Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/Mt8eSz76LtI2y5YiJfNF2tPRUVA.roa
File: Mt8eSz76LtI2y5YiJfNF2tPRUVA.roa (raw, json)
Hash identifier: K/PorhyaifjlloPqtRglfHKRJ8/lNEr8YBZKrBY7cG4=
Subject key identifier: 32:DF:1E:4B:3E:FA:2E:D2:36:CB:96:22:25:F3:45:DA:D3:D1:51:50
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 0D899D11
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/Mt8eSz76LtI2y5YiJfNF2tPRUVA.roa
Signing time: Mon 31 Jan 2022 11:03:14 +0000
ROA not before: Mon 31 Jan 2022 11:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 185.199.232.0/22 maxlen: 24
46.226.236.0/22 maxlen: 24
213.5.233.0/24 maxlen: 24
185.25.80.0/22 maxlen: 24
185.199.188.0/22 maxlen: 24
2a00:c600::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227122449 (0xd899d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 31 11:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32df1e4b3efa2ed236cb962225f345dad3d15150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:1f:1c:a1:70:6f:22:e1:bc:ee:99:c4:fa:
72:fa:48:55:d0:2c:44:48:f8:f2:ed:df:0a:a8:fe:
b8:ce:cb:3e:69:23:92:d8:b0:a4:cc:f6:9b:53:b8:
4d:83:0c:73:1d:49:a4:97:14:15:a8:7d:ab:72:45:
d1:b7:90:6a:5f:08:91:76:c9:59:e5:76:f1:9e:81:
c0:80:ae:20:c4:30:1f:12:9b:4d:84:50:f5:24:d3:
a3:40:9d:30:ac:a5:e3:57:63:61:73:dc:00:bf:9b:
ff:d1:06:66:11:fe:08:b5:cd:57:e6:59:d8:f1:cf:
21:05:16:2a:84:0d:83:b4:4e:9d:e6:08:02:88:92:
af:c4:6c:d9:bd:4c:3a:4b:c1:21:52:66:af:f7:8a:
63:99:83:da:5e:fe:eb:84:ff:f3:58:d8:b1:ef:59:
81:70:d1:6c:02:01:e3:58:27:43:82:b2:87:71:73:
0d:0a:a2:a3:02:ef:73:1c:ba:47:a5:ab:0b:1b:77:
29:70:1c:4b:4a:6e:65:20:08:65:55:cb:ae:00:54:
03:c5:e7:ee:8a:51:06:b4:54:08:c1:f5:7b:26:29:
d0:05:6b:36:90:7b:86:82:56:40:5a:c9:21:18:c5:
42:5e:5a:ab:b3:66:90:54:a8:5c:88:3b:ae:2a:b9:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:1E:4B:3E:FA:2E:D2:36:CB:96:22:25:F3:45:DA:D3:D1:51:50
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/Mt8eSz76LtI2y5YiJfNF2tPRUVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.236.0/22
185.25.80.0/22
185.199.188.0/22
185.199.232.0/22
213.5.233.0/24
IPv6:
2a00:c600::/29
Signature Algorithm: sha256WithRSAEncryption
68:f0:79:64:3b:0c:d6:cf:4d:0e:53:9d:f9:55:e1:c0:8e:7f:
34:e7:57:34:c3:7f:1c:f9:d5:f3:d7:d4:e1:83:9a:d5:b2:c2:
11:8b:3b:09:b4:17:b5:f2:6e:21:98:c1:e9:d7:d2:6b:fe:f8:
