Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/MHaIKgczV1pJOih5hnLEJxKhLPg.roa
File: MHaIKgczV1pJOih5hnLEJxKhLPg.roa (raw, json)
Hash identifier: CvPT9vJHxvBcDqSLFjlP600JRffoFHneVZ7SrjmFE10=
Subject key identifier: 30:76:88:2A:07:33:57:5A:49:3A:28:79:86:72:C4:27:12:A1:2C:F8
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0182E6427584A5FB1E3A56DADFA716927254
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/MHaIKgczV1pJOih5hnLEJxKhLPg.roa
Signing time: Sun 28 Aug 2022 21:01:31 +0000
ROA not before: Sun 28 Aug 2022 21:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202777
IP address blocks: 185.124.149.0/24 maxlen: 24
185.124.151.0/24 maxlen: 32
185.124.148.0/24 maxlen: 32
185.124.150.0/24 maxlen: 24
185.235.141.0/24 maxlen: 24
2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e6:42:75:84:a5:fb:1e:3a:56:da:df:a7:16:92:72:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Aug 28 21:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3076882a0733575a493a28798672c42712a12cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:62:52:8e:50:57:f8:a5:60:61:26:2e:5b:
bf:bc:90:70:ad:5e:8c:6f:5a:f5:cb:c6:fc:90:c5:
29:9d:17:bc:bf:98:14:07:c3:61:19:74:2b:1a:f0:
e0:1f:2a:b7:39:7a:a8:6d:9d:85:10:46:08:ee:7a:
24:af:38:2a:79:8b:f5:0d:52:c4:ee:d2:bc:c1:4f:
81:e8:79:43:70:45:80:7c:2b:92:fd:4d:a6:07:7d:
e9:63:2f:62:65:58:a5:0d:45:09:31:de:6d:fc:f4:
c7:bb:bc:c3:07:7a:22:43:0a:d3:54:10:8e:70:c4:
38:a1:f2:c6:d1:0d:78:0a:6c:e0:25:4f:30:51:f3:
05:70:84:70:9c:f3:21:08:24:93:4e:6e:e5:9b:e5:
cb:d0:70:5c:68:87:93:de:bb:47:d3:23:06:e2:11:
ce:14:19:89:56:80:7d:68:03:b6:37:f0:00:aa:73:
53:a9:32:6f:95:35:38:4b:61:57:7d:91:11:d7:f8:
80:12:f0:f0:37:ec:b6:fb:92:a1:3e:c7:43:9f:85:
d8:98:d1:ea:3e:36:fc:3b:f1:62:c5:88:83:e5:23:
f6:2a:62:54:fe:0b:0c:25:8e:ba:e8:6e:d4:c9:91:
ac:a4:18:31:1b:4f:63:6e:b5:71:7a:49:34:54:72:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:76:88:2A:07:33:57:5A:49:3A:28:79:86:72:C4:27:12:A1:2C:F8
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/MHaIKgczV1pJOih5hnLEJxKhLPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
185.235.141.0/24
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
07:2a:39:8c:75:78:0f:dd:e6:bb:d1:4d:07:cd:55:33:81:e6:
9a:c5:4d:d4:0f:d6:ed:d3:c1:0e:83:2d:8a:7e:06:d8:36:a5:
87:de:7b:87:db:91:86:2b:aa:3a:51:6d:ee:03:c7:c5:68:70:
6d:db:51:b9:ad:e9:5e:29:ec:89:12:cd:ae:ee:50:24:e7:6a:
46:10:b1:a6:cf:2d:3f:68:dd:b8:26:29:7b:36:e5:40:4a:7c:
57:14:b8:08:58:31:ca:ef:e9:60:37:e8:1a:e0:ba:0f:0f:08:
48:e5:ea:a3:9f:83:d4:53:cb:b2:ba:5d:fc:63:7e:b6:0b:37:
fb:9f:95:94:1c:dc:ca:1b:77:2f:0b:57:67:db:0f:c0:bc:56:
94:75:dc:55:9d:a4:88:8e:4d:5f:c8:49:df:1f:30:fb:26:6e:
d7:5d:5b:5a:9c:e6:06:70:58:06:88:ea:c7:f0:3c:58:5a:22:
94:0e:3f:dd:44:94:f5:b0:36:03:e7:4b:b6:39:28:a5:56:29:
8f:0f:94:55:d9:34:93:8c:ec:c2:7a:69:29:dc:ef:40:78:05:
84:fa:27:8f:6c:bb:49:90:59:70:01:5d:b9:d4:9c:2d:53:8d:
67:3a:c0:c2:c6:4e:d0:7b:df:a7:08:67:cc:6e:9c:d0:06:db:
ab:5d:c3:f0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYLmQnWEpfseOlba36cWknJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRk
ZWRmOGMwHhcNMjIwODI4MjEwMTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDc2ODgyYTA3MzM1NzVhNDkzYTI4Nzk4NjcyYzQyNzEyYTEyY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYliUo5QV/ilYGEmLlu/vJBwrV6M
b1r1y8b8kMUpnRe8v5gUB8NhGXQrGvDgHyq3OXqobZ2FEEYI7nokrzgqeYv1DVLE
7tK8wU+B6HlDcEWAfCuS/U2mB33pYy9iZVilDUUJMd5t/PTHu7zDB3oiQwrTVBCO
cMQ4ofLG0Q14CmzgJU8wUfMFcIRwnPMhCCSTTm7lm+XL0HBcaIeT3rtH0yMG4hHO
FBmJVoB9aAO2N/AAqnNTqTJvlTU4S2FXfZER1/iAEvDwN+y2+5KhPsdDn4XYmNHq
Pjb8O/FixYiD5SP2KmJU/gsMJY666G7UyZGspBgxG09jbrVxekk0VHLujwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDB2iCoHM1daSTooeYZyxCcSoSz4MB8GA1UdIwQY
MBaAFA8viyuUch6Sj2GItc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2Mt
NzIyNmE4ODQ1ZTAxLzEvTUhhSUtnY3pWMXBKT2loNWhuTEVKeEtoTFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAx
LzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXyUAwQA
ueuNMA0EAgACMAcDBQMqBu6AMA0GCSqGSIb3DQEBCwUAA4IBAQAHKjmMdXgP3ea7
0U0HzVUzgeaaxU3UD9bt08EOgy2KfgbYNqWH3nuH25GGK6o6UW3uA8fFaHBt21G5
releKeyJEs2u7lAk52pGELGmzy0/aN24Jil7NuVASnxXFLgIWDHK7+lgN+ga4LoP
DwhI5eqjn4PUU8uyul38Y362Czf7n5WUHNzKG3cvC1dn2w/AvFaUddxVnaSIjk1f
yEnfHzD7Jm7XXVtanOYGcFgGiOrH8DxYWiKUDj/dRJT1sDYD50u2OSilVimPD5RV
2TSTjOzCemkp3O9AeAWE+iePbLtJkFlwAV251JwtU41nOsDCxk7Qe9+nCGfMbpzQ
BturXcPw
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org