Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/MksSg427nxwbkGepVqrQ2OGzFOg.roa
File: MksSg427nxwbkGepVqrQ2OGzFOg.roa (raw, json)
Hash identifier: Zif7jh+LyTtWDiGN9TamnhYJrEYt5e6M4giiL3MW6+Q=
Subject key identifier: 32:4B:12:83:8D:BB:9F:1C:1B:90:67:A9:56:AA:D0:D8:E1:B3:14:E8
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 01829DE6C435BE205740A0A4F4AF5C4CF829
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/MksSg427nxwbkGepVqrQ2OGzFOg.roa
Signing time: Sun 14 Aug 2022 19:48:42 +0000
ROA not before: Sun 14 Aug 2022 19:48:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50558
IP address blocks: 37.32.112.0/20 maxlen: 20
37.32.120.0/24 maxlen: 24
37.32.124.0/23 maxlen: 23
185.49.96.0/24 maxlen: 24
185.49.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:e6:c4:35:be:20:57:40:a0:a4:f4:af:5c:4c:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Aug 14 19:48:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=324b12838dbb9f1c1b9067a956aad0d8e1b314e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:4e:01:36:e1:a8:20:92:e7:88:b9:66:89:
ce:f7:bc:c0:92:a9:20:9c:e9:43:92:a3:ec:e7:33:
80:ad:25:94:ad:6e:01:40:2b:69:46:d6:7f:ab:da:
6c:7c:bc:ee:3c:bb:7a:0e:d7:3a:b8:c7:0a:b6:88:
46:ae:71:71:24:6e:d1:44:cb:94:22:da:24:c2:ac:
c3:8d:b8:11:f8:98:57:24:d5:bc:c5:2c:1a:39:6d:
0b:ea:d5:5d:f8:e2:31:ce:ad:c7:ab:ec:20:68:51:
d7:34:a2:30:4a:60:01:69:2c:5c:8d:f3:1a:fe:94:
75:10:ec:f6:56:c0:a5:3f:02:02:3b:07:94:4e:60:
f9:38:e6:c8:d8:31:a4:dc:50:90:19:6c:37:db:1c:
d7:1b:90:29:8d:ab:8a:7b:5e:fd:ea:fb:18:80:40:
d7:2a:a0:4a:c9:dc:46:5f:2f:0a:5c:4f:47:e5:99:
6a:27:da:9e:e0:72:27:89:39:23:0b:d2:d8:8d:1e:
f6:fe:6a:19:19:18:af:f4:3c:ee:33:92:47:39:93:
05:46:f6:ee:12:e9:a1:40:b2:04:6e:9c:03:a0:9c:
4e:b6:3f:2a:dd:89:d4:67:8a:f4:f2:6d:30:9d:34:
85:29:91:48:fd:ce:41:ae:14:4c:a9:6f:bc:a8:35:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:12:83:8D:BB:9F:1C:1B:90:67:A9:56:AA:D0:D8:E1:B3:14:E8
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/MksSg427nxwbkGepVqrQ2OGzFOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.112.0/20
185.49.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:5c:4b:b2:b3:a5:d5:67:e0:a4:e2:85:d7:44:5e:a4:b3:77:
b2:99:b9:7f:69:6d:d0:89:4d:18:21:38:91:cb:a3:9a:89:70:
c1:c6:dc:6d:e6:70:39:17:7b:c4:7e:d1:6d:61:c5:bb:0d:56:
2f:c5:8b:a5:aa:68:41:ad:52:8e:ab:9c:5d:a2:e9:8d:55:c3:
c6:6d:7a:a1:10:96:af:23:aa:b4:8f:41:46:49:02:c6:85:13:
93:97:43:cb:20:e3:0a:b9:f5:ab:cb:39:a6:1d:bf:67:9c:4d:
c9:9b:b6:13:f9:60:b3:9a:f2:38:d6:fa:53:b5:d6:d7:0b:d7:
3b:a5:e1:75:e6:55:6b:9b:7b:4f:e8:f3:5e:81:ab:7b:15:5c:
6b:25:ab:57:f4:ab:bd:ea:74:ab:8d:ed:6c:4a:59:f7:f7:14:
c6:eb:2d:82:9d:fe:15:16:5d:e0:fe:66:4e:6c:bf:9e:ed:0e:
20:a8:38:b5:23:bd:8f:3a:e7:0f:95:43:3a:c6:74:9b:f3:ba:
a0:3b:76:72:be:a4:10:cb:57:31:5f:16:d8:05:a6:e2:e5:5e:
32:7c:73:32:5f:de:80:e3:93:f1:89:26:2d:c6:ea:56:42:a6:
c0:64:94:86:b7:1e:c0:2a:5d:50:7a:07:86:67:ea:ed:43:6e:
b9:c6:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:08 2025 by rpki-client