Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/MHTe0G2bUc4O_Z_Zf24DhpB5X90.roa
File: MHTe0G2bUc4O_Z_Zf24DhpB5X90.roa (raw, json)
Hash identifier: gDfZbQmDZFnApft/+9DaARjJvw56hlgm6dHz51ku3x0=
Subject key identifier: 30:74:DE:D0:6D:9B:51:CE:0E:FD:9F:D9:7F:6E:03:86:90:79:5F:DD
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 1964FBAE
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/MHTe0G2bUc4O_Z_Zf24DhpB5X90.roa
Signing time: Sat 01 Jan 2022 15:56:28 +0000
ROA not before: Sat 01 Jan 2022 15:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206768
IP address blocks: 185.79.212.0/24 maxlen: 24
2a01:7640:9000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426048430 (0x1964fbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Jan 1 15:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3074ded06d9b51ce0efd9fd97f6e038690795fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:29:4f:df:c5:bf:6f:ae:23:25:3f:e7:72:
f0:db:ee:7c:eb:84:85:b4:1c:90:39:23:97:3c:30:
f5:bd:2c:c1:c8:7c:1e:f4:45:1d:2a:c8:36:76:ef:
88:19:31:6b:1f:5b:10:81:33:03:36:ff:ae:c5:3e:
9e:ea:54:fd:73:46:b3:28:28:71:13:0e:29:0b:e7:
26:fb:f2:28:84:f0:4e:a3:1c:f4:7e:26:95:96:be:
03:73:1a:7c:27:6e:08:1b:f0:13:a9:26:f1:20:78:
ea:d1:76:a6:0c:87:66:cc:37:5f:e8:0f:66:8c:07:
06:9e:31:e2:04:6e:e2:ba:4a:6e:f8:33:65:1b:da:
75:a5:bb:79:49:f9:11:62:16:ad:39:1a:00:34:7d:
3e:31:0d:0a:0d:ec:15:64:2d:ac:f7:b1:de:ba:cd:
c9:4a:5f:e0:38:72:db:ca:5f:01:84:42:77:68:2e:
19:b6:5b:9f:63:8d:24:ec:17:72:16:1f:12:d0:36:
92:f1:57:72:ec:d0:7f:47:4f:e9:8c:b4:9b:08:7b:
a3:e9:1b:3c:86:96:76:48:1f:96:c7:5e:19:a3:83:
a7:3d:b2:b2:2b:6e:55:9c:9d:2e:32:72:39:7e:50:
77:09:ae:dd:a4:71:43:8e:9a:cf:46:a3:b0:71:23:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:DE:D0:6D:9B:51:CE:0E:FD:9F:D9:7F:6E:03:86:90:79:5F:DD
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/MHTe0G2bUc4O_Z_Zf24DhpB5X90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.212.0/24
IPv6:
2a01:7640:9000::/48
Signature Algorithm: sha256WithRSAEncryption
9a:2a:60:10:26:cb:c6:72:3d:7b:d0:47:df:c7:3f:7c:1d:79:
90:d2:3f:b9:71:94:c7:c7:16:a2:12:0d:31:31:2b:07:3c:ff:
16:f6:5d:8a:63:f4:b1:62:fa:01:f3:c6:c7:93:e7:53:0c:9d:
be:c4:a2:18:09:9a:88:81:7b:7f:8a:33:a0:d7:25:be:c6:ed:
be:0a:cc:6e:f7:39:6a:dc:63:5d:e7:5f:cb:70:85:c1:ab:c6:
90:e6:81:c9:0a:2a:5b:f3:47:b2:e3:eb:45:fb:55:be:54:a7:
76:4f:d6:50:81:df:a5:79:5d:b4:00:bb:34:d1:f9:7e:fc:11:
5a:b6:fd:1c:14:e4:cc:dc:7b:2b:0f:f3:fe:4b:de:35:f2:10:
ac:b7:8f:5f:21:f2:c2:98:2c:1b:8a:1e:ec:6c:46:f4:02:a7:
15:8c:52:c4:ca:f8:87:e1:31:18:c1:d8:b3:6e:93:97:98:e2:
d9:2e:1f:0a:a1:a5:4e:ac:ff:0a:a8:83:35:22:c2:f4:1b:e0:
b4:98:fb:18:4f:5a:08:69:27:fd:1a:2f:e8:02:3a:57:02:06:
4e:96:4b:dc:75:b1:94:95:55:59:6b:d4:0a:ba:ad:17:eb:ca:
06:e8:9d:0f:cd:26:84:a7:9e:a0:41:cc:73:c1:b1:36:cf:ef:
76:aa:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org