Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Mzw2M515LrFwcgU-h34sONqGpLc.roa
File: Mzw2M515LrFwcgU-h34sONqGpLc.roa (raw, json)
Hash identifier: qbUsSIWdOpyNMHlfw0tU4UcYU6cLw+918tJgznrU2kY=
Subject key identifier: 33:3C:36:33:9D:79:2E:B1:70:72:05:3E:87:7E:2C:38:DA:86:A4:B7
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14749D07
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Mzw2M515LrFwcgU-h34sONqGpLc.roa
Signing time: Fri 25 Mar 2022 07:51:43 +0000
ROA not before: Fri 25 Mar 2022 07:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 5.180.4.0/22 maxlen: 22
91.242.81.0/24 maxlen: 24
45.145.40.0/22 maxlen: 22
2.59.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343186695 (0x14749d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 25 07:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=333c36339d792eb17072053e877e2c38da86a4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:f2:a9:84:66:8c:12:e4:14:d7:ef:78:bf:
52:1a:50:10:7f:a8:04:11:b2:d9:50:34:ff:c1:c9:
a1:3e:17:1b:d9:6e:86:2d:94:a1:79:e7:f7:12:5e:
e8:79:24:f3:f3:7e:63:25:3f:9d:53:31:1c:fc:ea:
f2:05:a2:cc:b1:04:e6:1c:97:85:87:ec:20:f6:7d:
41:fa:b0:5c:8b:15:c3:4f:51:08:66:1b:e3:40:19:
a0:21:49:d2:17:c6:f9:bc:de:79:16:22:a4:3a:0e:
72:7c:c2:ae:03:fc:de:26:a5:bd:14:2b:33:a1:dd:
03:93:6b:b8:d1:a5:1d:42:ff:cb:9d:0d:7b:fc:d1:
08:fa:b2:8f:48:42:92:4f:f0:69:c5:2c:f0:bc:7e:
8c:65:51:c4:10:87:23:77:92:65:6c:e7:00:e0:19:
9c:61:a2:70:98:48:c7:be:5d:b3:1f:dc:cb:b3:a0:
82:e6:0c:a7:4d:34:37:20:5c:82:29:3d:0e:3a:59:
a8:1b:41:2e:b3:45:52:75:69:03:6c:13:d7:11:d4:
e2:c6:0f:18:e4:d9:cc:e9:81:b1:ff:b5:d7:74:29:
5d:c4:51:94:21:91:e3:e1:31:56:1a:a1:ef:c5:7e:
71:7b:48:2f:fd:bc:ba:1b:ed:62:8f:39:ef:6b:55:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:36:33:9D:79:2E:B1:70:72:05:3E:87:7E:2C:38:DA:86:A4:B7
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Mzw2M515LrFwcgU-h34sONqGpLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.204.0/22
5.180.4.0/22
45.145.40.0/22
91.242.81.0/24
Signature Algorithm: sha256WithRSAEncryption
07:bd:72:5b:90:6e:dc:fd:55:fb:bd:77:21:4d:fa:22:bd:a4:
a5:ae:96:fb:a8:0c:66:b2:33:dd:d0:83:c6:50:af:85:f1:ea:
65:43:78:5e:02:76:f1:45:5a:a7:1f:cc:08:24:0c:8e:f8:01:
b2:2b:7b:82:38:e7:c4:fc:74:10:6c:06:fd:c3:50:e5:96:24:
aa:a4:54:53:2f:f7:b6:cf:fe:a1:29:74:d2:9e:89:b6:2f:69:
6f:21:34:4a:f8:23:e7:ed:2d:36:01:57:9e:d9:27:7f:e4:46:
60:85:dc:f2:75:89:c2:fb:ed:12:91:bd:ec:a9:38:9b:60:21:
c1:ac:79:7f:6e:39:ed:0d:a7:24:e2:fc:8e:87:c7:ad:5c:dc:
c9:11:26:e8:d4:c8:d8:c9:74:f7:19:b4:fd:e3:ed:3b:58:b2:
73:84:71:91:5d:44:f9:93:f3:b9:eb:95:9a:c9:b3:0c:01:e0:
6d:02:d7:e3:e1:2c:53:dd:25:72:99:ae:92:02:2d:b5:8d:82:
73:88:f1:cc:fa:3f:d9:a3:30:2b:ce:f2:c3:10:bd:c4:12:d7:
b2:ed:da:9d:ba:ea:ad:2e:5c:09:4a:00:49:72:9c:2f:2c:51:
7d:78:2b:e6:bb:be:20:96:7a:df:86:35:3f:a0:cd:c3:70:22:
71:9c:c7:49
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEFHSdBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDMy
NTA3NTE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzMzYzM2MzM5ZDc5
MmViMTcwNzIwNTNlODc3ZTJjMzhkYTg2YTRiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANmb8qmEZowS5BTX73i/UhpQEH+oBBGy2VA0/8HJoT4XG9lu
hi2UoXnn9xJe6Hkk8/N+YyU/nVMxHPzq8gWizLEE5hyXhYfsIPZ9QfqwXIsVw09R
CGYb40AZoCFJ0hfG+bzeeRYipDoOcnzCrgP83ialvRQrM6HdA5NruNGlHUL/y50N
e/zRCPqyj0hCkk/wacUs8Lx+jGVRxBCHI3eSZWznAOAZnGGicJhIx75dsx/cy7Og
guYMp000NyBcgik9DjpZqBtBLrNFUnVpA2wT1xHU4sYPGOTZzOmBsf+113QpXcRR
lCGR4+ExVhqh78V+cXtIL/28uhvtYo8572tVnZMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQzPDYznXkusXByBT6Hfiw42oaktzAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L016dzJNNTE1THJGd2NnVS1oMzRzT05xR3BMYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAgI7zAMEAgW0BAMEAi2RKAMEAFvy
UTANBgkqhkiG9w0BAQsFAAOCAQEAB71yW5Bu3P1V+713IU36Ir2kpa6W+6gMZrIz
3dCDxlCvhfHqZUN4XgJ28UVapx/MCCQMjvgBsit7gjjnxPx0EGwG/cNQ5ZYkqqRU
Uy/3ts/+oSl00p6Jti9pbyE0Svgj5+0tNgFXntknf+RGYIXc8nWJwvvtEpG97Kk4
m2Ahwax5f2457Q2nJOL8jofHrVzcyREm6NTI2Ml09xm0/ePtO1iyc4RxkV1E+ZPz
ueuVmsmzDAHgbQLX4+EsU90lcpmukgIttY2Cc4jxzPo/2aMwK87ywxC9xBLXsu3a
nbrqrS5cCUoASXKcLyxRfXgr5ru+IJZ634Y1P6DNw3AicZzHSQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org