Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/Mdtmb4QJImxjduaXWZrdjRs1-kA.roa
File: Mdtmb4QJImxjduaXWZrdjRs1-kA.roa (raw, json)
Hash identifier: bc+fkEuBK0n3SMT6Jfd2VwC01LKJN6M6BewFFHhPfvo=
Subject key identifier: 31:DB:66:6F:84:09:22:6C:63:76:E6:97:59:9A:DD:8D:1B:35:FA:40
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 16C16D7D
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/Mdtmb4QJImxjduaXWZrdjRs1-kA.roa
Signing time: Sat 01 Jan 2022 05:58:04 +0000
ROA not before: Sat 01 Jan 2022 05:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201178
IP address blocks: 185.81.236.0/24 maxlen: 24
185.81.236.0/22 maxlen: 24
185.81.237.0/24 maxlen: 24
185.81.238.0/24 maxlen: 24
185.81.239.0/24 maxlen: 24
2a05:8a00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381775229 (0x16c16d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Jan 1 05:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31db666f8409226c6376e697599add8d1b35fa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:5e:15:ef:cd:d5:49:d7:2d:9e:cf:fa:55:
f7:aa:5b:76:5e:96:10:ed:8a:62:63:88:5a:de:eb:
42:46:f9:23:66:3c:21:33:fd:19:9c:67:fd:f1:2d:
c3:53:33:dc:f0:c2:f0:8d:95:99:f7:3f:e4:06:e0:
6a:8b:13:58:c6:25:21:67:28:ca:33:56:45:4f:4f:
3a:cd:74:88:7e:d9:6b:15:3d:70:8e:a3:18:86:14:
90:cc:da:60:dd:a9:80:a2:3c:fb:09:2e:17:1e:e2:
75:69:2e:96:4b:dd:c0:48:79:e1:6f:0b:8f:7e:4a:
28:bc:c1:9d:bc:cc:59:72:89:03:80:2a:38:68:e0:
03:22:08:55:2d:d4:8b:29:08:db:fb:77:f1:7a:f4:
9d:e0:64:f0:e0:1d:0d:42:b6:3e:18:a7:35:16:74:
8a:da:73:52:cd:64:37:12:09:ff:49:f2:35:a9:b4:
ad:82:f4:d6:e5:c2:bf:1c:2e:10:eb:ed:13:da:c1:
2f:76:f2:2f:c8:21:81:80:d6:6d:cc:a8:76:2a:9e:
f3:1d:2c:de:c6:33:ce:74:89:65:dd:3f:e0:3b:10:
cb:89:7b:82:39:f5:fd:d7:d5:d6:c0:e7:cc:65:73:
08:5b:f1:43:ab:1e:f8:27:6f:6d:ff:c2:d0:10:6b:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:66:6F:84:09:22:6C:63:76:E6:97:59:9A:DD:8D:1B:35:FA:40
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/Mdtmb4QJImxjduaXWZrdjRs1-kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.236.0/22
IPv6:
2a05:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
50:78:89:c9:68:f7:c9:15:a2:52:1c:61:a5:bb:96:a3:5a:26:
b5:73:00:44:9e:9e:72:cf:fa:ed:b3:31:d5:60:9b:b1:c8:d7:
64:b3:8a:4e:66:79:92:7a:ff:48:8a:af:38:fa:6d:d0:97:5a:
16:95:32:d2:72:db:66:16:2e:ea:ff:4a:18:80:b7:44:61:29:
40:a1:8e:10:d0:97:b9:e6:33:65:d6:a3:82:31:83:8a:45:3b:
55:be:7e:56:fc:71:ca:92:d3:ce:87:f3:73:05:07:44:be:9d:
25:25:46:03:19:1e:9d:b3:33:c6:c6:a9:05:d0:f7:9f:da:fc:
d9:83:2d:80:53:56:72:d4:ff:87:cc:98:9e:e7:4a:5c:44:cd:
33:eb:36:a7:1f:e0:8a:c2:f0:91:83:33:6b:90:82:80:01:a9:
9a:6d:0c:5c:f7:75:4f:df:9d:0d:d5:de:fa:bc:e3:b2:de:49:
16:14:3c:75:bb:c0:27:93:93:6c:95:54:30:d5:02:79:41:4f:
d4:f3:4b:6b:c5:75:15:9c:ab:1d:34:97:cc:26:65:85:47:b1:
b3:fe:6e:f6:c7:6c:1a:39:69:c2:a5:10:d4:5c:fb:b9:5a:ba:
54:13:ae:97:24:59:8b:1b:48:5b:da:ba:ea:37:30:92:a2:be:
9b:13:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org