Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Mdzf_SQPFZtTmH_mEVrEp-JIybc.roa
File: Mdzf_SQPFZtTmH_mEVrEp-JIybc.roa (raw, json)
Hash identifier: thxtgxdGm+zevCuNKigO4pFcC+Fhqq77rfFRUahPQII=
Subject key identifier: 31:DC:DF:FD:24:0F:15:9B:53:98:7F:E6:11:5A:C4:A7:E2:48:C9:B7
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 0A4FA7F9
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Mdzf_SQPFZtTmH_mEVrEp-JIybc.roa
Signing time: Sat 01 Jan 2022 11:55:13 +0000
ROA not before: Sat 01 Jan 2022 11:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200414
IP address blocks: 195.110.50.0/23 maxlen: 23
213.5.4.0/22 maxlen: 22
46.148.80.0/20 maxlen: 20
178.219.132.0/22 maxlen: 22
178.219.131.0/24 maxlen: 24
178.219.128.0/24 maxlen: 24
178.219.136.0/21 maxlen: 21
2a00:c020::/32 maxlen: 32
2a00:c020:8000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172992505 (0xa4fa7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 11:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31dcdffd240f159b53987fe6115ac4a7e248c9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:90:e6:79:a8:84:21:6e:ab:fb:63:45:ff:
57:57:5f:8c:eb:53:9c:52:92:cf:06:63:f2:91:6c:
31:cc:0a:f4:d0:89:4c:13:5b:07:5d:bf:cc:ce:00:
f0:ff:54:a9:0a:b2:5c:cb:ea:e6:c7:80:30:c8:b1:
89:02:dd:7e:ee:71:23:eb:09:08:4d:c1:8c:ef:19:
4f:fa:72:b1:f9:5b:16:3f:91:04:d0:84:08:5d:52:
58:21:8a:93:87:e9:2b:8d:bf:fd:c2:36:18:99:5a:
56:14:d4:8f:64:80:15:09:6b:21:9a:d6:ec:01:02:
eb:b6:8c:d7:07:61:fc:af:c9:28:2b:8e:df:58:f0:
5e:21:25:27:4d:8c:3d:c3:86:f4:24:c3:ce:d2:a3:
10:5c:86:a9:30:7b:14:bd:6b:56:dd:20:c5:4f:62:
e5:bb:97:75:aa:49:8d:8c:8a:27:00:21:2d:6e:f5:
31:82:68:f6:02:da:45:e7:9a:a2:ba:d6:df:08:7b:
c3:69:9a:9a:27:b9:92:97:71:a0:cb:dd:26:6c:0a:
ca:2a:e8:c8:94:fc:56:80:1e:d0:40:fa:cc:8c:51:
e9:6f:eb:04:82:8f:f5:c3:c8:2d:b3:6e:94:58:bb:
1c:ee:24:fc:37:fd:2b:ed:78:96:4d:94:79:fa:68:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:DF:FD:24:0F:15:9B:53:98:7F:E6:11:5A:C4:A7:E2:48:C9:B7
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Mdzf_SQPFZtTmH_mEVrEp-JIybc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.80.0/20
178.219.128.0/24
178.219.131.0-178.219.143.255
195.110.50.0/23
213.5.4.0/22
IPv6:
2a00:c020::/32
Signature Algorithm: sha256WithRSAEncryption
5c:4a:a8:0f:77:33:96:45:66:01:95:a1:2f:47:9c:09:e8:bd:
05:e6:30:21:fd:40:ce:77:38:31:b6:2a:63:61:a5:74:e4:c2:
1d:09:ac:75:15:a3:5e:f4:1e:30:06:08:ce:95:08:d1:08:5f:
74:fa:08:55:a5:9a:c5:29:16:ea:f9:de:65:59:24:b9:77:96:
b2:65:b8:28:f4:bf:40:0d:22:19:ca:ac:f8:2b:12:96:92:ae:
f9:c9:4e:14:b8:1e:a3:21:9e:9a:51:92:7d:4c:46:8d:0e:24:
b4:f5:bc:01:1c:97:86:ce:4a:28:9e:db:d2:07:8f:51:45:69:
e9:fb:71:e5:cf:10:b6:8e:c8:df:e2:22:31:33:16:9e:5f:d5:
12:f8:99:5a:cc:ae:5e:b3:92:b3:78:1f:3f:a4:12:c8:79:33:
62:8b:34:a9:9f:e3:5c:0e:c0:9e:4a:8e:7c:e7:61:80:f9:bd:
0c:d3:01:a6:99:5b:c7:6b:0e:14:d9:5c:c9:ee:5d:46:0b:71:
8b:29:c4:f5:d1:65:a9:c8:a3:81:d5:9f:b0:6a:26:38:ea:0d:
9a:08:19:18:62:c9:c1:e4:2b:48:64:67:c8:da:8f:ef:8c:3b:
01:5d:6a:6c:c3:88:46:08:50:80:70:3f:12:47:b9:5b:85:0f:
ab:93:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org