Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/MV-dqVA7-q_fj3CmpHUkzUcLh3Q.roa
File: MV-dqVA7-q_fj3CmpHUkzUcLh3Q.roa (raw, json)
Hash identifier: bw/CD1+HQ2qWWOdRvqRp/387mWxH3aRxuXn/uxWP1Cc=
Subject key identifier: 31:5F:9D:A9:50:3B:FA:AF:DF:8F:70:A6:A4:75:24:CD:47:0B:87:74
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 018475BA72E4C3C129BB6D347EF36C416311
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/MV-dqVA7-q_fj3CmpHUkzUcLh3Q.roa
Signing time: Mon 14 Nov 2022 10:41:04 +0000
ROA not before: Mon 14 Nov 2022 10:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52106
IP address blocks: 45.148.40.0/22 maxlen: 22
194.61.159.0/24 maxlen: 24
194.61.56.0/24 maxlen: 24
194.60.205.0/24 maxlen: 24
194.60.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:ba:72:e4:c3:c1:29:bb:6d:34:7e:f3:6c:41:63:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Nov 14 10:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=315f9da9503bfaafdf8f70a6a47524cd470b8774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:c4:a7:8f:42:92:5f:f2:32:dd:19:57:7c:
09:6e:05:6e:9a:cf:0e:92:e9:69:65:6a:56:da:32:
45:6f:d2:7e:e3:4f:6e:6b:b2:b6:38:98:1e:bd:c4:
89:37:71:01:32:c9:ff:46:80:d8:a0:aa:f0:e2:fd:
70:1b:86:a2:fe:d6:c9:fd:8b:42:f6:b6:97:ce:38:
03:85:fd:ac:26:f1:a7:15:d7:bd:20:cc:84:c5:1c:
d7:a7:67:fc:27:56:f9:30:08:97:f5:3b:80:90:d9:
fc:1f:59:51:da:b4:62:6c:aa:b7:1f:68:d6:6b:d8:
31:d3:f5:4d:56:0b:de:87:fe:82:61:2f:6c:d9:96:
86:67:7a:a4:38:53:61:7b:cc:1d:40:97:cf:5d:c8:
a1:89:e8:79:9d:18:50:21:e7:c5:2a:17:4f:51:21:
79:34:53:a0:40:a7:36:f9:ea:09:91:da:89:f5:07:
a4:f4:96:45:de:85:06:e6:3a:70:f9:05:76:7c:80:
77:1f:eb:cf:38:3e:8e:df:03:ff:96:64:4e:82:3b:
a7:76:a0:d0:99:45:5c:10:f5:39:1a:fa:fb:32:3a:
0e:10:da:ec:26:a2:af:0c:f1:7e:94:e3:cf:66:2f:
da:9f:31:6b:30:91:b5:97:03:9b:e9:23:df:2b:0c:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:9D:A9:50:3B:FA:AF:DF:8F:70:A6:A4:75:24:CD:47:0B:87:74
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/MV-dqVA7-q_fj3CmpHUkzUcLh3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.40.0/22
194.60.202.0/24
194.60.205.0/24
194.61.56.0/24
194.61.159.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5d:38:e0:1c:17:f6:42:c5:5f:c6:86:6a:13:0a:fc:46:90:
73:72:5e:57:84:05:df:dd:48:1d:98:17:b1:a5:79:30:f9:87:
9f:71:07:ab:a8:c2:0b:8f:df:c4:e9:d4:6a:e3:ec:c8:96:81:
e9:d9:16:79:78:4e:00:15:fe:ba:86:e9:8c:40:d4:0a:37:a4:
b0:96:44:27:07:6d:e6:9d:00:03:24:dd:c9:00:9f:94:ad:66:
b9:37:de:7f:23:be:36:b3:11:c1:cc:8f:d0:bf:5a:39:12:04:
82:22:39:8f:0a:50:82:aa:13:f7:e5:ce:d8:f7:df:2b:e4:49:
99:c4:0c:ed:41:d0:55:7b:3f:90:9b:74:55:42:17:91:20:f2:
b9:08:0a:c7:85:0f:cc:cc:ec:41:df:ed:3f:d4:27:91:8b:83:
a6:64:4e:ed:67:12:b0:35:c1:8f:19:46:6f:16:1b:c5:4e:ca:
d1:d5:de:de:24:ff:0e:90:08:d8:a7:a2:f9:59:b5:d3:3a:a0:
91:57:3a:4f:a8:20:2a:ab:fb:91:c3:fc:d7:fb:0e:30:fd:36:
d6:ed:07:37:9a:6d:45:c2:4f:8b:e4:64:89:0c:ea:9e:19:16:
fc:3c:c9:42:f0:d4:8f:03:b1:50:76:27:20:d5:f9:4b:f4:f4:
fb:5e:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:00 2023 by rpki-client on console-fra.rpki-client.org