Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/mGU9RkYFOG_8DYYf7IbSqM1o3IQ.roa
File: mGU9RkYFOG_8DYYf7IbSqM1o3IQ.roa (raw, json)
Hash identifier: VVqiBOP9Duys0wy/mEuVNz3szMR2I2KrJxDHyidhArE=
Subject key identifier: 98:65:3D:46:46:05:38:6F:FC:0D:86:1F:EC:86:D2:A8:CD:68:DC:84
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 76B3B6
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/mGU9RkYFOG_8DYYf7IbSqM1o3IQ.roa
Signing time: Sat 01 Jan 2022 02:58:26 +0000
ROA not before: Sat 01 Jan 2022 02:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48253
IP address blocks: 185.142.38.0/24 maxlen: 24
185.142.37.0/24 maxlen: 24
185.142.36.0/24 maxlen: 24
185.142.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7779254 (0x76b3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jan 1 02:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98653d464605386ffc0d861fec86d2a8cd68dc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:22:b1:0c:b3:ed:a5:c5:8b:4c:ea:28:63:
6f:cc:de:49:33:5c:1c:6b:e6:33:18:3c:1f:da:4e:
b6:45:0d:c0:84:19:89:76:08:55:ea:08:b5:b1:eb:
1d:87:b5:03:7b:4c:4f:e9:2a:f9:4b:a7:5d:03:51:
14:8f:fb:f9:3e:b3:8c:73:dd:1d:ef:da:10:cc:bd:
90:be:ae:74:07:bc:90:93:cd:73:0d:59:e2:b6:2d:
1e:77:ee:2c:1d:17:86:43:13:da:ef:c8:db:c5:b6:
32:32:d4:5f:0d:a5:85:a8:3d:0c:1b:7f:ed:28:14:
53:c8:1e:35:23:71:14:ab:66:6c:63:99:f4:df:7f:
ab:b5:2e:b2:3f:03:b1:f5:ae:68:e4:27:11:45:1d:
ef:6f:53:29:3a:4f:4f:fa:6c:8e:93:7d:b4:52:09:
47:db:3c:2d:d0:72:dc:26:7c:a6:90:fc:4c:81:b0:
65:d6:41:db:7a:13:f3:88:86:ec:ed:d2:00:06:97:
22:c0:28:41:99:e1:16:9d:82:25:d4:60:4e:30:c4:
15:b0:84:08:47:3a:27:7f:c6:72:61:2f:94:7f:a2:
12:1b:4f:b2:7f:ee:8c:18:d0:98:b9:bf:02:8d:db:
82:a4:39:6e:83:89:5d:c9:9d:5b:89:0e:fa:fe:38:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:3D:46:46:05:38:6F:FC:0D:86:1F:EC:86:D2:A8:CD:68:DC:84
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/mGU9RkYFOG_8DYYf7IbSqM1o3IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.36.0/22
Signature Algorithm: sha256WithRSAEncryption
68:01:4c:0a:31:80:9e:98:8a:e4:e3:e4:a6:f2:6f:56:2f:9c:
93:4e:7f:ed:9d:37:e5:84:3a:3e:4c:63:f0:97:ea:9d:0c:9a:
06:e2:e7:61:aa:ff:1b:54:3d:2f:56:d1:ab:5b:f0:5a:17:1c:
6e:57:70:9a:1d:44:14:c9:69:c9:d9:ca:9c:3c:37:7e:51:05:
2a:d4:58:c5:08:d7:6c:b9:30:6b:51:e6:66:c7:4a:fa:0a:43:
64:79:61:48:54:58:ad:3e:1f:aa:03:b9:25:3c:68:e0:fe:01:
97:fe:11:29:93:cf:41:90:63:44:77:58:8f:c8:8c:24:04:c4:
c8:52:ab:12:f4:84:d3:92:1b:e1:b3:48:8e:9b:00:84:f7:08:
cd:5c:63:e4:c0:a5:3c:68:36:e2:8a:37:83:02:87:24:d9:63:
5c:28:e8:d9:c1:7f:61:e5:42:28:26:a0:66:72:98:45:c8:46:
5b:54:80:18:ae:c2:3b:96:7b:a4:52:c9:9c:9c:4a:50:cd:80:
ed:21:6f:4b:ec:07:5c:5d:e7:61:43:69:ac:cc:34:89:af:c6:
2b:7e:32:b3:b1:f4:a6:58:e8:e5:80:c0:fc:0f:7e:30:43:4b:
31:22:26:b0:74:68:b2:32:9e:5b:82:dc:db:19:a0:d6:63:aa:
93:be:71:9d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDdrO2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm
ZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2VmNTE3OGEwHhcNMjIwMTAx
MDI1ODI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ODY1M2Q0NjQ2MDUz
ODZmZmMwZDg2MWZlYzg2ZDJhOGNkNjhkYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyqYisQyz7aXFi0zqKGNvzN5JM1wca+YzGDwf2k62RQ3AhBmJ
dghV6gi1sesdh7UDe0xP6Sr5S6ddA1EUj/v5PrOMc90d79oQzL2Qvq50B7yQk81z
DVniti0ed+4sHReGQxPa78jbxbYyMtRfDaWFqD0MG3/tKBRTyB41I3EUq2ZsY5n0
33+rtS6yPwOx9a5o5CcRRR3vb1MpOk9P+myOk320UglH2zwt0HLcJnymkPxMgbBl
1kHbehPziIbs7dIABpciwChBmeEWnYIl1GBOMMQVsIQIRzonf8ZyYS+Uf6ISG0+y
f+6MGNCYub8CjduCpDlug4ldyZ1biQ76/jhjNQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJhlPUZGBThv/A2GH+yG0qjNaNyEMB8GA1UdIwQYMBaAFK/b9FYBCpvRSUHK
LJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5LzEv
bUdVOVJrWUZPR184RFlZZjdJYlNxTTFvM0lRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8z
ZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZK
UWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY4kMA0GCSqGSIb3DQEBCwUAA4IB
AQBoAUwKMYCemIrk4+Sm8m9WL5yTTn/tnTflhDo+TGPwl+qdDJoG4udhqv8bVD0v
VtGrW/BaFxxuV3CaHUQUyWnJ2cqcPDd+UQUq1FjFCNdsuTBrUeZmx0r6CkNkeWFI
VFitPh+qA7klPGjg/gGX/hEpk89BkGNEd1iPyIwkBMTIUqsS9ITTkhvhs0iOmwCE
9wjNXGPkwKU8aDbiijeDAock2WNcKOjZwX9h5UIoJqBmcphFyEZbVIAYrsI7lnuk
UsmcnEpQzYDtIW9L7AdcXedhQ2mszDSJr8YrfjKzsfSmWOjlgMD8D34wQ0sxIiaw
dGiyMp5bgtzbGaDWY6qTvnGd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org