Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/MZ2Bc59SN5d4muFudgHcRNQewh0.roa
File: MZ2Bc59SN5d4muFudgHcRNQewh0.roa (raw, json)
Hash identifier: vWCAGKf5qYteJ96LITLj14tBsEVq9z1eGzXcDj7WR4s=
Subject key identifier: 31:9D:81:73:9F:52:37:97:78:9A:E1:6E:76:01:DC:44:D4:1E:C2:1D
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 600C0E
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/MZ2Bc59SN5d4muFudgHcRNQewh0.roa
Signing time: Fri 18 Mar 2022 19:41:16 +0000
ROA not before: Fri 18 Mar 2022 19:41:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.191.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6294542 (0x600c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Mar 18 19:41:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=319d81739f523797789ae16e7601dc44d41ec21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:af:2f:a2:b3:f0:79:13:70:f5:bc:61:c2:
2a:44:ea:3b:7c:1a:13:85:ef:8f:cd:fa:80:c2:66:
b4:94:5b:89:55:ef:08:4e:65:37:80:77:be:e0:12:
41:d1:eb:5b:97:1a:b6:af:25:10:f0:7c:ce:5a:f6:
9c:e3:7a:f7:52:d0:84:6c:03:b9:43:c8:c6:ee:42:
f8:5b:2f:b1:45:de:94:b9:28:ce:af:72:ec:08:2f:
fa:11:b0:86:ca:a1:16:cb:78:76:50:a7:0a:13:da:
8e:8f:69:3c:9e:97:4a:13:68:f1:51:97:f1:1c:cf:
e9:e1:9f:f8:cc:ca:8a:35:67:99:99:22:58:7a:3c:
82:3e:bc:85:d2:c6:6d:41:d5:bb:bd:ff:c1:b5:58:
da:28:d7:7d:a1:3d:52:ee:fd:7a:3c:06:ff:62:a7:
ab:8a:e7:3c:2a:78:c0:8d:52:74:21:8a:f4:67:a4:
6d:86:75:7b:3c:58:4e:ac:b9:86:29:2b:4c:2b:22:
10:ec:fe:9f:e8:db:ef:68:74:63:b7:64:88:70:9c:
8d:89:90:1a:c1:24:5c:56:ee:5e:35:78:e5:a8:ac:
76:82:bb:d9:f4:67:bc:20:6b:3e:78:77:6b:7c:2e:
b1:bc:d9:24:28:5e:6a:1d:cb:09:82:e1:57:c7:22:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9D:81:73:9F:52:37:97:78:9A:E1:6E:76:01:DC:44:D4:1E:C2:1D
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/MZ2Bc59SN5d4muFudgHcRNQewh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
47:42:e5:bc:f7:7d:58:d0:15:1a:d7:63:7b:76:2c:5a:42:65:
6c:99:bd:3c:fb:52:bb:0d:1f:3d:d0:7f:56:78:0c:52:25:dc:
77:b0:61:14:f4:b7:30:e6:5a:07:d2:a9:42:37:8e:3d:66:2c:
42:29:30:e6:d2:e5:cd:c7:35:e8:2b:5b:0a:64:8e:12:2d:a8:
76:8a:58:f9:ad:f5:a7:54:b5:a7:3e:b9:70:5d:fd:47:90:11:
e6:b3:36:51:16:03:06:83:2b:0b:a4:37:54:e1:c8:10:77:a3:
c6:69:c2:4d:d1:6b:7d:2c:26:4b:02:2a:95:4b:4e:33:ee:bd:
2c:33:d9:6e:9e:4e:ec:80:75:07:0f:83:aa:6b:10:2f:a6:31:
33:a9:dd:58:8e:f1:56:ef:98:58:89:51:1b:7a:d7:5b:f7:fb:
6a:db:34:0f:80:4b:b8:ff:8d:9e:e5:e4:b8:22:40:41:bc:c1:
6f:f9:78:34:c4:64:aa:6f:c2:f6:11:23:56:16:f3:65:87:fc:
59:a3:0d:c5:fa:5d:c8:fd:2c:91:36:6a:31:78:56:3f:1a:70:
6c:f4:8c:50:f2:91:10:1c:77:5f:e2:0d:74:f4:94:b6:5a:e8:
c2:fc:05:5a:e0:bf:5b:3d:7b:89:21:8e:1a:2c:22:c9:6c:0a:
ff:7c:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:23 2025 by rpki-client