Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mksJXax4NYgSDPM3F-m-BI28_eI.roa
File: mksJXax4NYgSDPM3F-m-BI28_eI.roa (raw, json)
Hash identifier: Ufa0VTSdun8dXcqud9ncgcJ8A4AB4ToUjAm4Z/NRxUQ=
Subject key identifier: 9A:4B:09:5D:AC:78:35:88:12:0C:F3:37:17:E9:BE:04:8D:BC:FD:E2
Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411
Certificate serial: 01851AC76C47014792D968AED0843933ED4B
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mksJXax4NYgSDPM3F-m-BI28_eI.roa
Signing time: Fri 16 Dec 2022 11:52:35 +0000
ROA not before: Fri 16 Dec 2022 11:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206643
IP address blocks: 185.180.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:c7:6c:47:01:47:92:d9:68:ae:d0:84:39:33:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915558c6897fea224855cf60381857354708411
Validity
Not Before: Dec 16 11:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a4b095dac783588120cf33717e9be048dbcfde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:ff:75:ca:96:52:ae:bb:ba:23:0f:5a:63:
ca:7f:2d:b0:39:9b:7c:02:95:e9:95:c2:3f:ac:9b:
97:40:40:12:c3:e8:e1:20:f6:e0:0c:98:7d:07:52:
0c:c6:8a:c0:2e:7c:de:c9:23:14:34:ac:7c:6b:d7:
e4:46:9e:9f:10:c9:c2:32:83:b2:47:a4:6b:00:e7:
9a:cb:07:33:0c:56:04:30:3c:ee:f1:20:bf:0f:d8:
43:c0:82:98:58:b9:80:42:fb:69:49:61:2c:40:43:
60:c1:ea:41:05:ae:3c:6d:1c:b0:19:07:0b:7d:93:
b9:8f:4e:79:63:5a:36:55:b8:df:88:83:df:c9:92:
15:be:c7:f2:da:57:15:2b:66:1d:78:8c:a3:14:20:
62:dd:5a:53:b8:e9:80:a2:a3:b1:98:79:97:4b:4f:
69:5d:1e:8f:dc:48:84:8f:65:96:5a:23:80:2a:2d:
b2:2f:70:69:15:41:65:ad:7e:1a:cb:2b:80:b8:af:
2d:6e:73:79:42:eb:c1:63:49:1c:a2:a2:b1:28:c7:
43:81:0a:34:4f:99:d7:31:8f:ba:73:e4:94:bf:bc:
d4:d5:3c:d1:7e:41:52:4d:c4:1a:2a:14:b6:bb:b3:
0b:d8:ae:aa:bc:0d:d8:92:7a:24:7b:90:e0:f8:30:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:09:5D:AC:78:35:88:12:0C:F3:37:17:E9:BE:04:8D:BC:FD:E2
X509v3 Authority Key Identifier:
keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mksJXax4NYgSDPM3F-m-BI28_eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.104.0/22
Signature Algorithm: sha256WithRSAEncryption
60:fd:c7:63:67:a3:b5:82:e6:48:7d:1d:56:25:0c:6c:4c:9d:
9c:8c:f2:d0:b2:ee:63:38:08:55:79:f9:f6:d6:97:80:e9:d6:
be:3c:aa:d3:bc:40:0b:ce:ed:cd:18:ad:67:76:88:10:8b:bf:
13:70:77:f1:f7:8e:0a:b5:68:97:f5:a2:44:6c:3a:cc:bb:93:
3f:38:13:ce:6c:d4:cd:de:a5:e8:9d:35:78:a9:c2:93:93:e1:
af:0d:86:fd:c3:5a:9a:9b:c0:bd:fb:3d:98:61:62:24:80:be:
13:21:e2:2c:d5:ca:3e:5a:e7:4a:0b:9e:7d:61:eb:2c:b9:7b:
34:0b:11:c3:57:10:37:46:d6:b8:9c:11:ac:b6:2f:d1:80:b1:
d7:5c:8d:04:66:63:61:cf:75:ae:3b:06:aa:73:33:33:e2:19:
5a:8c:61:4f:e0:49:5b:bc:bf:f5:e3:95:8c:52:37:ca:e9:39:
7a:06:d0:db:0a:f8:46:a9:0a:e9:74:a5:3f:b0:e1:06:a1:db:
7e:e3:05:1f:06:93:b3:76:c9:5f:49:68:8d:33:a5:dc:26:3e:
c8:54:0e:8d:80:25:0d:4b:da:a2:0d:b2:9b:18:51:fd:82:1a:
69:aa:a9:7c:7c:79:4e:04:1f:81:74:5d:cb:7c:e8:99:07:36:
be:6e:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org