Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/mmWbka7LOCLbL6pE6C4t-kuguXI.roa
File: mmWbka7LOCLbL6pE6C4t-kuguXI.roa (raw, json)
Hash identifier: LDCY/OxBN38Z7LEjLe2weP2a47qi7c9fserbSDHsa8U=
Subject key identifier: 9A:65:9B:91:AE:CB:38:22:DB:2F:AA:44:E8:2E:2D:FA:4B:A0:B9:72
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 1B4FCF4F
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/mmWbka7LOCLbL6pE6C4t-kuguXI.roa
Signing time: Tue 12 Apr 2022 08:50:38 +0000
ROA not before: Tue 12 Apr 2022 08:50:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48544
IP address blocks: 83.174.144.0/22 maxlen: 24
194.145.248.0/22 maxlen: 23
78.159.144.0/22 maxlen: 24
93.189.136.0/21 maxlen: 24
91.231.172.0/23 maxlen: 24
185.29.146.0/24 maxlen: 24
87.252.106.0/23 maxlen: 24
188.116.11.0/24 maxlen: 24
188.116.10.0/24 maxlen: 24
188.116.8.0/23 maxlen: 23
188.116.32.0/23 maxlen: 24
185.164.185.0/24 maxlen: 24
185.164.186.0/23 maxlen: 24
46.102.112.0/24 maxlen: 24
46.102.114.0/24 maxlen: 24
46.102.113.0/24 maxlen: 24
46.102.115.0/24 maxlen: 24
89.36.206.0/24 maxlen: 24
89.36.205.0/24 maxlen: 24
89.36.204.0/24 maxlen: 24
89.36.207.0/24 maxlen: 24
185.39.24.0/23 maxlen: 24
185.39.27.0/24 maxlen: 24
185.39.26.0/24 maxlen: 24
188.116.56.0/23 maxlen: 24
188.116.60.0/23 maxlen: 23
188.116.63.0/24 maxlen: 24
188.116.62.0/24 maxlen: 24
185.84.84.0/22 maxlen: 24
45.10.72.0/22 maxlen: 22
217.20.250.0/23 maxlen: 24
217.20.248.0/23 maxlen: 24
212.69.137.0/24 maxlen: 24
212.69.136.0/24 maxlen: 24
212.69.139.0/24 maxlen: 24
212.69.138.0/24 maxlen: 24
212.69.143.0/24 maxlen: 24
212.69.142.0/24 maxlen: 24
212.69.141.0/24 maxlen: 24
212.69.140.0/24 maxlen: 24
89.32.159.0/24 maxlen: 24
89.32.158.0/24 maxlen: 24
89.32.157.0/24 maxlen: 24
89.32.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458215247 (0x1b4fcf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Apr 12 08:50:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a659b91aecb3822db2faa44e82e2dfa4ba0b972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:d5:70:9e:4a:8a:e9:22:29:02:22:7a:b6:
eb:de:7c:de:b6:60:06:b8:52:2e:bb:02:65:9e:15:
70:5f:c5:f3:b6:c7:e1:5b:8e:42:df:1c:c5:77:18:
10:4f:c6:b0:5f:30:55:e2:a4:ac:bc:27:99:38:fb:
1d:cf:5b:76:62:58:15:ca:01:a5:70:bd:50:05:3a:
82:e4:65:81:51:f0:78:d6:72:5f:73:1b:2f:e2:dd:
f6:a6:7a:77:67:7c:75:b3:67:33:0e:08:b0:62:99:
b0:ad:e4:51:6e:87:04:02:ab:ef:96:b2:eb:16:5b:
5c:f5:a2:d5:d2:5c:01:59:cb:48:13:97:44:a3:6c:
2b:de:89:e9:b7:71:24:0f:6e:01:c7:6a:91:04:44:
a9:85:1d:85:12:9d:86:15:05:b2:ea:33:58:bb:1e:
c6:24:79:17:37:d5:96:99:3b:3e:01:bc:51:85:0b:
e8:4b:f2:28:7b:06:e6:29:0a:98:42:b1:90:85:be:
39:4e:b4:8d:ca:e5:47:8b:4a:c6:10:ab:dc:a9:88:
bc:28:cd:6a:9f:6e:ba:41:f5:47:a9:c5:cc:90:b7:
41:f6:71:dc:a2:df:fe:05:a8:e3:66:1e:d5:eb:0a:
02:f8:98:98:fe:19:55:4a:36:ab:32:22:b7:c5:4e:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:9B:91:AE:CB:38:22:DB:2F:AA:44:E8:2E:2D:FA:4B:A0:B9:72
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/mmWbka7LOCLbL6pE6C4t-kuguXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.72.0/22
