Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/MoqgocbNejmQFAS2_bu7KbzWA8s.roa
File: MoqgocbNejmQFAS2_bu7KbzWA8s.roa (raw, json)
Hash identifier: h9BTjtJlmqy0egeS7IW8aw9jXVOoM4DZOJQNVZZ5r4A=
Subject key identifier: 32:8A:A0:A1:C6:CD:7A:39:90:14:04:B6:FD:BB:BB:29:BC:D6:03:CB
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0187FA16B6EA66101D8645FED1205F616CA4
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/MoqgocbNejmQFAS2_bu7KbzWA8s.roa
Signing time: Mon 08 May 2023 06:40:05 +0000
ROA not before: Mon 08 May 2023 06:40:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
45.133.104.0/22 maxlen: 22
45.133.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:16:b6:ea:66:10:1d:86:45:fe:d1:20:5f:61:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: May 8 06:40:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=328aa0a1c6cd7a39901404b6fdbbbb29bcd603cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:5f:eb:62:7f:df:fd:da:10:70:a0:d0:18:
4d:f0:7f:8b:fd:d9:ee:23:ce:f4:00:36:5d:d4:cd:
a9:10:f4:66:aa:4c:62:d5:d1:dc:36:56:24:15:88:
9c:e9:55:c8:92:2a:03:44:f1:b2:6b:35:35:79:82:
a0:75:47:a9:a4:f3:77:e4:a9:60:e4:cf:88:b9:b5:
00:08:c3:28:05:3e:69:2f:10:03:72:ab:c9:1d:2a:
25:65:5f:11:87:8b:bd:6e:65:0b:39:6e:2e:a5:8d:
90:1e:50:9d:aa:60:a6:88:f7:ad:ea:ec:34:d3:7f:
1c:e5:2e:49:8f:cc:4e:05:71:ad:76:7d:fb:83:0a:
b7:27:31:76:4b:4b:9f:f6:33:6e:c4:32:9a:57:bc:
eb:4a:c6:57:3f:67:ec:cd:8d:d4:f2:28:30:f4:69:
4f:2f:2f:7c:52:bd:ea:17:31:ff:38:f9:43:cd:2b:
3a:3c:ee:39:b6:ba:e7:53:a9:73:91:94:65:e1:a1:
e6:9f:1b:20:82:c3:db:22:28:23:74:af:2f:d6:b2:
05:95:8c:17:44:ff:c8:f8:4b:d6:f9:2d:ad:93:a2:
89:83:f5:b2:db:98:08:43:26:f2:93:d9:01:c2:1a:
84:e8:c5:91:2e:c2:e4:ff:03:bc:9b:a0:27:b4:e7:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:A0:A1:C6:CD:7A:39:90:14:04:B6:FD:BB:BB:29:BC:D6:03:CB
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/MoqgocbNejmQFAS2_bu7KbzWA8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/22
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:19:93:a8:14:37:b8:b0:1d:ad:55:98:26:48:15:00:d5:86:
68:0c:a0:82:3a:e7:5c:cd:80:e9:dd:2d:a0:23:54:a5:02:1d:
0c:f8:06:b7:ca:83:46:c6:78:ec:83:b8:ac:8e:1e:57:3e:89:
d4:29:f6:88:65:91:0c:51:41:7f:b4:38:01:e1:1a:4f:30:54:
54:df:31:1b:32:63:ee:a5:24:3a:a0:c8:7a:f6:b4:1b:a6:d2:
f3:4d:e7:e1:de:fd:c0:48:cb:d0:62:73:9c:a6:8a:35:8e:11:
35:9d:a9:9a:62:70:66:c3:dd:1b:44:33:1a:3e:3f:b4:e3:c6:
f4:66:dc:59:92:01:7f:ba:b1:ad:0a:06:2e:e0:8e:1d:9d:15:
b2:16:5b:48:6a:7f:0f:80:ea:b3:d8:58:76:41:cc:39:fd:18:
71:23:2d:54:a1:bf:84:2c:9f:64:d4:55:eb:8d:bb:e0:90:c5:
c3:b8:7b:06:6a:e6:fa:a1:b8:08:4c:68:63:a3:e9:d7:15:0d:
6f:a4:0e:31:cd:b2:ae:97:21:7c:dd:45:e3:88:c6:34:01:71:
73:b1:21:3c:e8:d7:13:1e:cf:b4:9a:bf:59:9f:41:e8:36:7f:
56:b0:84:57:a0:11:6b:af:6f:ea:fd:10:b1:d6:f3:ad:ff:c8:
2e:6c:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:56:30 2025 by rpki-client