Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/MmOjuwBg86f35TFOh10Ys4NsZhg.roa
File: MmOjuwBg86f35TFOh10Ys4NsZhg.roa (raw, json)
Hash identifier: GvVXmihFHpLd5jkoMLgy8oTX6JtywwJG1QdDquDWZXs=
Subject key identifier: 32:63:A3:BB:00:60:F3:A7:F7:E5:31:4E:87:5D:18:B3:83:6C:66:18
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 04DB85D8
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/MmOjuwBg86f35TFOh10Ys4NsZhg.roa
Signing time: Tue 07 Jun 2022 03:18:21 +0000
ROA not before: Tue 07 Jun 2022 03:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29522
IP address blocks: 185.140.120.0/22 maxlen: 22
195.149.224.0/21 maxlen: 21
185.11.100.0/22 maxlen: 24
94.152.0.0/16 maxlen: 24
94.152.254.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81495512 (0x4db85d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jun 7 03:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3263a3bb0060f3a7f7e5314e875d18b3836c6618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:53:23:6f:6c:c6:aa:48:64:29:b9:e2:af:
66:f0:af:1b:e8:70:e1:c1:a3:9d:ff:ab:50:b4:01:
cf:c9:d4:dd:0d:3d:2a:bd:da:a3:97:3a:82:77:87:
fc:74:3f:ec:c0:34:a8:b8:94:b1:65:d5:4d:55:2d:
14:6c:4f:cd:00:16:3f:28:74:15:66:ad:76:97:01:
dc:a4:af:9a:2d:ea:10:e4:b9:e3:07:f9:f4:e5:6f:
ad:20:09:55:ee:79:04:ad:2f:f0:52:19:98:05:13:
05:8f:33:86:d1:df:27:46:db:89:47:fe:c9:01:f2:
5f:cc:ee:40:e4:8a:8b:73:99:52:7a:6b:c7:54:37:
f3:0a:27:6b:73:26:df:a9:d5:60:63:4e:60:5f:44:
73:ad:72:77:c2:d6:60:6a:de:fb:15:b6:15:a3:24:
7a:45:40:8b:ba:e8:65:de:c6:f1:39:37:1e:79:31:
05:cc:75:59:ae:b6:b2:8b:5c:d7:c9:22:2f:76:6a:
85:81:91:07:0f:34:8f:0f:c1:0a:e7:ef:8f:9a:54:
32:33:a2:9d:50:f8:5e:f9:93:bc:0c:9a:0d:15:89:
a4:b8:ac:41:b2:b0:45:64:ce:85:98:c3:44:73:6b:
0a:09:51:ba:90:66:d1:1b:f4:f7:ee:17:82:bb:08:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:A3:BB:00:60:F3:A7:F7:E5:31:4E:87:5D:18:B3:83:6C:66:18
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/MmOjuwBg86f35TFOh10Ys4NsZhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.152.0.0/16
185.11.100.0/22
185.140.120.0/22
195.149.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:78:4b:03:8b:6e:48:18:87:00:a8:30:4e:9b:8a:aa:ad:e3:
0e:2a:79:be:54:6a:bf:e0:fb:bf:f6:d4:3b:d8:93:9e:ef:fd:
04:6b:e1:5f:a3:62:e0:77:f1:f1:23:84:08:c8:f9:f3:29:ce:
bf:0f:86:1a:7e:f6:9b:2f:7a:0b:a8:ac:fa:30:28:c8:f8:aa:
ac:df:02:e7:eb:97:55:d3:a2:c9:e8:49:47:c4:24:7e:99:be:
00:53:b2:54:54:68:7f:06:67:e4:04:89:5f:cf:da:6c:1a:da:
f8:d4:67:1e:f1:9f:b9:ca:98:8b:8c:0c:18:68:97:e8:75:b8:
83:31:f2:23:93:5e:8d:a2:78:66:2b:00:5a:ab:8e:a5:64:6c:
2f:bd:52:b7:97:d4:e0:35:03:57:97:73:fc:f0:c5:70:1c:55:
05:08:4d:be:70:13:0d:65:b0:7e:e6:26:b4:ce:b0:b7:b0:dc:
6b:24:3d:25:c4:18:65:e4:0a:71:3d:c8:0e:c2:66:9d:d2:d9:
a1:44:82:4d:75:10:b0:aa:27:a1:d2:40:e4:09:07:8d:7a:66:
d0:f1:6c:31:4a:05:2d:b9:2c:ea:35:c2:a0:8d:5e:84:58:f9:
91:f8:3b:ec:b7:7b:aa:eb:ae:d6:d2:39:4b:b1:94:4d:28:0a:
9e:f2:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:22 2025 by rpki-client