Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/MUa2CaoA2Qgo8MwFUrD_05AwSzE.roa
File: MUa2CaoA2Qgo8MwFUrD_05AwSzE.roa (raw, json)
Hash identifier: lSlTRpAixZ46r6f6HXdrZzbIR0TCuILKHGbgXjZ6yUg=
Subject key identifier: 31:46:B6:09:AA:00:D9:08:28:F0:CC:05:52:B0:FF:D3:90:30:4B:31
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 0944DF54
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/MUa2CaoA2Qgo8MwFUrD_05AwSzE.roa
Signing time: Sat 01 Jan 2022 10:05:11 +0000
ROA not before: Sat 01 Jan 2022 10:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 185.157.160.0/23 maxlen: 23
185.157.162.0/24 maxlen: 24
217.64.148.0/23 maxlen: 23
217.64.150.0/24 maxlen: 24
2a07:a880:4603::/48 maxlen: 48
2a07:a880:3101::/48 maxlen: 48
2a07:a880:4601::/48 maxlen: 48
2a07:a880:4701::/48 maxlen: 48
2a07:a880:4604::/48 maxlen: 48
2a07:a880:4602::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155508564 (0x944df54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jan 1 10:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3146b609aa00d90828f0cc0552b0ffd390304b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:4b:57:01:a9:e5:89:2a:ee:69:9a:00:0a:
63:85:62:2b:9d:fe:a0:60:d4:d4:7d:0e:2e:7d:73:
b3:99:d0:d6:05:64:27:1a:eb:2e:c3:8c:77:83:52:
77:a3:a1:21:cf:65:f4:01:aa:ea:e5:14:2f:56:02:
12:ba:4c:2b:f5:7a:46:13:b2:e9:5d:56:3c:80:d5:
82:1b:c7:fe:f9:9a:c0:50:2f:db:95:c1:96:6c:99:
0e:a8:cf:10:bb:fe:7e:9d:ad:99:ff:30:60:d0:25:
fc:29:1e:83:e5:60:12:e9:8d:f1:62:42:85:18:1c:
15:e1:56:53:34:13:8f:b4:75:6a:17:9a:b8:90:62:
03:99:08:f4:07:f2:33:a9:7f:e2:87:b4:2c:f1:98:
88:57:63:da:3e:42:b2:56:fe:da:c3:a2:95:47:2c:
05:80:12:a3:95:c6:01:29:cf:1e:03:df:9a:37:f6:
f7:61:f1:5b:9e:1a:cd:c2:f5:8d:39:68:d6:54:17:
d7:06:2f:37:ff:0d:9c:ae:41:97:bb:8c:b4:8b:d5:
59:fc:81:70:57:5d:79:44:40:ae:88:a0:29:45:21:
ef:67:2d:97:4e:a4:d0:33:ef:9d:d6:2b:03:e9:b1:
70:2e:4a:12:9e:f3:df:51:30:18:ed:e5:e2:ab:84:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:B6:09:AA:00:D9:08:28:F0:CC:05:52:B0:FF:D3:90:30:4B:31
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/MUa2CaoA2Qgo8MwFUrD_05AwSzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.160.0-185.157.162.255
217.64.148.0-217.64.150.255
IPv6:
2a07:a880:3101::/48
2a07:a880:4601::-2a07:a880:4604:ffff:ffff:ffff:ffff:ffff
2a07:a880:4701::/48
Signature Algorithm: sha256WithRSAEncryption
90:8a:00:93:1c:cc:7b:0b:02:65:ac:21:56:ea:84:e4:bd:6d:
96:34:0e:7b:63:1a:6f:57:1d:c4:50:ee:16:00:9b:68:a9:23:
