Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/MsuLaoGS2vq2SL7FXvTHUZQmDlQ.roa
File: MsuLaoGS2vq2SL7FXvTHUZQmDlQ.roa (raw, json)
Hash identifier: 9Juix8JoAWuM92qpjoc8+czH+dIjuqKvsq94DFAkFh4=
Subject key identifier: 32:CB:8B:6A:81:92:DA:FA:B6:48:BE:C5:5E:F4:C7:51:94:26:0E:54
Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial: 01CD94AC
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/MsuLaoGS2vq2SL7FXvTHUZQmDlQ.roa
Signing time: Sun 02 Jan 2022 19:37:19 +0000
ROA not before: Sun 02 Jan 2022 19:37:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39020
IP address blocks: 185.120.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30250156 (0x1cd94ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
Validity
Not Before: Jan 2 19:37:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32cb8b6a8192dafab648bec55ef4c75194260e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:95:71:77:fe:be:aa:96:98:ab:92:81:0f:
af:80:0e:d2:bc:6b:29:dc:b5:06:f1:ca:1a:23:a9:
41:70:4e:e3:81:76:16:e5:67:0f:92:83:7e:d2:11:
28:72:e0:1c:39:aa:68:0d:68:59:fb:97:35:98:43:
fd:0c:9c:dc:d9:df:18:3a:6f:6d:50:a0:19:fb:89:
d5:8e:a3:0f:a5:5b:c9:1b:77:8d:8a:1b:54:33:b2:
50:28:a8:9a:12:6f:57:bf:93:e7:37:dd:15:43:47:
04:ab:82:9c:76:a3:92:48:5a:3a:46:99:54:f5:dc:
28:66:c0:69:6c:00:64:15:97:0b:77:a2:8f:e1:0f:
ea:3a:d0:1e:e9:6b:b0:fe:3c:3f:6b:73:cc:a7:8b:
4d:96:2a:8f:72:35:a3:c6:f3:38:76:1d:84:c5:d2:
96:08:ac:ab:d0:03:0d:7f:03:b9:f3:ec:c6:83:19:
0b:14:41:a9:b2:46:89:fb:ec:30:5b:5f:e2:00:a5:
58:54:0d:50:ba:fc:fd:2a:ec:32:ed:9f:64:84:31:
12:3a:88:33:df:34:fe:48:98:11:70:a0:ad:12:b0:
96:de:fb:4a:61:8d:73:9b:b7:5f:73:4f:26:13:8e:
fc:b7:93:df:87:5a:f0:71:d6:29:37:ad:25:a2:fa:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:8B:6A:81:92:DA:FA:B6:48:BE:C5:5E:F4:C7:51:94:26:0E:54
X509v3 Authority Key Identifier:
keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/MsuLaoGS2vq2SL7FXvTHUZQmDlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c9:fa:9d:03:cd:4c:28:48:d3:d4:bf:67:05:6b:e1:99:bf:
bb:4d:f5:9a:9f:ad:3e:f1:5d:ba:0a:2c:e7:b0:4b:c7:ac:ee:
83:f3:2b:ff:7c:99:03:f1:2d:a3:3b:ab:f7:7d:b1:2b:f0:e4:
37:d4:66:87:b9:a9:29:8f:5e:62:92:28:aa:93:01:a5:de:da:
b9:17:f1:c8:55:79:c3:bd:fc:63:17:9e:c4:bb:5b:aa:41:2c:
6a:95:d7:b3:eb:f9:71:76:d7:14:a5:e2:f8:96:9d:5f:31:47:
12:f5:9b:39:dd:c8:ff:29:8d:f0:11:8f:7e:c3:79:76:ff:41:
ba:21:33:cd:08:9f:27:d3:a9:b6:8b:15:4f:42:07:28:94:05:
dc:35:49:cd:53:3b:9e:58:3f:f0:bc:a8:fa:4a:17:b0:24:e0:
ce:72:d0:a1:67:26:bb:4f:80:52:54:fb:3f:fb:1d:0a:00:1f:
73:96:53:67:91:1e:d7:83:58:37:a7:ce:e2:94:30:94:91:89:
3a:91:0d:39:d0:4a:83:5f:c5:df:65:cf:55:53:6e:04:7e:74:
04:ed:bb:21:ed:06:7c:85:a1:16:01:b9:17:38:1a:a8:4f:1b:
6b:bb:5b:67:09:7a:52:0a:9e:fe:ef:a4:5a:1d:a3:96:62:bd:
91:cc:af:95
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAc2UrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
N2M3NTQ0ZThiNDgyZDIzMTE5MDM3MDZlZWQ3MjQwNDlmZTM4NWJmMB4XDTIyMDEw
MjE5MzcxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJjYjhiNmE4MTky
ZGFmYWI2NDhiZWM1NWVmNGM3NTE5NDI2MGU1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKWwlXF3/r6qlpirkoEPr4AO0rxrKdy1BvHKGiOpQXBO44F2
FuVnD5KDftIRKHLgHDmqaA1oWfuXNZhD/Qyc3NnfGDpvbVCgGfuJ1Y6jD6VbyRt3
jYobVDOyUCiomhJvV7+T5zfdFUNHBKuCnHajkkhaOkaZVPXcKGbAaWwAZBWXC3ei
j+EP6jrQHulrsP48P2tzzKeLTZYqj3I1o8bzOHYdhMXSlgisq9ADDX8DufPsxoMZ
CxRBqbJGifvsMFtf4gClWFQNULr8/SrsMu2fZIQxEjqIM980/kiYEXCgrRKwlt77
SmGNc5u3X3NPJhOO/LeT34da8HHWKTetJaL6ZnUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQyy4tqgZLa+rZIvsVe9MdRlCYOVDAfBgNVHSMEGDAWgBSnx1ROi0gtIxGQ
Nwbu1yQEn+OFvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3A4ZFVUb3RJTFNNUmtEY0c3dGNrQkpfamhiOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvMmQ1OTYwLWM2NmQtNDJkZi05NWQyLTQwNTI0NTBjOTBhOS8x
L01zdUxhb0dTMnZxMlNMN0ZYdlRIVVpRbURsUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
MmQ1OTYwLWM2NmQtNDJkZi05NWQyLTQwNTI0NTBjOTBhOS8xL3A4ZFVUb3RJTFNN
UmtEY0c3dGNrQkpfamhiOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALl4tjANBgkqhkiG9w0BAQsFAAOC
AQEAO8n6nQPNTChI09S/ZwVr4Zm/u031mp+tPvFdugos57BLx6zug/Mr/3yZA/Et
ozur932xK/DkN9Rmh7mpKY9eYpIoqpMBpd7auRfxyFV5w738YxeexLtbqkEsapXX
s+v5cXbXFKXi+JadXzFHEvWbOd3I/ymN8BGPfsN5dv9BuiEzzQifJ9OptosVT0IH
KJQF3DVJzVM7nlg/8Lyo+koXsCTgznLQoWcmu0+AUlT7P/sdCgAfc5ZTZ5Ee14NY
N6fO4pQwlJGJOpENOdBKg1/F32XPVVNuBH50BO27Ie0GfIWhFgG5FzgaqE8ba7tb
Zwl6Ugqe/u+kWh2jlmK9kcyvlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org