Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/mmHs6sioWKUWroaZUdOK0opGAao.roa
File: mmHs6sioWKUWroaZUdOK0opGAao.roa (raw, json)
Hash identifier: N0iKF6x9mYDOSsy+m13Jlzsucsh/SYFaRPG+f2CHIpo=
Subject key identifier: 9A:61:EC:EA:C8:A8:58:A5:16:AE:86:99:51:D3:8A:D2:8A:46:01:AA
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 0185729ED70F92D7EBDF098CB47E562BF0B1
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/mmHs6sioWKUWroaZUdOK0opGAao.roa
Signing time: Mon 02 Jan 2023 13:14:50 +0000
ROA not before: Mon 02 Jan 2023 13:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202125
IP address blocks: 188.119.104.0/22 maxlen: 24
185.50.204.0/23 maxlen: 23
185.50.206.0/23 maxlen: 24
193.43.74.0/24 maxlen: 24
185.247.166.0/24 maxlen: 24
185.247.165.0/24 maxlen: 24
185.247.164.0/24 maxlen: 24
185.247.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d7:0f:92:d7:eb:df:09:8c:b4:7e:56:2b:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 2 13:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a61eceac8a858a516ae869951d38ad28a4601aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:4d:22:07:3a:3e:62:0e:6e:a0:85:ee:86:
50:53:b4:14:68:ed:2b:77:b2:ed:c3:3a:25:d8:21:
d2:7d:f7:f3:49:2e:b4:38:75:58:d7:8a:aa:b5:03:
d7:b2:6a:f8:c5:7e:9c:1f:35:c3:a9:cc:53:a4:60:
cd:a2:47:fd:d2:24:4b:25:e2:c6:40:6e:1d:43:84:
19:b6:29:cb:49:ce:13:1c:20:7c:6d:86:f9:fc:67:
99:44:b9:f1:45:3c:6b:cf:80:4d:0f:a4:3f:8f:b8:
d6:f6:e6:df:ce:97:df:15:60:33:67:4b:db:b3:af:
02:71:bb:c2:85:c0:d6:7b:45:4e:5e:d9:20:4d:17:
a1:21:f4:72:e9:6a:2a:95:26:99:0a:f2:f3:ad:1e:
c6:2e:99:70:1e:07:ea:3a:3a:69:95:80:53:d6:69:
93:7b:83:c1:39:e2:79:36:04:be:4c:bc:ee:14:b2:
7b:bb:4b:3b:f6:98:7f:ba:ed:19:5a:0c:d6:62:aa:
63:02:e8:39:42:46:df:c8:23:d3:72:83:61:1a:a0:
96:27:87:b9:df:c6:c3:c3:a3:2a:da:fb:b2:d9:54:
57:c2:d3:65:47:e4:4c:42:12:f8:a0:e2:3b:7a:41:
3b:35:de:20:81:de:65:6f:f6:8c:e1:22:d3:63:6f:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:EC:EA:C8:A8:58:A5:16:AE:86:99:51:D3:8A:D2:8A:46:01:AA
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/mmHs6sioWKUWroaZUdOK0opGAao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.204.0/22
185.247.164.0/22
188.119.104.0/22
193.43.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:29:9c:5f:1c:0a:90:c5:d1:6f:9c:06:6d:1c:e0:3c:43:46:
54:3e:63:98:9d:ba:2c:66:7b:d0:ea:7a:dc:03:ce:6a:20:21:
3c:d4:a8:ec:dd:d5:c1:d0:2c:3d:14:c0:28:18:27:b1:de:a1:
c3:0a:7e:d1:14:e2:ae:b6:29:89:6c:3c:28:de:eb:10:fe:9b:
d0:a7:c5:a4:c9:12:5d:fe:ef:8d:00:3a:41:ce:c7:14:b4:93:
20:cf:27:05:d4:0c:a2:c8:9c:51:34:73:b8:79:1d:cd:9c:19:
8d:61:57:f6:af:88:22:64:21:74:40:41:8f:22:3d:82:2e:de:
7c:e4:5a:4a:62:ce:e0:f6:f5:3f:45:f2:71:e1:18:0f:50:28:
f6:e5:e9:bc:14:ca:6e:d8:e6:5c:4e:25:ec:95:e8:e9:b5:0f:
6d:a4:35:cb:3c:ca:6c:f7:15:eb:44:0c:dd:40:1e:45:51:4a:
14:d6:52:9d:51:07:a3:b6:03:65:9a:e3:3d:b5:ba:15:90:ab:
e1:47:96:e6:89:eb:63:2c:3e:6d:64:c8:9a:37:72:12:c6:2a:
d5:f4:9d:d2:58:f5:00:90:51:98:aa:41:bf:4d:eb:6a:9d:3a:
ea:6b:ed:f2:5e:d6:87:2d:b1:9b:0d:72:4d:35:48:20:71:68:
7f:53:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:09 2025 by rpki-client