Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/muFn-txXgbEpBEKJHm8kic-ePgQ.roa
File: muFn-txXgbEpBEKJHm8kic-ePgQ.roa (raw, json)
Hash identifier: ZZ9DUWoLEdLBderWNiMIeWyR2RubuVa3680KLR79zfU=
Subject key identifier: 9A:E1:67:FA:DC:57:81:B1:29:04:42:89:1E:6F:24:89:CF:9E:3E:04
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01831880E3FD0D3B5BB104064710524E20E9
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/muFn-txXgbEpBEKJHm8kic-ePgQ.roa
Signing time: Wed 07 Sep 2022 15:10:43 +0000
ROA not before: Wed 07 Sep 2022 15:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50835
IP address blocks: 91.193.30.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
91.246.192.0/22 maxlen: 24
77.36.57.0/24 maxlen: 24
176.113.180.0/22 maxlen: 22
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
91.246.203.0/24 maxlen: 24
176.110.112.0/23 maxlen: 23
91.246.217.0/24 maxlen: 24
81.161.8.0/22 maxlen: 22
192.162.184.0/23 maxlen: 23
37.97.120.0/24 maxlen: 24
37.97.121.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
193.36.220.0/22 maxlen: 22
194.33.66.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
91.233.200.0/24 maxlen: 24
176.115.236.0/22 maxlen: 24
193.36.203.0/24 maxlen: 24
109.207.129.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
91.229.18.0/23 maxlen: 23
91.200.132.0/24 maxlen: 24
91.200.134.0/23 maxlen: 23
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
176.116.228.0/24 maxlen: 24
91.238.39.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
176.116.236.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
91.232.226.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
91.236.76.0/24 maxlen: 24
46.173.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:80:e3:fd:0d:3b:5b:b1:04:06:47:10:52:4e:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 7 15:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ae167fadc5781b1290442891e6f2489cf9e3e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:53:0e:18:97:d7:98:2a:24:0f:55:75:a2:
7a:67:19:59:86:c8:dd:5c:c4:03:67:7a:07:71:54:
a3:df:61:6b:ce:11:7b:82:5d:20:05:f3:1e:26:fe:
eb:1e:42:88:85:5d:2c:48:1e:f3:c6:7d:d1:71:7e:
4a:fe:63:d7:0b:bd:c2:df:6d:7b:b1:d0:c4:d1:d5:
38:40:52:89:d9:8e:fd:96:fe:62:67:bb:af:5b:cb:
5c:d2:2c:d5:bd:71:c4:e0:7e:a7:9a:80:eb:7a:a1:
ec:88:a6:e3:1e:3e:13:58:ec:05:df:69:22:0b:52:
3e:39:bc:19:ee:1f:9c:30:67:65:23:c3:65:7f:78:
d4:bf:6e:66:54:d1:cc:86:bc:56:dd:f4:d1:be:af:
ec:b3:96:c8:9a:10:1e:0e:e1:ff:4a:79:e5:b5:c0:
4d:ca:74:93:22:f1:4e:33:cd:63:d9:39:ca:ad:af:
cf:3f:44:d8:47:8e:ee:c8:bf:f2:69:7d:6d:14:b0:
71:35:63:12:b5:2b:18:b7:ed:16:c5:2f:ac:e7:4b:
73:41:f9:9a:10:a2:fd:37:d8:a6:93:82:0f:83:2c:
f7:42:4c:6f:92:6c:52:a9:1a:d4:52:e9:3c:b5:10:
03:2d:71:4c:65:7f:7a:c8:cb:92:cc:9d:bc:71:09:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:67:FA:DC:57:81:B1:29:04:42:89:1E:6F:24:89:CF:9E:3E:04
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/muFn-txXgbEpBEKJHm8kic-ePgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
