Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mJcysEmZkYNgmuThcsswWtaxaqk.roa
File: mJcysEmZkYNgmuThcsswWtaxaqk.roa (raw, json)
Hash identifier: xTxldpg/P13ORnCGRRXiKQI6Hh0Ok0pzmbP/EelJUD8=
Subject key identifier: 98:97:32:B0:49:99:91:83:60:9A:E4:E1:72:CB:30:5A:D6:B1:6A:A9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0184619152139EE901D901D072B741448965
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mJcysEmZkYNgmuThcsswWtaxaqk.roa
Signing time: Thu 10 Nov 2022 12:43:44 +0000
ROA not before: Thu 10 Nov 2022 12:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:91:52:13:9e:e9:01:d9:01:d0:72:b7:41:44:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 10 12:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=989732b049999183609ae4e172cb305ad6b16aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ce:04:87:f8:8f:15:a7:7d:ab:67:f3:88:4b:
70:8f:4e:cf:54:87:c1:5c:c8:0e:34:9b:58:37:6b:
1b:2a:77:82:52:1d:d2:8a:c4:39:50:c7:3b:02:b1:
28:d0:c5:8d:c9:bd:f2:33:9f:6c:cd:53:a3:6b:a5:
b0:76:4a:86:c4:c4:ea:4f:e8:52:9f:2b:2e:f1:61:
e1:91:95:b3:11:e1:d5:c2:8f:53:b3:77:b9:94:4a:
a4:0d:dc:3c:f0:87:41:8b:52:03:a2:8b:38:31:e8:
81:51:f2:44:ff:a5:24:8e:85:39:11:cc:8e:93:d1:
c3:f1:f9:0c:92:1e:30:d8:be:63:fd:c2:40:d0:29:
e6:53:4f:eb:46:90:c3:5d:a3:3c:0a:53:c9:cd:3b:
45:6c:e9:e1:2f:5b:4c:fc:e1:a3:5b:b7:6f:18:39:
ed:cd:2e:38:58:f7:38:44:f4:4c:9d:73:d3:04:46:
10:a0:6e:71:a1:30:fe:0f:f9:52:0c:8b:16:46:9f:
9f:f0:3c:7d:2a:f0:00:4e:a6:db:66:49:25:8b:a3:
4f:97:c0:b5:b5:90:f8:c1:7c:57:41:58:85:bc:03:
51:bb:91:55:f7:cd:85:2e:86:f4:6a:65:e0:3e:56:
d6:b9:04:d9:d9:05:e0:d2:73:56:4d:2a:dd:ca:63:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:97:32:B0:49:99:91:83:60:9A:E4:E1:72:CB:30:5A:D6:B1:6A:A9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mJcysEmZkYNgmuThcsswWtaxaqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.201.0/24
92.52.214.0/24
178.210.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d6:65:eb:49:11:b5:6a:b7:51:6f:3e:03:e8:3b:6e:ea:b8:
2a:5c:b2:54:47:88:e1:a2:b1:fd:e2:7a:70:7c:74:2c:73:14:
dd:75:b9:98:bd:d0:8a:28:67:31:7b:83:7b:cb:a5:4d:2c:db:
4c:4d:fe:c5:44:e1:75:40:f0:fe:09:fe:0b:03:2d:31:9e:c8:
9d:b6:f3:36:04:65:9c:f6:7d:38:c7:55:03:b5:02:cd:a0:2d:
24:ff:b6:56:43:af:2c:aa:2a:aa:fa:fb:ef:b1:e6:9f:61:68:
e9:da:83:b4:a6:1e:e0:ef:90:7c:11:20:6d:13:b4:34:c9:30:
df:2d:f8:47:ef:38:45:dd:6a:0e:fa:8f:d3:c0:5f:a3:8b:50:
1c:4d:cf:90:1c:98:8b:94:f2:15:46:a1:f0:4c:7e:ed:d9:0c:
91:0b:47:2e:c7:f2:6d:7d:27:ee:00:92:e5:ef:9d:e8:6e:17:
14:6c:5b:81:5a:27:85:ed:3b:01:c3:52:78:e7:98:74:78:2a:
fc:ac:6d:53:61:3e:ea:16:cb:c0:ff:5c:d0:d1:99:4d:3e:a3:
72:4f:3e:25:bd:0a:c6:c7:46:a7:7a:f1:99:1b:aa:a2:99:af:
1f:de:d1:62:27:f0:de:f9:37:f8:f3:39:11:14:be:1e:61:61:
7f:66:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org