Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/MolIRzHXB1H1-NEgJljXISMPGF4.roa
File: MolIRzHXB1H1-NEgJljXISMPGF4.roa (raw, json)
Hash identifier: oSD6VNOvEZwEonihEyzlONRYKgwMYU5n+8rOSHUcEZQ=
Subject key identifier: 32:89:48:47:31:D7:07:51:F5:F8:D1:20:26:58:D7:21:23:0F:18:5E
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 0188C7F99B5F1CD3A344CEACC0C0B2DBEE70
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/MolIRzHXB1H1-NEgJljXISMPGF4.roa
Signing time: Sat 17 Jun 2023 06:10:04 +0000
ROA not before: Sat 17 Jun 2023 06:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 185.162.10.0/24 maxlen: 24
93.188.155.0/24 maxlen: 24
185.204.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c7:f9:9b:5f:1c:d3:a3:44:ce:ac:c0:c0:b2:db:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jun 17 06:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3289484731d70751f5f8d1202658d721230f185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:82:3b:3c:a0:62:7d:b7:2a:ef:bf:2d:28:
84:97:5c:d1:a4:13:fc:ba:d1:db:21:1d:f1:6b:39:
43:80:5b:33:0f:e8:d8:d2:45:89:eb:54:3a:27:25:
26:11:bb:d8:6f:cc:aa:47:8a:2e:42:80:4d:f8:0a:
51:c8:74:42:c8:1b:7c:20:4c:bb:21:09:dc:4a:fc:
6b:4c:3d:1f:71:90:34:50:5c:74:3b:0a:a4:9d:e2:
a2:55:01:14:8d:e5:ee:7e:d9:bb:4b:e3:4f:aa:a3:
b1:c2:9d:62:b2:89:3e:56:98:f5:9d:85:07:9e:bd:
aa:4d:1e:57:06:4b:e5:2a:c6:43:75:cc:b2:bd:0b:
ff:36:00:4a:d9:60:0b:fc:29:1f:bd:21:00:f9:16:
41:15:d5:16:97:31:58:3b:cf:4d:72:fa:3a:7a:74:
3d:54:2f:4f:33:50:ed:99:ad:a6:34:79:a9:f3:ec:
c3:55:ab:d0:c6:6c:08:97:70:bd:58:6d:3f:56:71:
65:16:42:8d:fe:88:5e:83:44:1e:c3:ca:06:47:eb:
c2:aa:96:5f:9e:d1:99:88:bc:c1:68:d9:44:07:cf:
a4:e5:89:88:29:07:53:21:70:7a:7c:81:19:3b:07:
9b:92:92:70:40:5a:f7:64:82:44:99:97:f4:8b:4f:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:48:47:31:D7:07:51:F5:F8:D1:20:26:58:D7:21:23:0F:18:5E
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/MolIRzHXB1H1-NEgJljXISMPGF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.155.0/24
185.162.10.0/24
185.204.53.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c6:93:3f:77:8d:c6:21:eb:fa:23:d7:2e:e4:d8:50:fc:d7:
f3:6c:dd:77:8b:c3:6b:34:2e:58:17:cd:0a:d3:db:cb:92:ff:
67:91:91:c5:b7:93:86:c0:63:5e:b8:ed:a2:70:4f:85:33:b8:
76:68:d8:f1:3e:9d:12:58:e9:4a:44:36:53:e2:ed:c3:de:0b:
24:5c:8b:9d:42:a9:c0:1c:44:03:9f:a2:c0:d3:88:50:b8:5a:
8c:24:e4:0b:ec:b5:36:6b:1c:be:63:2c:b4:ce:ec:b7:dd:12:
79:82:eb:49:9c:a4:cd:57:a6:56:96:b6:0a:c4:04:70:fe:35:
24:e9:2d:7b:09:8f:8a:73:b4:8a:af:72:d7:8e:a4:e2:4e:b4:
56:8e:07:fc:4c:e4:3c:61:d0:f1:0a:67:91:eb:36:9c:cc:d9:
68:c9:0a:f1:92:86:d7:50:e8:32:40:b4:e9:39:27:f1:6f:28:
63:c5:89:c6:e5:27:4c:6d:6f:0e:77:bc:e6:3a:96:b9:c0:a0:
25:7b:cf:4f:21:03:b5:1f:01:9a:5b:79:e2:de:73:11:71:39:
a5:0d:42:f9:0c:67:d5:f2:85:fd:d0:b7:46:e8:ca:e0:95:24:
54:6a:98:71:df:d3:5b:df:86:a2:55:6e:a2:d8:3e:b6:76:31:
1d:20:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:13:54 2025 by rpki-client