50:e9:ed:88:73:ff:79:80:37:07:8e:ad:cd:8b:0c:57:9b:69:
73:da:c1:3a:0d:51:d3:cc:64:56:df:9f:bb:7f:55:8b:e3:27:
06:2b:af:06:07:64:aa:88:be:32:01:88:ea:ad:02:f9:d5:f7:
fb:f1:25:ee:1e:84:77:36:1c:d7:38:19:29:45:31:9b:8d:de:
75:b0:ab:4b:7f:2f:c9:6e:a6:b6:7d:3f:43:e6:3a:76:4b:c6:
27:a2:df:b3:20:08:ac:71:b5:59:3f:15:d9:c3:36:f5:fa:68:
14:12:35:e5:1e:f5:e7:12:d9:e7:64:9c:44:28:de:98:cd:1c:
95:47:09:fb:0b:d4:ed:ca:9b:b6:56:f9:4e:3b:4d:6c:51:a4:
61:eb:6f:ed:30:a5:d8:c8:23:b5:12:d6:81:54:49:00:4d:b5:
86:5b:d8:c0:4b:2c:0f:2b:91:ff:88:59:9c:08:ab:91:a9:9d:
92:ff:a9:c4:8c:8c:e4:6a:08:8e:57:69:f6:eb:5d:5b:0d:f2:
fc:cc:ec:c2:5c:02:b5:e4:f0:67:1b:41:e0:16:0e:4d:15:5d:
44:dc:da:54
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIECUTfVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OWIzYTcxNzY2NWExMTM3ZTk5ZGM4ZmFkMjJlM2U3Zjk4ZGI4OTczMB4XDTIyMDEw
MTEwMDUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzE0NmI2MDlhYTAw
ZDkwODI4ZjBjYzA1NTJiMGZmZDM5MDMwNGIzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMiqS1cBqeWJKu5pmgAKY4ViK53+oGDU1H0OLn1zs5nQ1gVk
JxrrLsOMd4NSd6OhIc9l9AGq6uUUL1YCErpMK/V6RhOy6V1WPIDVghvH/vmawFAv
25XBlmyZDqjPELv+fp2tmf8wYNAl/Ckeg+VgEumN8WJChRgcFeFWUzQTj7R1ahea
uJBiA5kI9AfyM6l/4oe0LPGYiFdj2j5Cslb+2sOilUcsBYASo5XGASnPHgPfmjf2
92HxW54azcL1jTlo1lQX1wYvN/8NnK5Bl7uMtIvVWfyBcFddeURAroigKUUh72ct
l06k0DPvndYrA+mxcC5KEp7z31EwGO3l4quEGTECAwEAAaOCAk0wggJJMB0GA1Ud
DgQWBBQxRrYJqgDZCCjwzAVSsP/TkDBLMTAfBgNVHSMEGDAWgBQps6cXZloRN+md
yPrSLj5/mNuJczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tiT25GMlphRVRmcG5jajYwaTQtZjVqYmlYTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvYWNkMjhlLTUyYWUtNGFjOS1iMDI4LTY2OWY3YTc2MTYzMS8x
L01VYTJDYW9BMlFnbzhNd0ZVckRfMDVBd1N6RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
YWNkMjhlLTUyYWUtNGFjOS1iMDI4LTY2OWY3YTc2MTYzMS8xL0tiT25GMlphRVRm
cG5jajYwaTQtZjVqYmlYTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwIgQCAAEwHDAMAwQFuZ2gAwQAuZ2iMAwDBALZQJQD
BADZQJYwLAQCAAIwJgMHACoHqIAxATASAwcAKgeogEYBAwcAKgeogEYEAwcAKgeo
gEcBMA0GCSqGSIb3DQEBCwUAA4IBAQCQigCTHMx7CwJlrCFW6oTkvW2WNA57Yxpv
Vx3EUO4WAJtoqSNQ6e2Ic/95gDcHjq3NiwxXm2lz2sE6DVHTzGRW35+7f1WL4ycG
K68GB2SqiL4yAYjqrQL51ff78SXuHoR3NhzXOBkpRTGbjd51sKtLfy/Jbqa2fT9D
5jp2S8Ynot+zIAiscbVZPxXZwzb1+mgUEjXlHvXnEtnnZJxEKN6YzRyVRwn7C9Tt
ypu2VvlOO01sUaRh62/tMKXYyCO1EtaBVEkATbWGW9jASywPK5H/iFmcCKuRqZ2S
/6nEjIzkagiOV2n2611bDfL8zOzCXAK15PBnG0HgFg5NFV1E3NpU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org