Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/MuuoOfQ0pEHHDQgO-vcTsYGhbTs.roa
File: MuuoOfQ0pEHHDQgO-vcTsYGhbTs.roa (raw, json)
Hash identifier: TIcqi9FqVI8KHMl56/H7YpLDUkKO1b7E1ubwhuByREE=
Subject key identifier: 32:EB:A8:39:F4:34:A4:41:C7:0D:08:0E:FA:F7:13:B1:81:A1:6D:3B
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0AE1197D
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/MuuoOfQ0pEHHDQgO-vcTsYGhbTs.roa
Signing time: Sat 15 Jan 2022 11:23:01 +0000
ROA not before: Sat 15 Jan 2022 11:23:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.148.241.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
45.133.39.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182524285 (0xae1197d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 15 11:23:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32eba839f434a441c70d080efaf713b181a16d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:55:da:39:8f:26:54:29:55:60:46:77:03:
df:ac:37:86:1b:65:13:32:d5:66:16:d8:cb:8c:37:
36:2d:bf:29:c2:8d:d2:ef:8d:63:43:b9:a7:d3:d6:
0a:e0:25:aa:e4:8f:da:9b:f5:5d:c9:d0:fe:c1:a7:
ac:ad:17:43:25:66:ed:96:3f:65:a7:8c:2d:44:3a:
04:19:ad:30:96:d5:d2:46:fb:1c:9d:03:63:a1:08:
91:6d:ce:58:b4:47:ee:46:33:5f:bb:59:36:ab:8c:
19:3c:c9:1b:24:ed:05:04:77:ee:cb:4f:ae:2f:95:
55:01:af:61:db:a1:39:aa:b2:35:93:fe:34:5c:7b:
a6:23:81:1c:63:bc:61:6e:b3:15:ed:cd:42:e0:3d:
93:09:33:86:44:1f:1b:32:63:98:ab:4c:b6:dd:1d:
3d:f5:92:c5:63:1e:6e:72:aa:8b:a3:8e:f4:3d:1e:
c1:ab:01:c1:c2:9f:56:32:83:27:a1:69:1b:c5:2e:
e0:eb:71:1e:be:9f:4e:31:bf:2e:cc:57:10:ce:b1:
f6:23:2a:0f:ed:12:8c:5d:aa:bb:3c:39:29:d5:8d:
0f:fd:15:28:1b:4a:2c:7e:e8:cd:4d:01:8c:ef:84:
05:cb:ff:4f:45:67:52:5e:73:1f:b7:85:e5:a9:0c:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:A8:39:F4:34:A4:41:C7:0D:08:0E:FA:F7:13:B1:81:A1:6D:3B
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/MuuoOfQ0pEHHDQgO-vcTsYGhbTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
185.148.241.0/24
185.148.243.0/24
185.169.182.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
93:52:32:79:a9:ee:98:3e:05:58:99:8d:41:ad:ae:ed:bb:cb:
03:1f:05:c4:72:d9:23:84:c5:bf:8a:f4:03:f0:e0:4a:11:3c:
52:cd:a3:80:9e:c5:6b:a7:14:fa:67:75:da:87:05:3b:8f:50:
17:54:fd:2b:9c:22:89:76:1a:a1:27:fd:98:d8:f7:22:5a:69:
ea:33:b9:10:f4:a8:c9:8f:22:45:99:7c:1d:a0:5b:1f:90:9b:
31:bd:dc:86:4f:9c:5b:ff:31:60:ae:98:af:6f:88:1e:45:03:
e4:07:17:f7:b6:13:3e:62:1f:ad:45:6d:ed:6b:55:cf:33:59:
c1:88:6e:48:d2:ea:ce:dd:3e:44:c0:d8:3c:a3:0b:60:cf:84:
20:d6:43:28:a1:64:33:eb:11:5b:48:cf:51:27:37:9d:ce:d5:
1f:83:60:59:bb:80:fa:ef:1f:2e:c6:b9:05:13:1a:f0:3e:92:
3f:2b:a4:5d:70:83:67:f1:6f:d4:fc:fb:4a:a1:b7:a7:18:d0:
72:c2:dd:b5:b0:f8:35:1f:52:5d:02:5e:f1:44:0f:2c:9a:2f:
18:87:36:59:78:91:80:fe:31:11:7d:e2:9a:da:2c:76:7b:10:
c4:ee:ca:8c:b7:84:d3:5a:df:8a:a1:bd:fb:97:a5:8d:fb:a3:
45:b4:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org