46.102.112.0/22
78.159.144.0/22
83.174.144.0/22
87.252.106.0/23
89.32.156.0/22
89.36.204.0/22
91.231.172.0/23
93.189.136.0/21
185.29.146.0/24
185.39.24.0/22
185.84.84.0/22
185.164.185.0-185.164.187.255
188.116.8.0/22
188.116.32.0/23
188.116.56.0/23
188.116.60.0/22
194.145.248.0/22
212.69.136.0/21
217.20.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:f6:b0:11:f7:48:da:a5:04:c4:0d:56:09:41:d5:a2:3a:ab:
e1:a5:6d:b0:34:c1:d9:c2:3b:c7:21:bd:d0:0b:bf:9f:86:1e:
5c:23:6b:19:9f:32:4b:6d:aa:5b:2c:3b:90:f4:32:c6:04:0c:
89:0a:30:34:72:9c:48:db:5e:b5:9f:f7:07:34:6b:21:7b:8e:
a5:92:c1:80:bf:91:07:57:ba:24:92:eb:0b:ef:8d:c6:ee:db:
dc:8b:d2:ce:48:07:49:70:a0:65:eb:cc:38:ad:e3:c7:93:60:
1d:a9:c1:9b:0d:99:c8:a6:bf:7c:bb:8b:40:28:d1:ac:b8:97:
55:80:a1:7e:f7:da:ce:9e:1a:24:39:7e:f7:9b:9f:2d:c8:cc:
34:cf:9f:98:76:38:99:8f:75:7e:d1:60:39:e4:e9:cd:40:da:
bf:dc:fb:37:e9:5e:79:41:0e:8f:22:b0:7a:d0:d6:fa:66:1f:
4d:84:c4:b4:1f:55:fa:14:7d:75:9f:e3:82:c2:b9:bf:a4:e8:
47:15:a2:8a:58:c8:46:b4:c4:d1:c4:a4:77:3a:78:ab:21:ac:
6a:95:b1:9e:9c:bc:78:b1:ec:e2:b2:86:a5:f3:c6:75:3d:2b:
1e:a9:b4:0b:16:1f:1b:00:ed:63:ec:16:5d:23:e0:c8:fe:ee:
41:54:73:77
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIEG0/PTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTM3ZDM0ODY5YmM2MGI3ZDllNzgzMzVmNGEzMjM4MWZiNzIxMGU1MB4XDTIyMDQx
MjA4NTAzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE2NTliOTFhZWNi
MzgyMmRiMmZhYTQ0ZTgyZTJkZmE0YmEwYjk3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJK1XCeSorpIikCInq269583rZgBrhSLrsCZZ4VcF/F87bH
4VuOQt8cxXcYEE/GsF8wVeKkrLwnmTj7Hc9bdmJYFcoBpXC9UAU6guRlgVHweNZy
X3MbL+Ld9qZ6d2d8dbNnMw4IsGKZsK3kUW6HBAKr75ay6xZbXPWi1dJcAVnLSBOX
RKNsK96J6bdxJA9uAcdqkQREqYUdhRKdhhUFsuozWLsexiR5FzfVlpk7PgG8UYUL
6EvyKHsG5ikKmEKxkIW+OU60jcrlR4tKxhCr3KmIvCjNap9uukH1R6nFzJC3QfZx
3KLf/gWo42Ye1esKAviYmP4ZVUo2qzIit8VO25sCAwEAAaOCAogwggKEMB0GA1Ud
DgQWBBSaZZuRrss4ItsvqkToLi36S6C5cjAfBgNVHSMEGDAWgBTuN9NIabxgt9nn
gzX0oyOB+3IQ5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdqZlRTR204WUxmWjU0TTE5S01qZ2Z0eUVPVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvYzhjNWU0LTIyNWEtNDg5ZS05MTAwLWFiMmNlOTRjMTQyMy8x
L21tV2JrYTdMT0NMYkw2cEU2QzR0LWt1Z3VYSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
YzhjNWU0LTIyNWEtNDg5ZS05MTAwLWFiMmNlOTRjMTQyMy8xLzdqZlRTR204WUxm
WjU0TTE5S01qZ2Z0eUVPVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
nQYIKwYBBQUHAQcBAf8EgY0wgYowgYcEAgABMIGAAwQCLQpIAwQCLmZwAwQCTp+Q
AwQCU66QAwQBV/xqAwQCWSCcAwQCWSTMAwQBW+esAwQDXb2IAwQAuR2SAwQCuScY
AwQCuVRUMAwDBAC5pLkDBAK5pLgDBAK8dAgDBAG8dCADBAG8dDgDBAK8dDwDBALC
kfgDBAPURYgDBALZFPgwDQYJKoZIhvcNAQELBQADggEBAHr2sBH3SNqlBMQNVglB
1aI6q+GlbbA0wdnCO8chvdALv5+GHlwjaxmfMkttqlssO5D0MsYEDIkKMDRynEjb
XrWf9wc0ayF7jqWSwYC/kQdXuiSS6wvvjcbu29yL0s5IB0lwoGXrzDit48eTYB2p
wZsNmcimv3y7i0Ao0ay4l1WAoX732s6eGiQ5fvebny3IzDTPn5h2OJmPdX7RYDnk
6c1A2r/c+zfpXnlBDo8isHrQ1vpmH02ExLQfVfoUfXWf44LCub+k6EcVoopYyEa0
xNHEpHc6eKshrGqVsZ6cvHix7OKyhqXzxnU9Kx6ptAsWHxsA7WPsFl0j4Mj+7kFU
c3c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org