Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Mho9xbtgiH0IzReEMp-0rrEnqbo.roa
File: Mho9xbtgiH0IzReEMp-0rrEnqbo.roa (raw, json)
Hash identifier: hkQSBlcgBJLUoVwWfw0HcEgzli45etPqpE8mFbenfjw=
Subject key identifier: 32:1A:3D:C5:BB:60:88:7D:08:CD:17:84:32:9F:B4:AE:B1:27:A9:BA
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: BE1ABA
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Mho9xbtgiH0IzReEMp-0rrEnqbo.roa
Signing time: Wed 23 Feb 2022 19:01:03 +0000
ROA not before: Wed 23 Feb 2022 19:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.150.175.0/24 maxlen: 24
45.139.196.0/22 maxlen: 24
95.214.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12458682 (0xbe1aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Feb 23 19:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=321a3dc5bb60887d08cd1784329fb4aeb127a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:13:dd:23:b2:9b:87:50:18:7b:9a:5a:d5:
28:8e:9d:86:84:f6:5b:6a:f5:54:7d:f0:06:91:37:
de:0b:d5:99:bd:3f:99:be:bb:bd:0b:e1:b4:2a:ad:
0b:8e:46:c5:da:89:79:6b:6c:d5:1f:74:77:b0:01:
4e:40:90:6f:48:42:65:37:19:58:b8:af:79:92:3c:
14:9e:64:99:71:94:2a:bb:4b:ac:6e:4d:4a:6d:bb:
3a:e0:5d:1e:3f:04:a9:5c:f0:fa:8b:4b:b3:6f:35:
37:32:4f:86:73:cd:c7:63:e3:8f:4f:86:d5:90:23:
c8:2a:e7:7a:a8:02:16:de:29:64:a0:74:29:2e:9b:
f5:dc:d4:86:d3:43:54:5d:d0:cd:97:5b:dc:28:e8:
64:61:fb:47:19:6d:50:76:15:dc:f6:3d:24:fb:2f:
aa:71:b2:55:85:2c:08:b9:e1:1a:22:e5:b5:a5:9c:
24:39:6c:43:e4:1e:12:9a:76:37:81:17:a7:dd:23:
9f:12:0a:bc:1d:b1:b9:1d:21:44:40:75:2d:f2:f3:
de:35:42:ee:c3:58:0f:c9:a9:66:5b:27:09:6f:cd:
64:98:40:b3:c1:66:17:2f:fc:d6:db:97:71:38:6e:
f7:d9:98:3f:ae:07:53:c2:ec:57:be:9d:bb:f4:6b:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1A:3D:C5:BB:60:88:7D:08:CD:17:84:32:9F:B4:AE:B1:27:A9:BA
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Mho9xbtgiH0IzReEMp-0rrEnqbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.175.0/24
95.214.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:6d:4a:d5:db:68:55:3a:04:56:51:b3:1a:fa:3d:cd:c2:17:
a0:bb:69:ed:61:f1:4e:e8:55:44:fa:0c:81:d5:c5:26:a8:1a:
e6:ff:3f:37:53:c4:9d:3c:78:5c:0f:26:43:da:99:ca:80:f1:
a5:21:6d:1c:b2:d4:ae:b4:03:e9:a3:b4:97:d9:f6:78:d4:4f:
84:07:77:2b:e2:f4:7f:25:87:62:0d:c0:4f:c0:7e:22:01:5e:
5f:8f:52:f6:af:11:91:52:60:7d:8a:a3:4e:41:0b:d1:7e:72:
c7:cd:34:e9:50:fd:eb:4b:06:63:3f:86:51:c8:20:1c:52:4e:
1c:ee:4c:28:9b:be:6d:a5:51:29:bc:66:b0:5b:6f:40:97:b7:
08:18:15:1e:17:3b:e4:52:2e:26:e4:83:1e:67:eb:4e:1b:6f:
fa:f0:02:18:d0:fb:65:77:f1:e7:8e:73:38:5d:28:a6:fc:8d:
e3:4d:d4:69:b6:90:c8:0a:15:f1:1c:43:6b:8d:ec:29:56:ae:
ad:c4:03:61:5d:89:ba:4d:2b:e5:a8:5d:44:ca:e8:80:0b:24:
55:72:7a:2a:59:4a:d0:64:83:c5:9b:05:2b:e6:db:4f:d2:fb:
70:33:70:97:8a:bf:e6:cc:21:40:da:74:e7:17:85:39:ca:ae:
c6:df:6b:e4
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAL4aujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODEwN2FiNjkyMWVmOGNiMmRlY2EzZWI3NjY0NzhjZmYzZTVmYzZkMB4XDTIyMDIy
MzE5MDEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzIxYTNkYzViYjYw
ODg3ZDA4Y2QxNzg0MzI5ZmI0YWViMTI3YTliYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSYE90jspuHUBh7mlrVKI6dhoT2W2r1VH3wBpE33gvVmb0/
mb67vQvhtCqtC45GxdqJeWts1R90d7ABTkCQb0hCZTcZWLiveZI8FJ5kmXGUKrtL
rG5NSm27OuBdHj8EqVzw+otLs281NzJPhnPNx2Pjj0+G1ZAjyCrneqgCFt4pZKB0
KS6b9dzUhtNDVF3QzZdb3CjoZGH7RxltUHYV3PY9JPsvqnGyVYUsCLnhGiLltaWc
JDlsQ+QeEpp2N4EXp90jnxIKvB2xuR0hREB1LfLz3jVC7sNYD8mpZlsnCW/NZJhA
s8FmFy/81tuXcThu99mYP64HU8LsV76du/RrcgkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQyGj3Fu2CIfQjNF4Qyn7SusSepujAfBgNVHSMEGDAWgBQoEHq2kh74yy3s
o+t2ZHjP8+X8bTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tCQjZ0cEllLU1zdDdLUHJkbVI0el9QbF9HMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvMDg4MjZlLTc3ZDAtNDM3Yi1hMWMyLWMwZmIzZWY3NjQwZS8x
L01obzl4YnRnaUgwSXpSZUVNcC0wcnJFbnFiby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
MDg4MjZlLTc3ZDAtNDM3Yi1hMWMyLWMwZmIzZWY3NjQwZS8xL0tCQjZ0cEllLU1z
dDdLUHJkbVI0el9QbF9HMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi2LxAMEAC2WrwMEAl/WtDANBgkq
hkiG9w0BAQsFAAOCAQEAnG1K1dtoVToEVlGzGvo9zcIXoLtp7WHxTuhVRPoMgdXF
Jqga5v8/N1PEnTx4XA8mQ9qZyoDxpSFtHLLUrrQD6aO0l9n2eNRPhAd3K+L0fyWH
Yg3AT8B+IgFeX49S9q8RkVJgfYqjTkEL0X5yx8006VD960sGYz+GUcggHFJOHO5M
KJu+baVRKbxmsFtvQJe3CBgVHhc75FIuJuSDHmfrThtv+vACGND7ZXfx545zOF0o
pvyN403UabaQyAoV8RxDa43sKVaurcQDYV2Juk0r5ahdRMrogAskVXJ6KllK0GSD
xZsFK+bbT9L7cDNwl4q/5swhQNp05xeFOcquxt9r5A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org