Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/MAO2GBBhbDtRbnoaNc8hECirtIk.roa
File: MAO2GBBhbDtRbnoaNc8hECirtIk.roa (raw, json)
Hash identifier: bnX34n7CgrdWGXjGKAwGMBZwniHYdrBhdp8PRWBw9bs=
Subject key identifier: 30:03:B6:18:10:61:6C:3B:51:6E:7A:1A:35:CF:21:10:28:AB:B4:89
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 07F034C2
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/MAO2GBBhbDtRbnoaNc8hECirtIk.roa
Signing time: Sat 01 Jan 2022 07:01:59 +0000
ROA not before: Sat 01 Jan 2022 07:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.102.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133182658 (0x7f034c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 1 07:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3003b61810616c3b516e7a1a35cf211028abb489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:49:11:68:11:90:58:97:f1:da:01:e7:66:
ac:bc:71:9e:ad:9f:30:7f:bd:ee:79:f5:c7:f6:c1:
0b:d6:13:65:b9:4b:b7:9b:bc:3b:61:3b:75:dc:c8:
4d:db:4e:e0:97:09:68:01:61:d2:c7:84:d2:0a:dc:
82:5e:9d:d0:c7:a0:f8:69:e2:0c:37:70:0a:87:42:
39:63:b2:b5:41:4f:b9:da:a4:e9:9d:fb:43:bb:a6:
83:81:d9:be:25:42:c0:1e:2f:c3:34:47:cb:9f:87:
49:55:28:34:da:f9:45:3b:4b:ef:32:a1:8b:d4:cc:
00:e0:71:24:63:61:3f:7f:fe:cb:fe:7f:d7:48:fa:
14:d4:f8:26:08:08:05:84:5c:3c:d8:b2:dc:a2:87:
77:7d:7d:e4:05:a0:40:a4:33:ed:0a:ae:39:e7:bc:
96:ee:65:41:36:81:9d:b9:42:4d:95:fb:30:54:cb:
01:15:8d:2c:2b:3a:2c:11:3f:8a:ea:9c:69:4b:46:
32:4c:93:66:97:b0:68:b6:f4:6d:5e:a1:09:08:f2:
e3:72:01:c6:ba:53:48:b6:f1:18:a0:63:85:ba:f7:
50:15:89:b9:d9:1e:81:53:a4:57:ee:7b:ba:6a:e7:
8c:93:56:8d:f2:28:3e:0e:13:b7:5b:00:b9:c5:ff:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:B6:18:10:61:6C:3B:51:6E:7A:1A:35:CF:21:10:28:AB:B4:89
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/MAO2GBBhbDtRbnoaNc8hECirtIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.27.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2a:6b:a2:4f:d8:23:fe:df:0c:c5:0d:3f:0a:5c:43:3d:36:
3b:60:85:56:e0:35:60:09:c0:e9:81:f8:aa:89:d6:92:14:f5:
ef:e5:fa:ce:0b:69:b6:d9:39:60:e2:0d:6d:12:d8:9e:8a:df:
4d:42:b2:9c:10:98:e0:3a:66:e5:15:0a:34:0a:2f:c9:73:56:
e4:39:30:0a:c8:a8:b1:c6:5a:a5:30:f5:40:2c:a3:64:b4:00:
c6:80:38:45:cf:8c:83:53:74:b9:ab:01:aa:d6:1a:f8:b1:71:
2c:a0:f9:89:71:5a:2d:9e:c3:9d:88:6b:2f:90:61:8f:0b:8a:
37:57:fe:1d:c0:86:79:42:96:dc:14:91:8c:49:4d:dd:01:53:
36:de:90:b7:a6:52:82:d9:c2:5b:9b:99:ec:eb:57:a8:30:4b:
2f:37:ed:2e:76:84:9e:69:06:c2:85:cf:2c:36:07:ee:6e:ba:
63:ce:e2:c5:b5:14:b4:ef:60:66:64:85:de:76:cd:0a:52:5e:
6c:8a:a1:f7:22:bc:1d:ca:db:84:7b:75:ec:d8:fe:79:10:47:
b7:2b:9e:d2:04:ea:47:62:2f:ec:fe:3e:ae:e6:a6:4c:60:5d:
4f:f0:1d:82:dd:5d:ad:e5:99:27:9d:19:05:bc:4c:66:90:1e:
67:4c:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:05 2025 by rpki-client