Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/mbomFhTSEs19zql6AiQhW_W4skI.roa
File: mbomFhTSEs19zql6AiQhW_W4skI.roa (raw, json)
Hash identifier: T8MIm6Iyi7bPweWczZwd2AYkn0LGBLMyDicMzXtWcM0=
Subject key identifier: 99:BA:26:16:14:D2:12:CD:7D:CE:A9:7A:02:24:21:5B:F5:B8:B2:42
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0D79651A
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/mbomFhTSEs19zql6AiQhW_W4skI.roa
Signing time: Sat 01 Jan 2022 10:57:26 +0000
ROA not before: Sat 01 Jan 2022 10:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 185.76.124.0/22 maxlen: 24
185.126.56.0/22 maxlen: 24
185.210.120.0/22 maxlen: 24
2a0b:56c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226059546 (0xd79651a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jan 1 10:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99ba261614d212cd7dcea97a0224215bf5b8b242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:f7:f0:5c:b1:c5:0f:97:56:a7:8b:68:70:
4c:3e:cd:e1:7f:24:35:29:c3:11:e1:2c:0c:18:d4:
e7:85:5f:ef:3f:fc:e4:ca:28:b1:21:31:e1:8f:08:
55:60:c8:41:d1:84:64:58:31:11:cf:02:32:cb:83:
49:59:3f:41:a6:b3:89:53:39:16:64:e8:b5:9a:f0:
06:10:31:7e:b3:c7:55:0e:77:15:5b:38:c7:bf:8b:
cc:7b:d9:c9:79:c2:fc:f6:17:22:b8:e1:25:fe:60:
11:31:7f:d6:88:e0:d9:a9:76:00:b6:00:fc:e5:fe:
84:b0:67:a4:27:28:ea:4b:90:6b:25:d7:f5:31:5f:
4f:c5:7e:88:42:91:36:b6:c1:23:8f:b7:03:42:61:
5d:90:85:16:78:d9:88:36:e4:b1:32:f3:c2:17:8e:
f5:73:b2:14:7d:fa:de:3f:e0:2e:aa:f4:31:8f:27:
9d:1d:88:16:df:ec:4e:e3:63:a1:a5:19:17:3e:02:
45:32:f4:9b:75:83:ed:e0:b9:0f:f3:53:0e:b9:e0:
31:2b:19:d7:07:8d:0c:9e:28:c5:53:bd:56:7d:d7:
5f:71:19:c6:40:30:3b:2d:21:99:25:c9:6e:6c:ef:
21:14:ae:76:80:46:f3:3f:d3:30:23:f9:95:cd:1f:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:26:16:14:D2:12:CD:7D:CE:A9:7A:02:24:21:5B:F5:B8:B2:42
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/mbomFhTSEs19zql6AiQhW_W4skI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.124.0/22
185.126.56.0/22
185.210.120.0/22
IPv6:
2a0b:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:61:4f:a2:fa:b2:61:52:87:b7:2b:41:b5:fe:d3:27:fd:51:
07:90:39:92:1a:a7:68:84:29:2c:3a:c7:a7:a5:cb:3f:b3:f7:
61:1a:a1:db:89:1b:e3:22:2c:fa:7f:ea:57:a4:d8:74:d1:b7:
8f:fe:08:f6:fd:48:08:b5:07:d3:5b:ca:cd:d9:3b:ab:f0:60:
bf:2a:e6:ae:36:19:1c:1e:ed:db:a7:42:32:ab:11:10:05:ee:
6d:8d:e0:82:23:4c:be:cd:81:07:bb:91:47:79:3a:cd:ae:6e:
d2:0f:f8:15:71:80:d0:7b:f7:04:49:25:de:87:f4:ad:6a:a5:
a9:79:4e:0f:aa:a6:42:e4:34:e0:28:be:9c:7b:df:29:43:86:
cb:80:8c:83:10:ea:07:84:a4:65:53:a9:86:0e:e2:5f:ea:4d:
6c:14:98:00:2c:91:de:f0:7e:97:06:99:60:e3:eb:dc:49:e8:
3e:4e:6a:35:18:f1:3a:e3:e6:9c:22:93:02:ba:4d:cf:ed:c8:
67:a9:3d:ae:de:c8:bb:fc:22:e1:78:2c:75:8e:71:af:1b:6f:
20:bc:68:d5:39:4b:62:66:08:d0:78:4a:da:8f:02:45:c1:f9:
28:15:fa:b0:b0:e6:15:00:ed:15:75:b1:17:48:3f:94:03:d8:
c3:88:11:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:41 2024 by rpki-client on console-fra.rpki-client.org