e4:8f:8e:df:
ba:95:df:cf:3f:d7:83:04:9c:f6:39:9f:db:02:af:
dd:cd:ce:6f:24:3d:64:97:e6:10:80:3a:fc:7f:f7:
5f:3a:7c:ec:79:10:ff:71:4d:30:87:06:ec:b4:8c:
11:35:db:e7:7b:59:af:8a:6c:e9:e6:ff:b3:b4:01:
e5:6e:2b:62:ba:b2:90:4f:ad:46:05:5a:92:db:e6:
33:37:05:91:72:64:fe:0a:b1:ea:ca:28:c9:8b:b3:
57:6b:c1:52:9e:ab:11:4a:18:0f:2d:c9:21:1e:3f:
4f:0e:07:e1:7c:bf:7e:ec:b0:a8:07:21:88:8b:c2:
e9:2e:df:41:4c:a5:f0:85:ba:68:a7:14:d7:29:86:
5b:df:d7:66:bc:36:c3:ed:1a:4e:e5:83:b6:fe:be:
72:a6:50:45:ba:07:60:c9:55:8d:5a:80:0c:bd:9f:
3d:63:5d:ed:58:9d:fc:02:2d:79:5f:14:4b:26:9b:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:93:D0:97:D9:46:11:6E:0E:2D:56:2D:E1:A1:8D:F6:63:EC:AA
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/MNqT0JfZRhFuDi1WLeGhjfZj7Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.232.0-164.138.237.255
164.138.239.0/24
Signature Algorithm: sha256WithRSAEncryption
29:40:f9:45:35:09:ee:00:49:9d:f3:4d:c6:7d:3d:f7:27:19:
4a:f3:13:97:98:d5:74:49:4b:81:9e:97:31:7d:e1:36:4e:e3:
f8:9e:cf:b2:01:64:8a:6c:e3:f6:98:37:8b:1f:52:fe:c6:2a:
2c:d4:eb:9a:5a:5e:f8:4c:72:77:54:10:38:2c:50:00:37:06:
91:d9:69:9f:73:2e:bd:ed:a5:d1:84:1d:73:b1:ee:d5:0c:e1:
21:a4:47:f0:67:7b:5e:60:ff:49:f4:ef:0c:1c:8a:2e:1a:60:
d7:5e:49:ac:11:b1:f1:84:f9:4d:50:9b:3d:ef:d6:d1:8a:14:
ec:52:7a:31:26:63:fc:44:24:ed:6e:48:b9:39:5c:b4:ff:a3:
3b:52:be:9f:98:30:3f:6c:67:8c:6a:f3:0e:69:56:7e:b8:03:
6b:66:d6:b5:0b:85:4c:fd:2c:fe:2d:37:9d:24:fe:fa:0c:88:
d1:c4:2a:e9:4e:65:19:72:d1:be:88:37:0c:3b:6e:67:3b:10:
c8:f4:68:ea:bb:a9:c3:b5:33:a1:d4:e6:b9:0f:17:fd:2a:8b:
c0:3b:28:96:e7:92:a8:ed:27:56:99:dc:58:bf:c5:1b:c9:4d:
3a:98:b8:d5:dc:d5:a8:56:de:aa:d8:63:6a:12:f9:ed:79:be:
5e:b9:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:12 2024 by rpki-client on console-fra.rpki-client.org