Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/MRaCJJSi-edZsKUdaN2cSCQUgjQ.roa
File: MRaCJJSi-edZsKUdaN2cSCQUgjQ.roa (raw, json)
Hash identifier: wmbTguccCS4EfeobPx3ELJvkJ0zuKUUuTR1wcSrRVCA=
Subject key identifier: 31:16:82:24:94:A2:F9:E7:59:B0:A5:1D:68:DD:9C:48:24:14:82:34
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 02486C
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/MRaCJJSi-edZsKUdaN2cSCQUgjQ.roa
Signing time: Sat 12 Feb 2022 13:40:41 +0000
ROA not before: Sat 12 Feb 2022 13:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45027
IP address blocks: 185.66.12.0/22 maxlen: 22
185.126.84.0/23 maxlen: 23
185.126.86.0/23 maxlen: 23
45.153.74.0/23 maxlen: 23
195.158.224.0/23 maxlen: 23
195.190.12.0/24 maxlen: 24
185.80.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149612 (0x2486c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Feb 12 13:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3116822494a2f9e759b0a51d68dd9c4824148234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:86:64:a8:2e:ee:19:cb:94:db:06:bb:44:
a4:72:97:ce:7e:a7:95:00:f3:90:e0:1e:be:d3:61:
73:75:c4:36:b1:7c:27:20:fd:77:07:d1:7a:f3:95:
eb:1a:2b:f7:4e:b5:6d:fb:e4:57:81:10:22:d1:14:
16:85:e9:57:5f:6a:9e:48:30:79:40:c5:5b:5d:0a:
f2:dd:79:45:8c:88:08:cc:9f:f8:98:7d:b6:c7:c6:
65:0f:75:ed:5f:09:7c:4d:6a:8d:bd:0f:83:6e:58:
8f:50:10:3d:c2:db:fc:a1:be:0e:e6:64:f8:ae:bd:
65:54:82:2e:58:43:25:04:d1:24:9d:ec:8d:82:e8:
f9:b0:13:40:e6:eb:98:53:f1:92:2a:c1:b9:0a:4c:
3b:73:ab:6d:a9:1e:9d:87:88:2b:13:d4:f9:9e:1d:
bb:b0:3b:cc:32:78:94:79:c1:82:f1:40:40:d0:a6:
11:f7:30:63:f3:9e:0b:ce:00:13:b5:0b:81:25:b5:
d4:8c:e7:6b:31:77:64:a3:8a:17:8a:14:49:0a:52:
38:d3:89:e2:4d:f3:1d:ef:61:c5:1b:36:18:72:b0:
26:5b:19:9f:1a:d4:c7:64:f0:15:d5:6b:5c:99:31:
2e:13:57:42:cb:cf:44:f5:55:65:47:be:21:15:e8:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:82:24:94:A2:F9:E7:59:B0:A5:1D:68:DD:9C:48:24:14:82:34
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/MRaCJJSi-edZsKUdaN2cSCQUgjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.74.0/23
185.66.12.0/22
185.80.148.0/22
185.126.84.0/22
195.158.224.0/23
195.190.12.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9a:6c:eb:33:76:3c:0d:3d:84:a4:e6:63:f8:31:30:6c:c9:
c9:d4:ec:68:6d:cd:c6:2b:e1:df:b5:1c:69:a8:a9:74:0e:b3:
2a:15:20:c0:bf:8a:c6:77:3c:a7:8b:d8:b7:e9:3b:11:b7:f3:
53:64:6c:7d:fb:5b:00:66:9d:e6:fd:53:87:54:09:5f:e6:9e:
54:ed:dc:40:25:6e:30:36:01:b0:78:b5:dd:e3:c1:ac:ae:34:
a9:ed:ea:7c:ba:a6:90:cf:8b:48:59:bb:e9:13:fb:11:a8:5c:
b8:16:2b:0f:d5:d1:24:79:da:09:59:f2:2e:e5:70:b2:9d:be:
9c:46:06:5a:66:91:17:08:4d:b8:99:bd:33:5c:ce:96:fa:00:
14:89:2a:08:86:92:d3:5b:00:08:a3:d1:f9:cd:32:2d:33:12:
0d:fe:8f:01:91:28:2b:1e:bf:79:91:04:a1:cb:73:9e:ac:1d:
3d:bc:cc:e1:31:3a:01:25:5d:7d:59:f0:dd:a6:5d:8a:ef:a7:
21:f7:21:4a:d3:d9:90:b5:d1:69:e8:11:b5:5a:4b:66:44:93:
97:17:59:85:65:28:43:78:d4:f7:e2:d5:81:34:53:74:ab:df:
60:4f:e6:a6:b6:d6:a8:e9:74:f8:23:4e:a6:8e:ff:d5:2d:b0:
db:eb:8a:93
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIDAkhsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc2
NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFkYzY2ZjcwHhcNMjIwMjEy
MTM0MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMTE2ODIyNDk0YTJm
OWU3NTliMGE1MWQ2OGRkOWM0ODI0MTQ4MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr96GZKgu7hnLlNsGu0SkcpfOfqeVAPOQ4B6+02FzdcQ2sXwn
IP13B9F685XrGiv3TrVt++RXgRAi0RQWhelXX2qeSDB5QMVbXQry3XlFjIgIzJ/4
mH22x8ZlD3XtXwl8TWqNvQ+DbliPUBA9wtv8ob4O5mT4rr1lVIIuWEMlBNEkneyN
guj5sBNA5uuYU/GSKsG5Ckw7c6ttqR6dh4grE9T5nh27sDvMMniUecGC8UBA0KYR
9zBj854LzgATtQuBJbXUjOdrMXdko4oXihRJClI404niTfMd72HFGzYYcrAmWxmf
GtTHZPAV1WtcmTEuE1dCy89E9VVlR74hFegjRQIDAQABo4ICJzCCAiMwHQYDVR0O
BBYEFDEWgiSUovnnWbClHWjdnEgkFII0MB8GA1UdIwQYMBaAFHZnAjbNDgOGhKMx
lL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNlLzEv
TVJhQ0pKU2ktZWRac0tVZGFOMmNTQ1FVZ2pRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8x
ODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFF
b3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G
CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBLZlKAwQCuUIMAwQCuVCUAwQCuX5U
AwQBw57gAwQAw74MMA0GCSqGSIb3DQEBCwUAA4IBAQBxmmzrM3Y8DT2EpOZj+DEw
bMnJ1Oxobc3GK+HftRxpqKl0DrMqFSDAv4rGdzyni9i36TsRt/NTZGx9+1sAZp3m
/VOHVAlf5p5U7dxAJW4wNgGweLXd48GsrjSp7ep8uqaQz4tIWbvpE/sRqFy4FisP
1dEkedoJWfIu5XCynb6cRgZaZpEXCE24mb0zXM6W+gAUiSoIhpLTWwAIo9H5zTIt
MxIN/o8BkSgrHr95kQShy3OerB09vMzhMToBJV19WfDdpl2K76ch9yFK09mQtdFp
6BG1WktmRJOXF1mFZShDeNT34tWBNFN0q99gT+amttao6XT4I06mjv/VLbDb64qT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:16 2023 by rpki-client on console-ams.rpki-client.org