Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/mugakhT2jxYu84g4NJ6N5Yk5nBo.roa
File: mugakhT2jxYu84g4NJ6N5Yk5nBo.roa (raw, json)
Hash identifier: msXNWcRT3CTQMhuGmD02FTVjNyB9yq2wxYUQU9103eM=
Subject key identifier: 9A:E8:1A:92:14:F6:8F:16:2E:F3:88:38:34:9E:8D:E5:89:39:9C:1A
Certificate issuer: /CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Certificate serial: 37C4B36E
Authority key identifier: 05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/mugakhT2jxYu84g4NJ6N5Yk5nBo.roa
Signing time: Thu 17 Feb 2022 12:24:45 +0000
ROA not before: Thu 17 Feb 2022 12:24:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24935
IP address blocks: 195.74.80.0/24 maxlen: 24
185.161.45.0/24 maxlen: 24
185.161.47.0/24 maxlen: 24
185.252.156.0/24 maxlen: 24
185.252.159.0/24 maxlen: 24
185.252.158.0/24 maxlen: 24
37.235.92.0/24 maxlen: 24
46.29.122.0/24 maxlen: 24
37.235.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935637870 (0x37c4b36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Validity
Not Before: Feb 17 12:24:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ae81a9214f68f162ef38838349e8de589399c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:e0:77:10:a4:06:1f:36:cb:3a:02:7a:0c:
9c:04:62:10:e0:b6:fe:cc:e2:00:bf:4a:05:07:65:
d1:92:e5:b0:13:1d:07:eb:e5:9e:b2:15:cc:1b:b5:
be:94:11:d0:7c:1f:68:4a:d6:fa:8a:fb:39:b6:7c:
d1:02:3a:91:f0:a0:ff:1e:94:86:fe:42:a8:be:63:
9b:c9:8b:b9:62:98:a5:94:1f:88:8f:b9:7d:2d:ad:
a4:d5:b7:d9:31:34:39:88:c2:19:4a:38:2f:3c:d4:
e4:98:a7:88:12:67:01:31:6a:51:ca:a2:03:93:e4:
87:ae:ec:fe:66:48:d3:39:7c:08:04:d2:ef:65:95:
24:6b:4e:45:0b:fb:36:4f:50:19:cc:fe:79:c1:19:
43:70:63:f1:14:55:e9:12:7a:3a:a5:76:ba:f5:9c:
fd:ef:cd:26:df:5c:e8:0b:41:a3:c8:14:45:91:da:
30:aa:f4:3c:a2:10:e5:8e:07:de:1d:da:0c:ca:ed:
64:f0:64:4c:df:3a:94:c7:ab:d3:2f:09:99:af:5f:
f0:8d:3f:c3:ca:ee:4a:2f:5a:a2:52:72:5c:3f:f5:
77:69:ca:e4:20:f6:44:38:15:38:86:a2:c4:0d:ab:
ec:f4:b8:d5:ec:6b:ad:13:0f:af:b8:d3:66:a2:1e:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E8:1A:92:14:F6:8F:16:2E:F3:88:38:34:9E:8D:E5:89:39:9C:1A
X509v3 Authority Key Identifier:
keyid:05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/mugakhT2jxYu84g4NJ6N5Yk5nBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.92.0/23
46.29.122.0/24
185.161.45.0/24
185.161.47.0/24
185.252.156.0/24
185.252.158.0/23
195.74.80.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c6:70:3f:df:b6:78:75:2e:bc:95:45:be:7b:14:b2:d0:46:
