Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/MDIgfqQAsV1Ke8d-VlpmvtZKaQA.roa
File: MDIgfqQAsV1Ke8d-VlpmvtZKaQA.roa (raw, json)
Hash identifier: +jvxiD8MHzl6E1dAhMTDM9fIeL3cUeTQ0zQzXMonW/c=
Subject key identifier: 30:32:20:7E:A4:00:B1:5D:4A:7B:C7:7E:56:5A:66:BE:D6:4A:69:00
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 08BBDAA0
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/MDIgfqQAsV1Ke8d-VlpmvtZKaQA.roa
Signing time: Sat 01 Jan 2022 12:59:52 +0000
ROA not before: Sat 01 Jan 2022 12:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25234
IP address blocks: 213.188.152.0/22 maxlen: 22
185.71.159.0/24 maxlen: 24
2a02:250:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146528928 (0x8bbdaa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 1 12:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3032207ea400b15d4a7bc77e565a66bed64a6900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:42:94:7c:ca:e7:8e:7d:ef:65:d5:61:69:
99:1e:f2:a5:b0:5d:4a:58:6a:75:b9:80:6f:b9:fc:
2b:17:ec:d9:8e:22:72:62:22:7f:3a:bd:5c:4e:d2:
91:6f:3c:8f:40:f3:1d:af:76:21:91:75:be:53:8a:
ba:06:3e:e6:37:9e:4a:32:82:f8:02:93:06:8a:da:
35:14:3a:d3:a9:88:bf:22:9f:5a:dd:0d:86:a9:50:
6c:39:5a:6b:c2:15:c4:14:19:54:44:1f:61:1d:8c:
89:bb:e0:f1:bf:3c:3f:66:43:7c:eb:82:15:49:48:
72:4b:06:6c:79:69:b0:1b:1b:36:38:ae:83:c0:be:
f3:5c:73:06:d9:ee:83:22:3e:a7:16:7e:e0:cc:ea:
a6:7e:af:8e:6d:a1:44:0b:70:a4:ee:56:85:70:e7:
b1:fc:4c:2c:57:a6:63:e1:9c:59:c8:77:78:a5:f6:
12:1b:4a:8f:17:5c:bf:3b:01:ee:d9:bf:29:7c:a7:
a2:4f:27:7b:4a:7e:71:96:4d:a3:14:ac:93:31:0d:
1a:55:f9:19:69:c5:4b:de:73:35:78:95:5e:eb:8b:
72:9a:89:e6:1f:97:f4:46:52:6a:90:65:c7:93:65:
95:f3:3c:2a:9d:3e:78:0b:c2:cd:46:9e:c0:9e:b1:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:20:7E:A4:00:B1:5D:4A:7B:C7:7E:56:5A:66:BE:D6:4A:69:00
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/MDIgfqQAsV1Ke8d-VlpmvtZKaQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.159.0/24
213.188.152.0/22
IPv6:
2a02:250:3::/48
Signature Algorithm: sha256WithRSAEncryption
65:d2:8f:23:a6:3c:07:02:b5:af:f8:da:d0:a1:cd:8e:d5:0d:
6d:bf:a5:35:d6:52:00:0b:86:d4:d4:36:33:e0:8b:8c:4c:84:
82:0e:ba:13:03:c6:b8:1d:53:d4:b1:45:63:d4:50:25:b7:c1:
9f:21:da:b4:7b:36:ba:4b:69:37:90:7a:3b:4c:5d:bb:01:8a:
e6:42:20:ac:0b:68:f8:82:fc:c7:db:d7:14:e0:e5:33:56:58:
16:2a:00:dd:27:01:5f:2e:20:ac:fe:b8:9a:8c:51:9d:de:a1:
cc:88:7b:1d:e0:1d:1a:14:bc:db:76:cd:3f:b1:ee:fe:93:66:
2a:c7:28:87:fe:dd:45:91:d0:46:0c:c0:df:43:92:6a:bc:d6:
4b:c2:85:19:10:60:02:7a:eb:95:97:60:6c:40:d7:e8:25:98:
25:c7:71:f3:0f:e9:b1:40:73:a2:16:07:77:5c:bf:24:41:2f:
d5:ec:27:16:93:8d:f5:ef:79:2f:66:39:db:6e:cd:5e:0e:c1:
0a:ba:b2:d7:70:e1:33:70:b1:18:a7:dc:55:56:45:45:e2:ed:
2d:e7:e5:50:95:73:b5:e2:ce:92:bf:de:83:53:e8:75:02:ec:
d1:a3:53:9b:cf:78:3a:17:3d:5b:ee:32:05:4d:06:b5:5a:c3:
d9:2f:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org