Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/Mm_2IiC2Tg6jF36QpOM9gcshzL0.roa
File: Mm_2IiC2Tg6jF36QpOM9gcshzL0.roa (raw, json)
Hash identifier: HTNRf46pzIMgrUI6I/dHUv9GklbL5YphOtPixSo+axI=
Subject key identifier: 32:6F:F6:22:20:B6:4E:0E:A3:17:7E:90:A4:E3:3D:81:CB:21:CC:BD
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0184133D3FF65B8DD405760C9ECACC354253
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/Mm_2IiC2Tg6jF36QpOM9gcshzL0.roa
Signing time: Wed 26 Oct 2022 07:41:31 +0000
ROA not before: Wed 26 Oct 2022 07:41:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198930
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
185.66.177.0/24 maxlen: 24
185.66.179.0/24 maxlen: 24
185.66.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:3d:3f:f6:5b:8d:d4:05:76:0c:9e:ca:cc:35:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 26 07:41:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=326ff62220b64e0ea3177e90a4e33d81cb21ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:a7:a2:53:76:94:a3:39:df:16:d6:fe:bb:
f6:8a:df:8c:ce:71:7e:b9:df:35:77:ab:2b:d8:d6:
e9:ce:52:4c:89:f8:05:de:4b:39:b1:6f:c2:dc:ae:
f3:29:f4:fa:0d:d9:14:82:22:de:6d:fb:80:56:dc:
cd:63:c5:c3:0a:3d:c5:58:71:3c:32:dc:eb:58:fb:
27:34:7a:86:99:c5:12:7e:f0:67:57:4e:9f:34:e9:
59:bb:3b:34:36:07:39:e1:d0:81:5f:0b:7d:75:f4:
f4:c3:63:63:c6:02:8c:3e:6a:4a:10:c9:b1:b9:e4:
8a:48:8c:65:4e:72:92:ea:56:1e:fd:8b:85:be:31:
e9:60:e8:64:9b:ae:f4:a5:04:c1:a9:52:35:a8:61:
11:03:ac:35:e8:0c:c5:db:8f:2b:66:41:82:6b:4c:
ff:32:fa:be:f8:40:0d:9f:17:04:b8:d8:1c:14:78:
60:7d:11:96:70:1d:e1:ab:02:68:02:dc:e7:11:83:
b5:df:fc:f6:be:9d:07:cb:70:7f:44:4c:12:fe:63:
a7:75:d1:a6:85:3c:68:29:87:18:ac:73:d0:27:c1:
42:fc:a6:6f:27:0b:13:4c:c2:d5:58:9a:ea:6d:0c:
49:11:f3:94:40:07:e7:ac:55:cf:b6:cc:60:22:ca:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:F6:22:20:B6:4E:0E:A3:17:7E:90:A4:E3:3D:81:CB:21:CC:BD
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/Mm_2IiC2Tg6jF36QpOM9gcshzL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
Signature Algorithm: sha256WithRSAEncryption
01:9a:6f:a5:6a:a3:db:7d:f8:a1:b6:2a:83:d6:53:e4:05:fb:
b6:53:0b:32:53:f8:62:a2:ff:83:0e:ef:89:3a:0c:ce:a5:d8:
1f:35:99:1c:c5:2f:7a:a4:9c:7d:9a:f8:ef:bb:68:1b:74:d1:
47:c3:82:4e:c6:79:ef:b1:f0:3e:69:8c:68:41:89:0e:2d:1e:
8c:56:0c:5d:0d:60:47:d4:81:6b:e5:c3:6d:c7:e0:80:c2:82:
83:62:61:a9:5d:c0:d9:35:4c:5f:e8:6a:b5:4d:dd:05:51:ea:
ea:5c:db:ab:8e:07:3d:bf:dd:26:b7:bd:38:c6:0f:f9:0b:79:
d3:07:96:87:c3:79:b2:1a:7b:8e:29:33:e4:79:51:3f:aa:1d:
fd:9d:47:c7:a7:87:80:69:f4:df:48:cd:a9:a6:5a:f6:76:c1:
5d:24:f9:57:f8:95:5d:19:13:f5:3e:0d:64:52:bd:05:e1:ac:
a1:21:13:5d:b8:42:3d:7c:2e:cc:d4:9f:ad:fc:b4:3a:1f:72:
f2:bd:79:55:bb:96:ca:f1:b7:11:e3:9b:88:36:ec:14:2f:9a:
c4:94:64:55:da:ed:29:db:62:ff:f1:92:86:af:92:8e:68:d6:
53:13:8d:06:c6:e7:06:f7:56:1d:e0:d6:ef:83:35:b2:47:ea:
88:0f:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:01 2023 by rpki-client on console-ams.rpki-client.org