55:a1:fa:cc:84:f4:e6:19:b6:6c:00:bb:d7:d6:e1:17:0e:90:
dd:0e:91:2d:82:e3:82:1b:00:35:d7:8e:75:10:0d:c0:48:44:
fd:02:3e:0f:8f:a8:09:b4:85:14:49:60:61:da:e8:63:9e:fc:
b3:19:3e:17:c1:fb:03:9b:69:ea:bb:7d:90:ed:b8:65:0c:e7:
aa:9a:8f:83:c2:a1:89:29:11:bf:0d:47:8f:8b:fa:95:04:7d:
b7:45:d7:d9:02:95:22:20:cf:2a:a8:30:21:98:1f:3e:70:ca:
cb:5c:ba:9e:e4:72:79:41:a5:49:c3:74:24:cf:fb:47:4d:b4:
c4:bc:3f:2b:ef:88:9c:93:3d:a2:30:6b:5d:96:4c:8d:b4:85:
f6:af:ed:87:fa:75:c3:cd:3b:c7:2a:01:08:99:76:45:91:0d:
ad:9d:00:1c:34:93:70:13:5b:24:1a:0f:22:e2:e8:c7:0a:b8:
34:b2:8c:fd:bb:0d:79:31:ed:44:de:7e:01:37:cc:65:69:05:
e1:10:e6:a9:33:08:89:9a:e1:48:f9:85:08:56:28:11:b4:e3:
72:c2:89:af:bd:ed:cf:3c:59:74:39:60:48:5f:00:0a:c2:dc:
1f:00:a0:b6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEN8SzbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NWQ2NTg1OTRiNjUzNjRiMmMyZTU2YTZhNDVlYmIwNjg0N2IzODQ5MB4XDTIyMDIx
NzEyMjQ0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFlODFhOTIxNGY2
OGYxNjJlZjM4ODM4MzQ5ZThkZTU4OTM5OWMxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+a4HcQpAYfNss6AnoMnARiEOC2/sziAL9KBQdl0ZLlsBMd
B+vlnrIVzBu1vpQR0HwfaErW+or7ObZ80QI6kfCg/x6Uhv5CqL5jm8mLuWKYpZQf
iI+5fS2tpNW32TE0OYjCGUo4LzzU5JiniBJnATFqUcqiA5Pkh67s/mZI0zl8CATS
72WVJGtORQv7Nk9QGcz+ecEZQ3Bj8RRV6RJ6OqV2uvWc/e/NJt9c6AtBo8gURZHa
MKr0PKIQ5Y4H3h3aDMrtZPBkTN86lMer0y8Jma9f8I0/w8ruSi9aolJyXD/1d2nK
5CD2RDgVOIaixA2r7PS41exrrRMPr7jTZqIeSAkCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBSa6BqSFPaPFi7ziDg0no3liTmcGjAfBgNVHSMEGDAWgBQF1lhZS2U2Sywu
VqakXrsGhHs4STAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JkWllXVXRsTmtzc0xsYW1wRjY3Qm9SN09Fay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvOWIxZjk1LTNiMTgtNDgxMi05MjRlLTdiZmRhNjI1NDRjZS8x
L211Z2FraFQyanhZdTg0ZzROSjZONVlrNW5Cby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
OWIxZjk1LTNiMTgtNDgxMi05MjRlLTdiZmRhNjI1NDRjZS8xL0JkWllXVXRsTmtz
c0xsYW1wRjY3Qm9SN09Fay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEASXrXAMEAC4degMEALmhLQMEALmh
LwMEALn8nAMEAbn8ngMEAMNKUDANBgkqhkiG9w0BAQsFAAOCAQEAM8ZwP9+2eHUu
vJVFvnsUstBGVaH6zIT05hm2bAC719bhFw6Q3Q6RLYLjghsANdeOdRANwEhE/QI+
D4+oCbSFFElgYdroY578sxk+F8H7A5tp6rt9kO24ZQznqpqPg8KhiSkRvw1Hj4v6
lQR9t0XX2QKVIiDPKqgwIZgfPnDKy1y6nuRyeUGlScN0JM/7R020xLw/K++InJM9
ojBrXZZMjbSF9q/th/p1w807xyoBCJl2RZENrZ0AHDSTcBNbJBoPIuLoxwq4NLKM
/bsNeTHtRN5+ATfMZWkF4RDmqTMIiZrhSPmFCFYoEbTjcsKJr73tzzxZdDlgSF8A
CsLcHwCgtg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:20 2023 by rpki-client on console-ams.rpki-client.org