Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/Mlw6-V0MQ1JIoQvkrY0FhE8R03o.roa
File: Mlw6-V0MQ1JIoQvkrY0FhE8R03o.roa (raw, json)
Hash identifier: kDdsJWiyyF9D1FS63mSibP1iVqeotdSMRyxDvfLTw6I=
Subject key identifier: 32:5C:3A:F9:5D:0C:43:52:48:A1:0B:E4:AD:8D:05:84:4F:11:D3:7A
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 051028D0
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/Mlw6-V0MQ1JIoQvkrY0FhE8R03o.roa
Signing time: Thu 21 Apr 2022 11:42:29 +0000
ROA not before: Thu 21 Apr 2022 11:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8788
IP address blocks: 193.138.87.0/24 maxlen: 24
212.26.128.0/19 maxlen: 19
194.32.109.0/24 maxlen: 24
194.32.110.0/24 maxlen: 24
178.211.96.0/19 maxlen: 20
194.32.108.0/24 maxlen: 24
194.32.108.0/23 maxlen: 23
212.26.140.0/24 maxlen: 24
212.80.32.0/19 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84945104 (0x51028d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Apr 21 11:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=325c3af95d0c435248a10be4ad8d05844f11d37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:0e:37:cd:ea:1a:b4:45:48:da:97:a6:44:
5b:c3:db:64:9b:f8:77:87:24:1e:65:0b:26:5d:e2:
cc:c7:fb:83:06:9f:1c:2c:cf:8e:0e:ef:fb:5a:c0:
87:8f:41:de:b6:2c:e7:22:6c:e7:de:bc:3d:bf:fd:
4d:7f:7f:a0:37:8f:8a:7b:0f:73:db:02:2b:1e:8a:
6e:2b:34:d4:71:5f:35:d8:6f:8c:0e:8e:67:23:4a:
2f:cf:8e:e9:01:89:04:89:f1:fe:c4:cb:b1:06:8a:
ca:88:2f:ad:1c:b1:55:91:f3:9c:4f:cb:6c:a5:6c:
e5:6a:13:48:c2:1f:a3:75:f2:9c:79:b1:ae:72:45:
26:92:14:7e:20:64:9a:e1:cd:bb:3b:6c:72:51:20:
06:a2:42:a7:2b:22:74:a9:84:cb:84:82:2b:af:14:
74:44:ab:96:45:b8:86:90:02:6b:00:6a:53:78:45:
57:7f:4b:de:0b:3c:e8:27:59:00:75:95:ef:3f:11:
27:3c:37:fa:72:95:a0:58:50:63:d2:c6:f4:8f:e0:
98:b1:54:08:07:3c:a5:ba:12:2a:39:61:27:f5:e4:
e4:da:1c:28:3c:aa:8f:16:95:26:c9:e7:3f:7c:8b:
f5:d5:7f:45:76:1e:6c:96:7d:ae:5b:ad:c1:fc:0e:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:3A:F9:5D:0C:43:52:48:A1:0B:E4:AD:8D:05:84:4F:11:D3:7A
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/Mlw6-V0MQ1JIoQvkrY0FhE8R03o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.96.0/19
193.138.87.0/24
194.32.108.0-194.32.110.255
212.26.128.0/19
212.80.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:81:de:e6:6e:1b:83:a7:7e:1c:94:9d:1d:3b:c4:81:c5:4d:
61:6e:1a:62:81:8e:48:6d:57:48:f7:ff:21:4b:b2:4e:54:d9:
cc:cd:3c:78:aa:a8:fa:18:e1:47:63:8f:59:1e:b1:52:30:74:
ad:95:c9:19:73:69:43:03:e9:b6:b1:a7:8f:df:18:b4:c1:09:
69:d6:03:0c:1c:1a:f3:9e:3a:8c:fa:81:e2:0f:df:c7:99:eb:
b6:f6:7f:f1:cb:87:b2:07:b4:36:5a:a6:4e:4c:0b:6d:6e:34:
a6:c2:3c:3f:a9:08:5a:8b:88:fe:ed:52:c0:00:7f:86:97:c9:
bb:04:12:48:85:fb:0c:31:b9:e8:53:ae:4d:ef:a0:69:14:aa:
02:80:0e:3b:53:fe:fe:26:27:a0:0d:ba:d7:1c:9c:55:08:cf:
1f:cb:b7:1d:46:3e:80:91:db:07:96:65:7b:30:03:05:8e:e0:
72:db:96:1f:a0:90:f5:fe:61:0d:be:89:94:ab:fd:92:6a:6e:
63:de:f4:eb:91:b1:86:dc:4f:e9:d4:98:b3:68:be:41:68:6e:
e2:52:b7:e0:e5:f8:39:13:b7:7f:71:8d:86:ec:d4:69:45:07:
d9:03:71:24:16:b4:d1:30:cc:27:32:e3:9b:6b:f7:0b:a1:04:
4e:20:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:24 2023 by rpki-client on console-fra.rpki-client.org