Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/M0reT3n1syPGSANd5VEg1cPH8Yk.roa
File: M0reT3n1syPGSANd5VEg1cPH8Yk.roa (raw, json)
Hash identifier: il6NiQTyTuswaoB5xF6a0GGYXXma18hUEvKZbyzIZgo=
Subject key identifier: 33:4A:DE:4F:79:F5:B3:23:C6:48:03:5D:E5:51:20:D5:C3:C7:F1:89
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: A6EEA8
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/M0reT3n1syPGSANd5VEg1cPH8Yk.roa
Signing time: Sat 01 Jan 2022 01:03:12 +0000
ROA not before: Sat 01 Jan 2022 01:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42334
IP address blocks: 185.236.205.0/24 maxlen: 24
185.236.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10940072 (0xa6eea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jan 1 01:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=334ade4f79f5b323c648035de55120d5c3c7f189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:f2:c4:f3:cd:59:4c:90:8f:80:13:7a:99:
e9:9e:de:89:51:77:24:f3:ce:69:fa:73:ed:55:fc:
55:23:b4:dc:7f:01:1d:db:32:7c:ed:11:c4:02:8d:
0f:40:de:09:cb:e1:4e:54:29:e7:d9:56:f5:0f:f8:
d5:5b:9e:e9:71:7b:9f:35:df:88:da:46:d0:c3:df:
49:d4:69:7c:c1:09:29:6a:af:dd:42:81:6b:65:72:
6e:6c:f5:f7:69:f9:5d:7f:97:71:3e:98:d1:6c:21:
6e:d3:d4:3f:32:8b:c1:4e:84:3e:16:73:72:79:f8:
3e:72:ab:fe:35:8f:92:39:25:ff:ac:61:1f:77:71:
f9:ae:67:32:7b:06:f2:57:d2:e4:6b:23:89:15:fb:
ce:4b:a5:b4:d2:97:c8:ed:34:56:17:c2:bc:6f:27:
65:24:dc:7a:71:38:9b:88:9c:0b:c7:73:13:1a:56:
7d:04:a7:ea:07:fa:41:20:92:38:60:85:65:0c:0f:
b1:48:0c:02:42:31:e8:63:d6:2c:a7:72:43:4a:a4:
73:2d:f1:37:72:71:8d:88:2b:c8:15:75:77:22:2b:
32:78:28:2d:66:68:4d:4c:a8:2f:f9:4a:2e:9f:05:
6b:5f:49:95:63:3d:f8:f8:6c:83:45:2e:bf:b4:0a:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:DE:4F:79:F5:B3:23:C6:48:03:5D:E5:51:20:D5:C3:C7:F1:89
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/M0reT3n1syPGSANd5VEg1cPH8Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:a5:bc:a6:92:39:43:82:9b:93:99:14:bd:92:ec:19:69:a1:
4a:b4:58:04:a8:6d:a4:9c:04:b1:67:38:e3:04:a4:43:6b:19:
23:8d:f4:ac:ed:ed:91:93:61:36:e3:1d:d8:3a:58:cd:4f:05:
3f:b2:a8:ee:fa:42:47:4b:bc:61:04:66:09:0b:b6:e2:0a:5d:
bc:7c:10:b8:69:f7:e7:5d:7d:ca:b9:40:42:05:ed:ef:74:50:
51:1e:2e:30:bb:d2:16:80:08:fb:50:7e:f7:4c:75:a9:c9:6b:
db:eb:ef:ea:b9:e6:a6:68:d3:e6:c6:a4:13:4a:c4:da:34:bb:
fb:a5:15:5c:f7:74:b5:98:86:24:6b:48:ef:0e:9c:5f:8d:6d:
e2:6d:c0:2b:e4:5a:12:eb:30:33:a5:ba:89:c9:6e:ff:d4:43:
38:40:48:c9:48:6a:d6:5e:b3:75:ee:eb:58:c6:ec:6f:29:0c:
0f:95:a1:2b:82:c5:e7:de:a6:83:41:cb:df:db:dc:cd:df:7c:
01:51:86:4c:1f:f5:a5:a6:94:9f:61:df:96:28:ba:87:60:af:
fc:7c:6c:2d:e7:c0:1d:3d:dd:06:9c:6d:9b:11:2d:2d:1a:d8:
9f:f7:3d:76:9d:b4:ed:67:80:4d:ea:18:a5:cf:47:b7:7a:a1:
ca:24:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:48 2023 by rpki-client on console.sobornost.net