Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/MOAfEwUgW_WXVB-VjzUYEvIjF4Q.roa
File: MOAfEwUgW_WXVB-VjzUYEvIjF4Q.roa (raw, json)
Hash identifier: Ey62Gbcn0r2qcFcO4FV0tmlFh305E57fmLh/cFJ/rA4=
Subject key identifier: 30:E0:1F:13:05:20:5B:F5:97:54:1F:95:8F:35:18:12:F2:23:17:84
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 0182CBA3A8765AD7BFD8EAD06F67944DFDB0
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/MOAfEwUgW_WXVB-VjzUYEvIjF4Q.roa
Signing time: Tue 23 Aug 2022 16:57:56 +0000
ROA not before: Tue 23 Aug 2022 16:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210055
IP address blocks: 185.214.170.0/24 maxlen: 24
185.214.171.0/24 maxlen: 24
176.119.132.0/22 maxlen: 22
176.119.132.0/24 maxlen: 24
176.119.134.0/24 maxlen: 24
176.119.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:a3:a8:76:5a:d7:bf:d8:ea:d0:6f:67:94:4d:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Aug 23 16:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30e01f1305205bf597541f958f351812f2231784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:39:47:e5:18:7b:64:1f:f2:45:ff:db:17:
6a:a5:a4:0f:99:27:02:7c:d5:67:a2:6f:9c:dc:01:
dc:d3:6d:5f:1a:8d:e6:fa:f5:38:5e:51:3e:a9:c4:
c0:fa:89:7d:36:c3:2c:7e:bc:11:14:24:82:09:1c:
84:d1:76:2f:94:a2:4f:d2:a9:1c:ad:89:a5:49:78:
bc:1c:5b:a6:ca:92:28:6b:40:9c:12:a3:a5:4d:51:
dc:93:01:25:a5:a3:71:0c:14:45:bb:5d:ee:3e:7f:
8a:7d:86:4d:94:8e:bd:a7:da:2e:61:39:05:9b:1d:
ce:0b:b6:e1:33:f8:17:c1:ea:46:86:d5:70:9e:78:
50:5d:49:4a:36:7d:1f:27:14:d3:52:53:67:ff:40:
05:61:2a:ac:08:ee:07:03:f9:1b:b8:09:7f:47:57:
2b:eb:75:bf:e0:e7:bd:73:61:1a:dc:6d:16:8e:f5:
52:06:72:fd:19:72:ad:c3:47:9f:98:28:1e:3c:2a:
39:f6:82:15:21:2c:8a:04:3d:e7:47:47:1b:e2:e1:
9b:03:34:e7:40:aa:cb:8d:21:72:b1:49:3b:5c:26:
6a:1f:7d:cf:bc:db:ca:61:04:a3:67:ea:cd:91:29:
23:22:2d:56:ba:24:88:da:cc:2c:0c:22:b3:92:46:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:1F:13:05:20:5B:F5:97:54:1F:95:8F:35:18:12:F2:23:17:84
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/MOAfEwUgW_WXVB-VjzUYEvIjF4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.132.0/22
185.214.170.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9b:ef:75:69:e4:4d:bd:bd:aa:93:e9:04:d8:3f:90:08:ed:
13:48:4d:fe:60:9b:cd:10:f3:fc:06:67:a5:63:dd:7a:6e:6e:
d2:03:90:28:51:fd:d8:4b:d9:74:8d:9a:2e:2c:4b:c8:bd:14:
f9:a8:16:8f:be:5d:6f:5e:52:5e:60:14:f9:61:00:4b:93:75:
ad:ee:29:b4:89:04:62:e2:e7:00:29:68:dd:5a:b1:b8:1f:98:
ee:1c:5c:95:64:7e:85:8e:25:c7:25:48:fe:ad:2a:ce:66:78:
47:80:d4:f3:11:6e:7f:9b:25:30:a9:a7:4f:26:2a:95:de:1d:
48:5a:b9:22:eb:55:6a:b0:51:b6:71:fb:45:e1:57:7b:2d:d2:
0e:92:df:28:f9:d3:de:08:fe:ae:1f:ff:47:79:6b:4f:cf:28:
bd:64:66:bc:b7:a8:06:f9:20:5c:53:f5:dd:da:1c:eb:71:1f:
fe:31:aa:9d:66:50:a8:a1:29:77:92:4a:1a:96:ab:30:60:49:
e6:23:ae:2e:2d:22:fe:58:0b:99:7e:7a:c9:6c:52:da:c8:8e:
b5:cb:e2:28:99:77:ab:9a:eb:81:5b:c3:3d:d1:b0:db:eb:b9:
24:56:55:61:fa:aa:a8:cd:c5:eb:eb:93:74:4d:a7:9a:75:1e:
af:97:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:05 2025 by rpki-client