Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/M3-Eh3IRkH9BwMHdM5VpKDBmQTs.roa
File: M3-Eh3IRkH9BwMHdM5VpKDBmQTs.roa (raw, json)
Hash identifier: r2fltj63LzP3uHEZQZF0s9rBk/4O3tbverOBj9ubI/M=
Subject key identifier: 33:7F:84:87:72:11:90:7F:41:C0:C1:DD:33:95:69:28:30:66:41:3B
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 19632191
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/M3-Eh3IRkH9BwMHdM5VpKDBmQTs.roa
Signing time: Sat 01 Jan 2022 15:56:27 +0000
ROA not before: Sat 01 Jan 2022 15:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51833
IP address blocks: 185.79.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425927057 (0x19632191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Jan 1 15:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=337f84877211907f41c0c1dd339569283066413b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:ca:c8:2a:b6:93:84:9f:d8:98:e6:bf:20:
e5:19:00:22:27:16:6b:4f:b4:90:d4:57:e8:60:ce:
b2:04:b3:98:4d:6b:0a:4a:74:a5:d1:2c:7e:14:35:
63:f2:89:fe:33:a7:c6:f8:c3:c0:f8:b2:87:70:0b:
41:8c:c6:69:00:fa:d2:ac:99:22:17:75:5c:46:04:
0d:0c:0e:71:db:67:ef:c5:5e:22:b2:d9:df:bb:8e:
92:d3:81:2b:9e:18:8f:26:21:af:5b:80:f8:e1:a5:
be:46:9c:c3:6b:b3:3f:cf:d3:18:61:0f:51:da:cc:
64:c0:97:11:14:06:b6:5f:41:d0:62:4f:cb:8a:bd:
1e:27:65:71:02:a3:05:8a:66:e7:62:20:24:75:2c:
14:ba:0f:64:af:13:7e:b0:3b:da:79:ea:80:58:30:
ce:60:dd:b3:4d:6c:05:fa:f6:d5:92:de:de:41:18:
88:f5:37:9c:a8:94:0a:a3:52:a2:49:75:06:63:78:
c4:cc:57:b6:3d:8d:18:c5:f8:80:95:fc:72:d2:e6:
70:e1:b9:49:1f:89:bd:59:77:f5:50:3c:89:cb:4b:
01:eb:f7:39:11:9f:28:2f:d0:92:f1:30:4f:1c:4f:
f7:d4:55:f1:7f:f2:11:17:70:f3:99:ab:8d:93:c5:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:84:87:72:11:90:7F:41:C0:C1:DD:33:95:69:28:30:66:41:3B
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/M3-Eh3IRkH9BwMHdM5VpKDBmQTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.212.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1b:3d:b1:da:e0:78:e7:b8:2c:f1:60:98:49:74:b3:33:80:
c4:bd:ac:be:bb:d9:2b:2b:f3:f4:bb:d7:54:a2:22:9b:ad:79:
14:43:a2:4f:a6:fd:3b:fe:88:29:f2:7c:c1:65:14:f7:bd:a2:
9f:b9:1a:e7:f7:f4:5f:09:2f:20:c4:7b:35:a7:9b:9f:ee:fa:
45:36:5e:5c:b4:5c:ba:d3:6e:f0:8d:73:4e:ed:e6:33:04:87:
49:02:db:7a:e4:16:31:1c:88:e7:51:06:8d:2b:12:7d:0a:c8:
e2:3e:01:11:c6:f8:a3:6e:cd:a5:00:5b:28:08:2a:61:f2:1c:
cc:f7:d6:a8:6f:49:bd:6a:c5:9a:17:a6:cd:7b:0e:11:00:1e:
a1:89:5a:31:41:c2:3f:bd:51:40:c3:fd:6a:06:31:31:c3:95:
47:24:e7:63:b7:bc:2b:6d:f3:08:50:54:f8:5a:b4:6d:5c:dd:
93:ea:5d:c9:34:58:97:d0:27:8d:33:2a:ee:82:90:ae:cf:f9:
b7:8c:d9:22:aa:a2:f7:ce:10:91:34:b8:20:0f:3b:8a:d4:7d:
6d:6e:99:eb:49:64:51:52:6a:13:16:0c:5a:1e:1e:9b:af:a3:
96:7b:0d:a8:dc:9d:0f:cd:2d:9b:a1:e8:6b:9d:40:7e:ee:4c:
8e:59:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:00 2024 by rpki-client on console-fra.rpki-client.org