Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/mGO-nixG91uu867muBIPqKQhUHw.roa
File: mGO-nixG91uu867muBIPqKQhUHw.roa (raw, json)
Hash identifier: yPR55KgUyDZqJvxVj02v+iEPj4sUqbQK6EOwpj2AXkU=
Subject key identifier: 98:63:BE:9E:2C:46:F7:5B:AE:F3:AE:E6:B8:12:0F:A8:A4:21:50:7C
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 07A525A8
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/mGO-nixG91uu867muBIPqKQhUHw.roa
Signing time: Sat 01 Jan 2022 09:02:16 +0000
ROA not before: Sat 01 Jan 2022 09:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209365
IP address blocks: 185.206.63.0/24 maxlen: 24
185.206.62.0/24 maxlen: 24
85.208.100.0/24 maxlen: 24
85.208.103.0/24 maxlen: 24
85.208.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128263592 (0x7a525a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 1 09:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9863be9e2c46f75baef3aee6b8120fa8a421507c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:c6:70:9b:73:72:0f:de:6e:ff:be:e7:b8:
7c:55:0e:50:a3:b3:51:74:3b:d6:d6:3d:d6:71:25:
6d:49:14:c1:15:9e:8a:aa:f1:d2:2c:20:48:9c:db:
3e:3d:f1:91:61:58:7a:d8:85:fe:11:88:87:9d:16:
3c:67:47:24:f2:8a:7d:09:fe:3f:60:e3:b7:8c:b2:
0a:8e:3c:b3:f9:9f:c2:52:69:d5:84:6d:f9:55:47:
b4:80:2a:19:e2:03:ac:ec:1e:fc:e7:e6:9e:68:c2:
cb:f1:aa:3d:46:65:93:51:7c:58:62:62:0d:55:32:
9e:c4:2f:2c:24:f2:b4:b5:60:7c:3a:e1:b6:6a:04:
c2:b2:d5:a2:0e:df:cb:de:96:f5:ed:ca:c4:0f:73:
9d:92:25:06:e0:0d:23:8f:62:5c:a7:a4:fe:85:bb:
7b:11:c6:10:1a:62:2b:81:e1:e2:38:da:8f:50:3c:
f4:e8:b3:db:98:37:0d:47:67:06:82:71:45:1f:3c:
be:8e:01:7c:a6:e9:ef:9b:b1:f9:7c:4a:b4:ec:6b:
98:a8:92:7b:30:b1:67:aa:66:a2:5f:3c:f3:2c:cd:
43:88:bd:da:ea:10:0b:2a:99:47:46:21:e4:58:a3:
aa:1e:04:7e:97:f9:3a:f8:1c:51:46:11:6a:f1:f1:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:BE:9E:2C:46:F7:5B:AE:F3:AE:E6:B8:12:0F:A8:A4:21:50:7C
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/mGO-nixG91uu867muBIPqKQhUHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.100.0/23
85.208.103.0/24
185.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:01:75:68:b0:22:08:fb:a5:0c:7b:1e:5a:13:1c:7e:b6:47:
a1:28:cc:ee:c1:21:ba:50:59:3e:18:11:90:0f:33:45:21:33:
b5:e6:e0:b6:81:3f:f3:20:3c:d0:5c:ee:5c:47:1e:85:d3:b6:
f6:cd:d1:aa:41:6f:5e:67:c5:18:90:2b:da:6b:c2:ab:e1:91:
cc:fd:dd:e0:f1:dc:f5:c2:90:77:98:85:6c:5b:6d:89:24:04:
95:f9:8b:a0:1a:79:ca:4a:a0:e5:f4:4b:41:e3:36:8a:42:17:
d6:5e:6c:fc:99:26:c7:e3:00:67:44:da:a3:ae:41:08:be:94:
36:64:34:a9:e7:58:1a:be:a9:72:17:cc:43:31:ab:cc:43:8b:
f8:a4:0c:d6:ed:1a:53:a1:68:73:f9:2c:1c:76:f4:7c:c4:53:
09:24:35:93:b6:e2:35:ef:75:c1:a3:30:75:6a:b9:09:ff:62:
69:5f:6b:2b:ea:ab:07:25:2d:40:ed:59:43:8f:13:1e:38:81:
54:96:9e:c5:06:cc:cc:fc:eb:f7:71:22:0e:f1:f7:7d:ca:9b:
56:12:1b:2f:34:02:2c:46:3f:d8:01:f5:25:55:b2:50:5b:00:
65:59:84:a8:16:34:d6:0d:ed:c6:53:d3:29:e0:43:0b:56:db:
6b:79:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org