Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/mFcdJyv5TlbjUHd5KlzuuBZHlRQ.roa
File: mFcdJyv5TlbjUHd5KlzuuBZHlRQ.roa (raw, json)
Hash identifier: e08H2xznF6WGuZETidu21smhz4FTjML6HsprxUfQyss=
Subject key identifier: 98:57:1D:27:2B:F9:4E:56:E3:50:77:79:2A:5C:EE:B8:16:47:95:14
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0ACF3F0C
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/mFcdJyv5TlbjUHd5KlzuuBZHlRQ.roa
Signing time: Sat 01 Jan 2022 15:06:48 +0000
ROA not before: Sat 01 Jan 2022 15:06:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 134.221.0.0/16 maxlen: 16
192.43.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181354252 (0xacf3f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Jan 1 15:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98571d272bf94e56e35077792a5ceeb816479514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:4a:97:22:06:f4:91:4e:2f:31:f9:f6:9b:
db:02:30:f9:24:77:f0:fa:16:e3:0c:4d:b4:8e:ed:
80:39:ca:83:87:c6:9c:34:ad:37:17:e3:69:c0:c0:
b0:18:f5:73:c9:2e:71:ee:80:0a:7e:03:2f:f0:77:
7a:6e:ab:81:57:a9:eb:cf:38:4e:23:96:69:83:81:
ad:31:81:ac:b6:92:84:ce:2c:b8:03:ff:90:b9:ce:
48:bf:4f:b6:4a:79:97:d3:6c:5a:f9:22:f2:db:97:
e6:0c:af:e9:e2:32:8d:15:84:b9:10:ba:16:89:6d:
4b:d4:67:84:12:57:69:0d:f9:42:1a:34:98:13:d5:
7e:ae:8f:4f:e3:97:e8:d4:b8:2a:f5:57:dc:cf:af:
9d:37:ce:c9:32:d1:f8:29:70:41:06:82:d7:c0:3b:
c5:1a:ea:e5:f8:62:62:a4:87:ac:d7:bb:f7:fb:91:
b0:79:1b:78:9d:0c:ed:33:ed:79:88:97:16:d6:60:
0d:1b:b4:76:5a:53:2a:bf:8e:18:b9:8e:86:af:4e:
72:fe:7a:12:da:59:38:3b:e7:56:52:d0:98:d9:e9:
63:d2:8a:4c:7e:a5:93:0a:48:f3:45:e2:0b:c0:3e:
3d:61:25:f7:e1:fd:36:1f:e0:73:d0:a3:7a:c0:ef:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:1D:27:2B:F9:4E:56:E3:50:77:79:2A:5C:EE:B8:16:47:95:14
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/mFcdJyv5TlbjUHd5KlzuuBZHlRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.221.0.0/16
192.43.212.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8c:5b:0b:c3:12:53:fe:40:89:09:77:ad:25:24:03:ec:58:
a2:72:67:99:85:79:1b:27:f1:20:ad:b7:1a:64:f0:d7:69:ef:
d0:db:3f:0e:8d:a3:ef:02:a6:c0:13:ee:b7:94:0a:90:dc:c3:
b8:ea:83:2a:90:a0:ab:25:04:fb:55:a9:d5:06:72:69:06:ba:
6c:c8:46:19:ab:e5:cd:41:77:78:15:1a:b6:4f:60:90:c0:d6:
9d:32:62:6a:39:e9:f9:87:04:02:b4:b4:78:f8:37:67:02:a9:
51:ea:93:ee:15:1f:ba:9b:a6:be:fa:ee:62:78:3a:7e:3b:cb:
8d:21:40:a8:9e:cc:75:1a:45:28:f0:4b:41:67:35:0f:9a:94:
2b:51:2a:95:04:e4:49:6c:83:ba:31:0b:cd:cd:63:f4:99:fe:
e6:da:86:b7:59:22:a3:61:2d:63:77:52:cd:9b:02:bf:e8:c7:
42:2e:ab:e7:39:6c:5d:f5:20:d9:66:e9:89:a8:4b:9f:1b:27:
a4:dd:54:cd:76:ac:a9:73:b8:ae:20:4a:de:cb:4d:e0:ef:0b:
a9:8d:11:2d:9a:af:cf:70:4d:dd:63:d9:99:74:d5:35:d3:c6:
48:32:eb:ed:bd:d0:cd:72:35:30:c0:8f:0f:95:6d:3d:36:0c:
9f:8c:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:08 2024 by rpki-client on console-fra.rpki-client.org