Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/MaoM98H53S8EeNTmhvCbMPZgXfM.roa
File: MaoM98H53S8EeNTmhvCbMPZgXfM.roa (raw, json)
Hash identifier: o8lsET38nfhFnksD2iZS8MmF1zeVsWyEwnDm6qfTaH4=
Subject key identifier: 31:AA:0C:F7:C1:F9:DD:2F:04:78:D4:E6:86:F0:9B:30:F6:60:5D:F3
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 0B6198FF
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/MaoM98H53S8EeNTmhvCbMPZgXfM.roa
Signing time: Sat 01 Jan 2022 13:57:35 +0000
ROA not before: Sat 01 Jan 2022 13:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6895
IP address blocks: 193.149.0.0/23 maxlen: 24
193.149.0.0/24 maxlen: 24
195.95.153.0/24 maxlen: 24
185.79.172.0/22 maxlen: 22
2001:7f8:f::/48 maxlen: 48
2a03:5e60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190945535 (0xb6198ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Jan 1 13:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31aa0cf7c1f9dd2f0478d4e686f09b30f6605df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:06:0c:ff:3f:17:00:bd:6c:91:f8:30:b3:
fe:81:e1:a9:0d:31:55:8d:16:b2:be:15:47:ca:98:
d1:3c:81:0d:9e:d7:c2:de:29:9a:75:09:e7:08:81:
9c:59:b1:a5:a2:26:b2:64:c7:eb:53:b4:bd:d6:c3:
8e:8d:ff:68:83:d3:da:50:9c:e3:ef:4c:aa:3d:4d:
0a:0b:63:e7:3c:88:fa:e1:3e:17:6f:94:ec:40:f6:
97:d8:84:f3:24:fe:74:5c:4e:87:8a:db:09:d4:ca:
07:f1:5e:cc:96:02:e7:e7:21:b5:bd:d6:12:5b:92:
83:f6:b8:ef:0c:91:fb:03:4f:80:77:a2:fa:ad:18:
3e:c3:47:4e:ee:dd:b6:b7:78:d6:0a:36:54:70:7e:
60:0c:c0:f0:d8:23:8e:e6:68:1d:a5:1c:dd:b4:9a:
ae:db:56:ef:82:bb:bb:0a:87:90:a7:23:f6:ac:f8:
bb:a9:71:51:e2:d2:2b:10:ba:b8:2b:07:92:df:7f:
31:93:5a:27:8b:6d:71:1f:cd:da:f4:b6:0c:46:0a:
96:82:1b:22:30:6d:39:10:24:c0:01:a9:6b:4c:9a:
fb:e5:a7:c4:17:64:ff:25:e4:f1:7c:c3:6a:72:fb:
7c:0e:c9:45:d3:9f:26:37:07:ec:82:79:d4:b0:23:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:0C:F7:C1:F9:DD:2F:04:78:D4:E6:86:F0:9B:30:F6:60:5D:F3
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/MaoM98H53S8EeNTmhvCbMPZgXfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.172.0/22
193.149.0.0/23
195.95.153.0/24
IPv6:
2001:7f8:f::/48
2a03:5e60::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ed:dc:5a:3a:5b:eb:04:34:57:c9:79:ff:10:c5:34:9f:c3:
fa:a3:aa:d9:a3:53:a5:ae:10:e2:e3:25:24:92:3a:c8:e3:33:
2c:3e:d1:78:2d:ee:5c:ae:c8:62:50:b8:12:92:7f:ff:52:03:
ff:25:f8:68:67:9e:6c:fe:2a:db:ee:c0:45:89:1c:7b:aa:8b:
9a:8f:ce:ba:43:3a:ae:69:62:05:68:e9:80:e2:26:c5:7b:ee:
7f:fb:8d:87:d1:43:eb:df:f2:34:99:f5:09:8f:b9:4c:9e:c8:
18:88:21:18:f5:ae:27:72:f7:56:27:cb:ee:82:10:29:93:8c:
a0:90:98:4e:aa:d8:25:75:95:f6:7a:ac:77:82:2e:50:c8:9b:
64:40:6c:4a:e3:59:cf:e5:80:0f:4d:e8:a0:80:57:dd:2e:10:
95:4f:09:30:fb:cd:a7:d2:de:36:03:89:f0:eb:80:14:58:d8:
5a:f3:0c:89:05:a2:03:50:fd:a6:d3:13:6d:c5:cd:46:55:ea:
10:56:83:7d:5d:19:0d:f1:8a:3b:77:a6:9f:84:05:28:49:92:
4a:4c:57:64:4a:2f:01:eb:17:d4:84:f0:30:24:f4:53:70:6e:
7f:fb:52:85:dc:cc:f9:23:49:74:fa:6c:29:b8:ee:e1:87:57:
08:59:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:05 2023 by rpki-client on console-fra.rpki-client.org