Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/MHndXb28TbaPLpXwZ_zQdgD9jro.roa
File: MHndXb28TbaPLpXwZ_zQdgD9jro.roa (raw, json)
Hash identifier: BPxHovteghpWSuTBjw623nRERQ+BFW4SA3ITFZXTWyM=
Subject key identifier: 30:79:DD:5D:BD:BC:4D:B6:8F:2E:95:F0:67:FC:D0:76:00:FD:8E:BA
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0A8DE333
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/MHndXb28TbaPLpXwZ_zQdgD9jro.roa
Signing time: Sat 01 Jan 2022 16:05:31 +0000
ROA not before: Sat 01 Jan 2022 16:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43541
IP address blocks: 185.196.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177070899 (0xa8de333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 1 16:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3079dd5dbdbc4db68f2e95f067fcd07600fd8eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:db:15:8d:ee:92:85:05:23:bc:e1:60:8d:
5f:9c:ae:1a:01:00:ff:f1:e2:81:50:cf:df:a5:e3:
b1:12:f5:5a:67:4d:34:6c:ea:46:10:4c:d6:09:a5:
4e:a1:6c:12:51:3e:a0:51:65:d2:03:35:7e:1d:6a:
51:e2:16:30:41:24:c9:d5:68:37:c8:04:11:17:01:
7c:14:d5:28:39:ac:ff:5a:6f:89:9c:b7:91:36:26:
f3:a8:fa:56:b5:24:94:78:db:21:9c:ee:e6:a4:31:
a5:bb:5f:5b:d0:d9:d2:0c:f1:c9:9d:58:54:9a:1b:
32:a1:6c:dc:83:cd:c9:a8:59:bf:4a:83:76:bd:1c:
9c:14:2f:f2:6a:b3:36:c5:6b:3c:fb:de:7c:1c:05:
c2:76:5f:e3:bf:53:cd:95:44:0b:1c:71:a0:da:20:
03:ea:9c:06:c8:d1:d5:86:70:a8:33:5a:1b:76:22:
34:b9:04:c7:0c:0e:de:5d:4f:c7:15:04:30:a8:f2:
cb:9e:63:71:4e:49:07:54:c5:19:67:d7:4c:bd:84:
d8:9b:b2:b7:93:16:ef:3f:3b:30:fb:6b:83:30:9e:
28:2e:da:78:7c:36:e8:50:64:cd:73:dc:17:68:1e:
e4:5c:36:89:1c:2d:ad:d3:64:e8:a1:61:15:c6:d8:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:DD:5D:BD:BC:4D:B6:8F:2E:95:F0:67:FC:D0:76:00:FD:8E:BA
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/MHndXb28TbaPLpXwZ_zQdgD9jro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:90:ba:5a:5c:d1:33:5b:79:c2:46:ba:a3:6d:d9:7f:89:37:
79:2c:84:1a:ab:e8:c5:3e:31:35:b4:e7:09:92:97:5e:e7:4f:
d3:d5:62:f6:2f:c4:65:00:53:92:57:23:b6:c0:15:b4:f8:ea:
49:99:f4:55:67:93:23:d3:2b:be:cd:6d:3f:93:da:bc:8a:fb:
b6:52:0b:2a:a7:c7:92:0f:bc:19:4f:c8:f1:1a:13:53:55:45:
48:7f:83:03:c2:91:18:49:51:d6:c1:6a:58:fd:7a:cd:7a:fb:
3b:7f:01:90:02:70:c8:3d:b5:62:b1:f8:21:ef:8a:4b:1c:d6:
0d:d1:9d:63:7f:77:41:27:f9:be:c8:b8:17:20:18:76:b1:ff:
26:a9:68:56:4e:6f:b5:54:8f:c8:1e:11:30:8a:02:e2:f7:96:
64:0b:88:4f:7f:b6:4a:7a:b6:bb:44:06:69:3c:c8:85:3e:12:
32:83:2c:92:d9:51:d1:b1:6c:9d:a6:8d:74:d3:ba:62:fe:1e:
ac:4e:4d:ae:6d:ce:c3:b3:2a:53:c2:73:56:8e:1c:45:34:cd:
49:23:e6:2c:c1:c5:a7:f2:b3:13:a8:dc:25:9a:b2:53:d9:8a:
3c:67:9b:f2:08:20:01:d2:27:9b:45:78:04:2f:6d:da:f2:57:
47:46:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:16 2023 by rpki-client on console-ams.rpki-client.org