Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m4BdYyrjWXnazTy1ME2drkSUL0Q.roa
File: m4BdYyrjWXnazTy1ME2drkSUL0Q.roa (raw, json)
Hash identifier: 3FvV+eVnk/1Pgm9dDVJgcJrJTQuWA1J1cq9gCQmdk0k=
Subject key identifier: 9B:80:5D:63:2A:E3:59:79:DA:CD:3C:B5:30:4D:9D:AE:44:94:2F:44
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01822010BE10C7FA93E5EBBD020A4A684F8B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m4BdYyrjWXnazTy1ME2drkSUL0Q.roa
Signing time: Thu 21 Jul 2022 09:22:24 +0000
ROA not before: Thu 21 Jul 2022 09:22:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 185.121.120.0/24 maxlen: 24
62.197.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:10:be:10:c7:fa:93:e5:eb:bd:02:0a:4a:68:4f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 21 09:22:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b805d632ae35979dacd3cb5304d9dae44942f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:0c:1e:99:d2:5d:15:a6:0e:02:a6:3e:27:
11:72:23:8d:f7:b5:14:3e:81:58:3b:e3:c0:2a:8e:
d2:a1:30:b4:a1:b2:2b:3d:fc:94:69:2c:a0:58:85:
bd:41:6e:02:f0:6b:69:e4:86:75:98:11:aa:bb:b0:
cb:c6:df:68:b7:83:57:d3:56:07:f9:07:b7:41:d7:
87:14:8d:3f:70:a5:2d:7a:19:fa:82:09:1a:c7:c3:
b7:c7:51:8f:29:db:e0:31:d1:1d:eb:88:0b:e1:04:
34:f8:18:3b:85:31:07:70:3f:1c:30:68:79:79:2d:
ca:cc:57:f4:69:96:98:27:17:7b:db:2b:04:ed:82:
b1:79:55:6a:cd:40:79:ab:b5:4a:16:72:1b:c4:3a:
c7:a5:e0:1e:33:09:c1:9d:6a:15:84:f2:cd:a7:02:
39:aa:2e:31:72:d6:4d:2e:0e:25:d3:6a:e9:f5:25:
38:64:62:dd:a4:ad:1f:db:ff:c2:bc:d6:d1:c1:98:
33:12:3c:f1:94:db:8a:7e:d7:8c:47:28:e1:be:60:
ed:22:63:54:cf:e2:32:98:6b:19:48:de:2d:37:bb:
fd:19:dc:a9:54:87:28:50:cb:c1:7c:3a:ec:60:ae:
b4:a2:81:dd:89:f3:46:e5:59:ef:2d:91:46:ba:20:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:5D:63:2A:E3:59:79:DA:CD:3C:B5:30:4D:9D:AE:44:94:2F:44
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m4BdYyrjWXnazTy1ME2drkSUL0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.136.0/24
185.121.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7f:b5:1d:8b:53:75:11:94:7a:1d:c3:f5:b1:4e:7c:7c:ad:
27:b7:6e:30:ae:ab:2e:25:c4:6b:7f:5d:8e:ab:0c:5c:f2:91:
67:60:91:5d:a4:c1:6d:29:7e:56:59:0f:36:0f:43:f7:d2:1a:
00:05:98:42:e4:c4:e0:d8:cb:97:d5:1b:dd:c7:2a:7b:a5:a6:
f3:4c:ff:2b:c8:6e:49:fa:54:16:de:1e:a4:71:9d:76:46:fd:
06:02:0c:84:6c:a1:7f:d2:b8:65:98:9e:8b:63:fc:95:a7:5b:
dc:e8:7d:7a:27:f8:52:f6:3a:bc:c5:dc:96:89:34:a9:e9:ed:
34:96:67:5c:a1:8a:0f:3a:c1:a6:10:39:c5:08:4b:12:61:08:
e3:3f:1c:a6:3f:0d:7e:40:df:e7:31:13:f8:39:c4:d6:a5:a8:
e8:6e:fa:15:a3:f0:49:f8:35:8c:83:c6:47:3f:9c:4e:6e:02:
b4:7c:43:a3:3e:90:0a:3d:e9:a6:6c:fe:68:5b:cf:4f:9d:24:
ca:b0:5d:1e:a4:e8:ef:56:9f:26:c2:99:05:50:aa:f4:e7:3b:
30:dc:bc:55:8e:a9:e2:ea:3b:78:16:dc:8e:17:37:e2:77:b3:
7d:91:69:bb:21:3c:65:4f:3e:94:7f:5c:02:21:04:82:19:d9:
9b:f1:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org