Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/MMoYxFgFuN3JtYzVJ1rJDbOqGRA.roa
File: MMoYxFgFuN3JtYzVJ1rJDbOqGRA.roa (raw, json)
Hash identifier: A/IypYZFkdHMp5joOnCI9/I7OQElK6j9J1ehXeifTf8=
Subject key identifier: 30:CA:18:C4:58:05:B8:DD:C9:B5:8C:D5:27:5A:C9:0D:B3:AA:19:10
Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial: 056ECC36
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/MMoYxFgFuN3JtYzVJ1rJDbOqGRA.roa
Signing time: Sat 01 Jan 2022 16:11:09 +0000
ROA not before: Sat 01 Jan 2022 16:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394434
IP address blocks: 185.187.132.0/23 maxlen: 24
185.187.134.0/23 maxlen: 24
2a0b:a580::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91147318 (0x56ecc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Validity
Not Before: Jan 1 16:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30ca18c45805b8ddc9b58cd5275ac90db3aa1910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:18:cc:90:e0:0a:55:4b:16:28:05:78:2e:
23:e1:6a:45:47:8d:42:c6:5b:9f:30:4d:7f:f0:38:
09:1f:05:0d:fe:80:c6:61:84:9b:7c:8c:4b:a2:1f:
05:63:be:a9:8e:76:ca:96:7d:b6:16:d4:26:19:1c:
c0:9b:e1:d1:a9:1b:da:89:a4:12:00:bc:99:7d:02:
e2:e7:92:82:e7:d8:59:b5:9c:5c:c9:32:d8:a6:fb:
ef:c6:e0:a2:75:5c:a0:da:e8:95:5a:28:3a:0c:2f:
b6:7b:a3:81:44:3b:d2:d2:3d:ab:76:15:99:33:41:
dd:33:e9:f6:f1:bc:00:b5:4d:01:f9:64:b6:87:9b:
26:3a:cc:28:71:a3:a7:b2:24:a3:30:c6:b6:f5:90:
c9:82:3c:73:80:cc:46:e5:42:db:28:07:61:c1:cc:
47:8e:f7:05:eb:c4:0c:db:ad:cc:af:6e:ca:16:6b:
d7:ce:b2:44:57:8e:07:64:aa:4a:14:de:de:fa:a3:
95:2b:04:83:d7:2b:5a:5e:81:c1:7a:a3:6e:97:48:
7a:93:35:d5:d0:0d:94:1a:a4:83:9a:ee:f8:9b:96:
57:a9:c1:ea:86:27:7c:52:88:ab:18:59:a1:94:9f:
1b:bc:89:6f:b7:c0:d9:5d:90:89:f8:b4:e3:f9:e1:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CA:18:C4:58:05:B8:DD:C9:B5:8C:D5:27:5A:C9:0D:B3:AA:19:10
X509v3 Authority Key Identifier:
keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/MMoYxFgFuN3JtYzVJ1rJDbOqGRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.132.0/22
IPv6:
2a0b:a580::/29
Signature Algorithm: sha256WithRSAEncryption
72:9c:08:dd:4b:81:34:e2:ec:9e:5b:4f:5a:bb:7b:6c:a7:6d:
8b:66:2b:87:90:16:18:45:1c:c1:cb:5a:5b:06:6c:a6:c9:40:
2d:77:2b:c1:c2:ea:03:8a:69:fe:86:2b:9a:c4:f4:22:7d:da:
d5:d4:76:43:ac:fa:04:fe:15:3b:c1:bf:dc:2a:f2:83:55:d0:
0e:f6:48:f6:ca:e9:c0:f2:60:f7:f4:71:a0:57:bb:05:d1:bf:
53:1b:90:0b:be:3e:89:93:5f:03:e4:6e:04:dd:68:7a:33:6d:
bc:d0:05:06:d0:0a:23:a8:e1:f1:e9:5d:59:1f:aa:78:de:f0:
9b:57:7d:87:4e:99:4d:ab:01:32:de:8d:9b:80:8a:04:d0:3a:
3e:ad:2c:e8:d6:c6:b0:c5:6d:54:12:ce:3a:20:ec:c7:b7:f4:
f3:0e:65:94:e4:d2:69:83:94:51:dc:03:b5:f8:f3:e3:1f:cf:
c0:95:8e:4c:6a:be:87:47:72:05:8d:8f:d7:8f:cb:b3:74:4e:
0e:f1:90:80:40:53:2e:c8:2b:85:e9:97:83:e5:83:28:c5:74:
9d:c3:47:2a:b6:65:8e:49:cd:aa:10:98:ad:69:f9:2c:d8:b8:
ce:9e:d8:49:40:96:75:54:e8:a4:75:f4:2a:51:24:b1:87:69:
8a:29:68:e1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBW7MNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTBhMzkxYWFlYjhmYzdjODMzZjgyNTdkN2E5ZTc0YTU1YjMzYWZlMB4XDTIyMDEw
MTE2MTEwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzBjYTE4YzQ1ODA1
YjhkZGM5YjU4Y2Q1Mjc1YWM5MGRiM2FhMTkxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9+GMyQ4ApVSxYoBXguI+FqRUeNQsZbnzBNf/A4CR8FDf6A
xmGEm3yMS6IfBWO+qY52ypZ9thbUJhkcwJvh0akb2omkEgC8mX0C4ueSgufYWbWc
XMky2Kb778bgonVcoNrolVooOgwvtnujgUQ70tI9q3YVmTNB3TPp9vG8ALVNAflk
toebJjrMKHGjp7IkozDGtvWQyYI8c4DMRuVC2ygHYcHMR473BevEDNutzK9uyhZr
186yRFeOB2SqShTe3vqjlSsEg9crWl6BwXqjbpdIepM11dANlBqkg5ru+JuWV6nB
6oYnfFKIqxhZoZSfG7yJb7fA2V2Qifi04/nhFsMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQwyhjEWAW43cm1jNUnWskNs6oZEDAfBgNVHSMEGDAWgBSOCjkarrj8fIM/
glfXqedKVbM6/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pnbzVHcTY0X0h5RFA0SlgxNm5uU2xXek92NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvZjI2NTAxLTY3MTgtNDJiYy05MWRmLWVkYjQzZTFkNGVlMC8x
L01Nb1l4RmdGdU4zSnRZelZKMXJKRGJPcUdSQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
ZjI2NTAxLTY3MTgtNDJiYy05MWRmLWVkYjQzZTFkNGVlMC8xL2pnbzVHcTY0X0h5
RFA0SlgxNm5uU2xXek92NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArm7hDANBAIAAjAHAwUDKgulgDAN
BgkqhkiG9w0BAQsFAAOCAQEAcpwI3UuBNOLsnltPWrt7bKdti2Yrh5AWGEUcwcta
WwZspslALXcrwcLqA4pp/oYrmsT0In3a1dR2Q6z6BP4VO8G/3Cryg1XQDvZI9srp
wPJg9/RxoFe7BdG/UxuQC74+iZNfA+RuBN1oejNtvNAFBtAKI6jh8eldWR+qeN7w
m1d9h06ZTasBMt6Nm4CKBNA6Pq0s6NbGsMVtVBLOOiDsx7f08w5llOTSaYOUUdwD
tfjz4x/PwJWOTGq+h0dyBY2P14/Ls3RODvGQgEBTLsgrhemXg+WDKMV0ncNHKrZl
jknNqhCYrWn5LNi4zp7YSUCWdVTopHX0KlEksYdpiilo4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:15 2024 by rpki-client on console-ams.rpki-client.org