46.173.254.0/23
64.43.120.0/22
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.200.132.0/24
91.200.134.0/23
91.224.212.0/24
91.229.18.0/23
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.222.0/23
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
91.246.217.0/24
109.207.129.0-109.207.130.255
109.207.132.0/24
176.96.94.0/24
176.110.112.0/23
176.113.180.0/22
176.115.236.0/22
176.116.228.0/24
176.116.236.0/24
176.121.108.0/22
192.162.184.0/23
193.36.203.0/24
193.36.220.0/22
194.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:c3:b4:3d:15:ed:e8:29:fb:a7:25:71:7a:66:45:15:3d:d3:
a1:2c:5c:59:36:ca:6e:35:2e:08:5d:91:b2:81:69:76:4b:57:
e6:86:b3:d8:8b:31:d5:84:5d:d5:97:9c:6f:81:05:2f:fc:6e:
ee:33:e1:ea:d9:7e:d8:4f:43:b3:82:3d:84:99:9e:d0:7d:7a:
bb:4d:f6:64:3f:23:56:74:e2:eb:ed:00:5f:8a:f1:ff:b6:c2:
1e:1d:0c:99:b0:40:50:06:01:38:7a:d0:e5:6b:0a:d1:b1:8c:
bd:22:87:b9:bb:9a:7a:ce:59:cf:71:6d:95:bb:ba:08:fa:40:
88:24:fb:51:85:5c:ff:56:bc:9a:c7:5e:0a:38:56:0d:38:82:
cc:4c:b6:f8:8c:db:85:bd:b1:58:eb:70:95:f8:9a:0c:ae:f1:
13:a0:7b:0e:63:39:fe:f9:ac:a2:07:0f:06:96:cf:ca:d9:20:
7a:56:48:ad:c2:64:81:7d:7a:48:7f:dd:50:f7:1b:98:17:a8:
03:0c:97:50:9d:40:86:24:43:a1:6c:2a:49:03:f4:7c:9e:6d:
34:3d:49:4f:77:46:32:25:cf:08:50:cd:5a:fe:92:37:cf:11:
49:cd:ed:8a:d8:06:5c:84:63:12:d6:f1:f0:f0:c8:63:b4:03:
bc:95:5e:57
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAYMYgOP9DTtbsQQGRxBSTiDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjIwOTA3MTUxMDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWUxNjdmYWRjNTc4MWIxMjkwNDQyODkxZTZmMjQ4OWNmOWUzZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjodTDhiX15gqJA9VdaJ6ZxlZhsjd
XMQDZ3oHcVSj32FrzhF7gl0gBfMeJv7rHkKIhV0sSB7zxn3RcX5K/mPXC73C3217
sdDE0dU4QFKJ2Y79lv5iZ7uvW8tc0izVvXHE4H6nmoDreqHsiKbjHj4TWOwF32ki
C1I+ObwZ7h+cMGdlI8Nlf3jUv25mVNHMhrxW3fTRvq/ss5bImhAeDuH/SnnltcBN
ynSTIvFOM81j2TnKra/PP0TYR47uyL/yaX1tFLBxNWMStSsYt+0WxS+s50tzQfma
EKL9N9imk4IPgyz3QkxvkmxSqRrUUuk8tRADLXFMZX96yMuSzJ28cQl6vQIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFJrhZ/rcV4GxKQRCiR5vJInPnj4EMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvbXVGbi10eFhnYkVwQkVLSkhtOGtpYy1lUGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwge0EAgABMIHmAwQB
JWF4AwQCLq34AwQBLq3+AwQCQCt4AwQATSQ5AwQATSQ8AwQATSRBAwQCUaEIAwQC
UaEwAwQBW8EeAwQAW8iEAwQBW8iGAwQAW+DUAwQBW+USAwQBW+g4AwQAW+jiAwQA
W+nIAwQAW+xMAwQAW+4nAwQBW+/eAwQAW+/iAwQCW/bAAwQAW/bLAwQAW/bZMAwD
BABtz4EDBABtz4IDBABtz4QDBACwYF4DBAGwbnADBAKwcbQDBAKwc+wDBACwdOQD
BACwdOwDBAKweWwDBAHAorgDBADBJMsDBALBJNwDBAHCIUIwDQYJKoZIhvcNAQEL
BQADggEBAKLDtD0V7egp+6clcXpmRRU906EsXFk2ym41LghdkbKBaXZLV+aGs9iL
MdWEXdWXnG+BBS/8bu4z4erZfthPQ7OCPYSZntB9ertN9mQ/I1Z04uvtAF+K8f+2
wh4dDJmwQFAGATh60OVrCtGxjL0ih7m7mnrOWc9xbZW7ugj6QIgk+1GFXP9WvJrH
Xgo4Vg04gsxMtviM24W9sVjrcJX4mgyu8ROgew5jOf75rKIHDwaWz8rZIHpWSK3C
ZIF9ekh/3VD3G5gXqAMMl1CdQIYkQ6FsKkkD9HyebTQ9SU93RjIlzwhQzVr+kjfP
EUnN7YrYBlyEYxLW8fDwyGO0A7yVXlc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-fra.rpki-client.org