Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/mSLkl8diKeIlYvmALHm42M5q8jE.roa
File: mSLkl8diKeIlYvmALHm42M5q8jE.roa (raw, json)
Hash identifier: pF3zeSDc8UxGWMxlSZrZpsOeT5ixaaZJJEesaiQykGY=
Subject key identifier: 99:22:E4:97:C7:62:29:E2:25:62:F9:80:2C:79:B8:D8:CE:6A:F2:31
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 16A236DF
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/mSLkl8diKeIlYvmALHm42M5q8jE.roa
Signing time: Sat 01 Jan 2022 11:53:40 +0000
ROA not before: Sat 01 Jan 2022 11:53:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34779
IP address blocks: 93.103.224.0/19 maxlen: 19
93.103.160.0/19 maxlen: 19
91.246.224.0/19 maxlen: 19
93.103.192.0/19 maxlen: 19
89.233.112.0/20 maxlen: 20
194.28.108.0/22 maxlen: 22
89.212.0.0/18 maxlen: 18
84.255.209.0/24 maxlen: 24
84.255.210.0/24 maxlen: 24
188.230.160.0/19 maxlen: 19
84.255.192.0/18 maxlen: 18
188.230.128.0/19 maxlen: 19
93.103.0.0/19 maxlen: 19
89.212.128.0/18 maxlen: 18
93.103.32.0/19 maxlen: 19
188.230.192.0/19 maxlen: 19
193.138.32.0/20 maxlen: 20
193.138.32.0/19 maxlen: 24
89.212.64.0/18 maxlen: 18
193.138.48.0/21 maxlen: 21
193.138.56.0/22 maxlen: 22
193.138.62.0/24 maxlen: 24
193.138.63.0/24 maxlen: 24
193.138.60.0/23 maxlen: 23
188.230.224.0/19 maxlen: 19
93.103.96.0/19 maxlen: 19
46.248.64.0/19 maxlen: 19
185.179.48.0/22 maxlen: 22
89.212.23.160/27 maxlen: 27
93.103.128.0/19 maxlen: 19
93.103.64.0/19 maxlen: 19
89.212.192.0/18 maxlen: 18
185.49.116.0/22 maxlen: 22
2a01:263::/32 maxlen: 32
2a01:261::/32 maxlen: 32
2a01:264::/32 maxlen: 32
2a01:267::/32 maxlen: 32
2a01:260::/32 maxlen: 32
2a01:266::/32 maxlen: 32
2a01:265::/32 maxlen: 32
2a01:262::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379729631 (0x16a236df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Jan 1 11:53:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9922e497c76229e22562f9802c79b8d8ce6af231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:44:3c:26:37:cd:25:22:e2:38:ff:63:9e:e8:
f4:36:3e:9f:2c:6d:55:2b:19:ca:18:19:78:74:82:
f0:76:f7:18:6a:df:91:68:19:41:cc:c7:6b:ac:19:
67:64:f0:d5:ee:76:34:d0:99:f8:c9:fc:ba:f2:e7:
aa:95:a7:e3:9b:74:4b:38:1e:09:37:9e:66:6c:8e:
65:ea:d7:fe:7f:c5:9e:96:4f:36:40:cf:10:f3:51:
c8:32:e2:f3:36:cf:3b:40:a6:30:65:cb:05:3b:4d:
b2:4b:1d:ad:90:67:75:03:a8:0c:06:28:78:ee:da:
32:87:e6:98:89:45:3b:c3:51:cb:fa:23:df:1c:6d:
7f:38:20:5d:1c:21:60:d2:df:40:bb:45:2b:1b:10:
83:b5:e1:28:5b:cb:55:f4:1a:db:b7:1a:8c:b4:11:
ab:55:c0:85:f7:2b:b0:07:71:41:1b:4a:f6:dc:2d:
97:41:e3:36:d5:e1:80:77:47:3d:65:d6:d7:4a:69:
8a:06:99:4b:a2:48:d5:f8:df:77:b6:40:4c:e4:3f:
84:ea:69:8b:4a:91:cb:d4:10:26:cc:84:d6:19:99:
c1:20:51:f3:1f:c2:94:53:1c:f5:7c:94:ff:5c:dd:
38:42:a1:0a:4d:90:55:10:4c:85:ce:38:fc:1d:07:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:E4:97:C7:62:29:E2:25:62:F9:80:2C:79:B8:D8:CE:6A:F2:31
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/mSLkl8diKeIlYvmALHm42M5q8jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
185.49.116.0/22
185.179.48.0/22
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
Signature Algorithm: sha256WithRSAEncryption
45:85:9f:70:1c:b9:fe:2f:da:64:d7:ec:5c:d4:5a:5a:c8:6f:
2f:d5:68:14:dd:36:b0:e2:16:c3:fc:b5:73:29:c2:70:4b:b7:
19:17:f0:f4:ab:78:91:ea:b0:33:38:e9:95:84:93:aa:5f:43:
0c:d5:4f:ab:a2:3d:74:2c:6b:de:d5:80:9f:48:b8:07:ff:0e:
97:8f:bc:ae:d6:b4:3c:26:c2:16:47:17:c8:8d:47:21:3d:e5:
d4:22:73:8a:a8:5a:17:8f:3c:8e:4d:ab:c0:17:d3:5c:a2:87:
9a:6c:6a:1d:69:79:8f:9d:ac:00:dc:b6:08:b5:7c:fd:ce:ca:
49:4e:c3:db:b0:27:9b:a5:bf:6e:7e:2d:02:c6:67:44:b0:cb:
d5:8c:5a:ba:ba:a5:37:b5:e3:bc:51:c4:c3:8c:17:f6:c9:f0:
41:84:48:6f:45:d9:81:a6:ce:8e:f8:35:12:37:53:80:e2:ee:
0d:e2:38:21:ac:5a:48:a7:31:89:b0:2b:4f:49:da:c6:1f:5a:
1f:93:1a:59:d6:43:86:14:b7:f3:35:da:08:08:6d:a1:8a:e5:
49:c0:48:91:1d:db:44:d9:26:14:9e:2a:21:73:9b:b5:5a:2f:
97:18:d6:45:f5:32:cf:67:8a:1a:2a:3b:71:b9:6c:d5:be:fc:
24:d2:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:40 2025 by rpki-client