96:5b:9d:37:b0:a0:3d:78:ca:50:06:a8:7f:7d:c1:1e:ed:1b:
68:dc:de:1c:4c:a1:2f:93:f4:92:83:46:44:9f:f3:3a:e9:59:
5e:fd:39:da:31:e7:43:3e:b8:e2:8f:1b:af:83:42:26:21:4d:
ef:2a:cb:a9:58:7d:9e:5d:8a:ca:6b:51:dd:c6:4e:b3:f0:70:
53:36:c4:06:a9:08:7a:45:3a:d5:4f:cb:ab:15:56:7c:db:aa:
3c:ee:0a:b0:36:46:43:77:47:fa:c9:ca:09:a7:7a:85:c3:80:
7e:e0:51:d0:9d:63:22:00:a4:2d:7c:2f:2b:05:d0:d7:4e:41:
2c:6f:81:4f:e1:6e:9a:5f:18:80:23:b9:aa:23:b8:a9:fb:24:
70:f8:a7:01:06:06:cc:58:65:c2:a7:ce:6f:d0:7e:3b:ae:9d:
02:13:fa:f0:1b:7b:de:68:a7:03:6d:d4:84:83:0e:7b:68:70:
53:41:1d:c5:ed:60:6f:df:c1:0f:c8:b5:02:1c:61:b9:8f:b9:
10:12:75:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEDYmdETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NWRiODNhODM2NWE2MDQ0NzZmMjgyZDI0ZDMyN2FkMWVmMGZkZTUyMB4XDTIyMDEz
MTExMDMxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJkZjFlNGIzZWZh
MmVkMjM2Y2I5NjIyMjVmMzQ1ZGFkM2QxNTE1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQIHxyhcG8i4bzumcT6cvpIVdAsREj48u3fCqj+uM7LPmkj
ktiwpMz2m1O4TYMMcx1JpJcUFah9q3JF0beQal8IkXbJWeV28Z6BwICuIMQwHxKb
TYRQ9STTo0CdMKyl41djYXPcAL+b/9EGZhH+CLXNV+ZZ2PHPIQUWKoQNg7ROneYI
AoiSr8Rs2b1MOkvBIVJmr/eKY5mD2l7+64T/81jYse9ZgXDRbAIB41gnQ4Kyh3Fz
DQqiowLvcxy6R6WrCxt3KXAcS0puZSAIZVXLrgBUA8Xn7opRBrRUCMH1eyYp0AVr
NpB7hoJWQFrJIRjFQl5aq7NmkFSoXIg7riq5bQsCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBQy3x5LPvou0jbLliIl80Xa09FRUDAfBgNVHSMEGDAWgBSF24OoNlpgRHby
gtJNMnrR7w/eUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hkdURxRFphWUVSMjhvTFNUVEo2MGU4UDNsSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMmM4ZjA4LWU1OTktNDRmMy1iYmMxLThjYmVmOTEzZTM0Mi8x
L010OGVTejc2THRJMnk1WWlKZk5GMnRQUlVWQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MmM4ZjA4LWU1OTktNDRmMy1iYmMxLThjYmVmOTEzZTM0Mi8xL2hkdURxRFphWUVS
MjhvTFNUVEo2MGU4UDNsSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAi7i7AMEArkZUAMEArnHvAMEArnH
6AMEANUF6TANBAIAAjAHAwUDKgDGADANBgkqhkiG9w0BAQsFAAOCAQEAaPB5ZDsM
1s9NDlOd+VXhwI5/NOdXNMN/HPnV89fU4YOa1bLCEYs7CbQXtfJuIZjB6dfSa/74
lludN7CgPXjKUAaof33BHu0baNzeHEyhL5P0koNGRJ/zOulZXv052jHnQz644o8b
r4NCJiFN7yrLqVh9nl2KymtR3cZOs/BwUzbEBqkIekU61U/LqxVWfNuqPO4KsDZG
Q3dH+snKCad6hcOAfuBR0J1jIgCkLXwvKwXQ105BLG+BT+Fuml8YgCO5qiO4qfsk
cPinAQYGzFhlwqfOb9B+O66dAhP68Bt73minA23UhIMOe2hwU0Edxe1gb9/BD8i1
AhxhuY+5EBJ1XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org