Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mSiU7G7JQliLxONaiFYSSEOHMvY.roa
File: mSiU7G7JQliLxONaiFYSSEOHMvY.roa (raw, json)
Hash identifier: oDPN2kR66471eYgby5PoTNRMlmF8t4NFAfQI6TDBixs=
Subject key identifier: 99:28:94:EC:6E:C9:42:58:8B:C4:E3:5A:88:56:12:48:43:87:32:F6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018894B407AE30F9EBD290A047D410C2FCEC
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mSiU7G7JQliLxONaiFYSSEOHMvY.roa
Signing time: Wed 07 Jun 2023 07:13:26 +0000
ROA not before: Wed 07 Jun 2023 07:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 37.128.250.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:b4:07:ae:30:f9:eb:d2:90:a0:47:d4:10:c2:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 7 07:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=992894ec6ec942588bc4e35a88561248438732f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:38:34:62:93:bb:6e:ba:81:3d:e8:26:d3:
ca:5a:29:e1:ad:47:81:57:11:fa:1d:4f:29:2c:11:
f8:d5:82:7f:29:71:45:71:c3:08:00:15:74:b6:4d:
a7:e2:bd:22:1b:ba:de:73:c9:2e:7a:4b:59:27:54:
20:5e:a7:a7:b3:e3:3a:49:42:f5:97:b9:7c:7e:7c:
b0:5b:e4:ef:b4:07:71:84:94:71:dd:40:24:a4:78:
9f:d0:6f:bc:3c:85:c5:75:39:72:45:8c:32:93:1e:
3f:a4:b9:19:43:8c:f7:99:5c:14:c1:70:5d:47:67:
39:27:a2:06:95:35:06:09:ee:a5:f9:58:0e:8a:8e:
80:d6:8d:b7:04:3f:1a:6f:c6:85:be:98:0f:d9:1f:
c7:d8:93:74:9f:03:35:61:7e:d6:ee:59:11:d7:e5:
eb:9f:81:2e:5c:d7:70:d6:3a:6d:8f:db:17:f0:ea:
3a:1a:d0:6a:44:16:cb:76:6b:05:50:19:78:be:9e:
a2:47:30:de:ef:97:38:0b:84:9d:d7:8f:01:4c:e0:
d5:a5:32:81:61:ea:2b:90:a1:4e:b9:a6:7b:4b:30:
2d:83:4f:10:74:72:19:b4:d4:d4:dc:f7:d9:4d:30:
c1:8e:04:f2:d2:c7:a1:be:0f:05:4a:18:a5:f8:3c:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:94:EC:6E:C9:42:58:8B:C4:E3:5A:88:56:12:48:43:87:32:F6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mSiU7G7JQliLxONaiFYSSEOHMvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.250.0/23
Signature Algorithm: sha256WithRSAEncryption
49:0e:1b:16:11:9f:0b:a5:5f:a3:47:e2:bb:3d:fe:84:c9:70:
4b:e9:a9:37:d0:e8:ac:02:7c:8b:17:52:b4:47:e0:5d:ef:c3:
b3:58:70:08:bc:b4:38:28:ed:e9:f1:68:ee:94:30:76:c4:df:
7d:6a:4c:21:df:58:ac:60:88:82:af:9f:03:3c:a2:dd:52:86:
06:86:2a:d4:59:72:84:8b:7d:e3:3a:3a:06:18:b1:13:39:f6:
1b:c1:d1:f0:d8:50:48:16:65:54:ca:46:ac:95:cd:7e:b2:72:
cc:77:d3:68:88:05:6d:8f:36:e9:5f:ff:3d:bb:90:41:66:dd:
15:08:15:8f:93:7f:06:62:fc:85:38:ea:a9:ec:16:03:8c:57:
18:fb:f9:0a:cf:48:4f:75:44:fd:f5:d8:c3:50:6a:7a:16:54:
f6:88:95:85:72:7e:98:8a:55:c9:b3:f0:94:ad:4f:46:0f:29:
5f:18:6c:87:a3:17:d9:34:1d:c5:6e:52:f6:e1:f1:39:3d:b6:
13:c6:c0:f4:ad:59:d9:9a:d7:e2:29:79:a9:80:3c:9a:95:c5:
52:96:a2:25:bc:b2:9a:b3:0f:c8:11:08:3c:1f:26:7b:a6:e0:
38:55:71:dc:d3:aa:d6:3c:76:e5:da:bc:ba:18:e6:ca:48:23:
95:79:45:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiUtAeuMPnr0pCgR9QQwvzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMwNjA3MDcxMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTI4OTRlYzZlYzk0MjU4OGJjNGUzNWE4ODU2MTI0ODQzODczMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDM4NGKTu266gT3oJtPKWinhrUeB
VxH6HU8pLBH41YJ/KXFFccMIABV0tk2n4r0iG7rec8kuektZJ1QgXqens+M6SUL1
l7l8fnywW+TvtAdxhJRx3UAkpHif0G+8PIXFdTlyRYwykx4/pLkZQ4z3mVwUwXBd
R2c5J6IGlTUGCe6l+VgOio6A1o23BD8ab8aFvpgP2R/H2JN0nwM1YX7W7lkR1+Xr
n4EuXNdw1jptj9sX8Oo6GtBqRBbLdmsFUBl4vp6iRzDe75c4C4Sd148BTODVpTKB
YeorkKFOuaZ7SzAtg08QdHIZtNTU3PfZTTDBjgTy0sehvg8FShil+DwHFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkolOxuyUJYi8TjWohWEkhDhzL2MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvbVNpVTdHN0pRbGlMeE9OYWlGWVNTRU9ITXZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJYD6MA0G
CSqGSIb3DQEBCwUAA4IBAQBJDhsWEZ8LpV+jR+K7Pf6EyXBL6ak30OisAnyLF1K0
R+Bd78OzWHAIvLQ4KO3p8WjulDB2xN99akwh31isYIiCr58DPKLdUoYGhirUWXKE
i33jOjoGGLETOfYbwdHw2FBIFmVUykaslc1+snLMd9NoiAVtjzbpX/89u5BBZt0V
CBWPk38GYvyFOOqp7BYDjFcY+/kKz0hPdUT99djDUGp6FlT2iJWFcn6YilXJs/CU
rU9GDylfGGyHoxfZNB3FblL24fE5PbYTxsD0rVnZmtfiKXmpgDyalcVSlqIlvLKa
sw/IEQg8HyZ7puA4VXHc06rWPHbl2ry6GObKSCOVeUXy
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:10 2025 by rpki-client