Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mDIpGb5X-RBK-RGjeb5IFs09E3o.roa
File: mDIpGb5X-RBK-RGjeb5IFs09E3o.roa (raw, json)
Hash identifier: nk6vciYN0FjVadu65Ch1GzObg4dd4Aoltcu43O2PPn4=
Subject key identifier: 98:32:29:19:BE:57:F9:10:4A:F9:11:A3:79:BE:48:16:CD:3D:13:7A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 07AE41B4
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mDIpGb5X-RBK-RGjeb5IFs09E3o.roa
Signing time: Sat 01 Jan 2022 08:01:51 +0000
ROA not before: Sat 01 Jan 2022 08:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206499
IP address blocks: 194.36.26.0/24 maxlen: 32
45.14.69.0/24 maxlen: 24
45.14.68.0/24 maxlen: 32
193.177.223.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128860596 (0x7ae41b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98322919be57f9104af911a379be4816cd3d137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:0d:98:0f:41:d0:5d:41:fd:ea:e0:c7:cf:
cd:1c:0b:72:7f:2b:92:2e:56:3c:33:31:17:9a:65:
fe:9f:f0:09:50:b9:a0:24:3e:16:82:e8:b9:b7:c6:
65:b9:4d:76:10:64:77:6d:38:d0:fe:b9:cf:a4:db:
cd:2b:f4:d9:ec:82:31:6e:b6:48:d9:42:fc:19:2a:
11:5f:43:ab:d1:73:63:df:8f:3e:e0:99:59:e7:04:
78:da:4b:f8:48:29:38:65:b8:d2:26:bd:12:c5:fb:
fe:08:cc:2c:fd:5b:b2:b8:7c:e1:d2:32:06:70:6a:
95:c2:23:4c:9d:de:53:ca:30:e4:77:5a:70:18:27:
7d:5b:e8:d8:fb:0b:11:6b:97:93:7d:36:e9:a1:a6:
fb:18:6d:17:a7:ef:14:42:67:bb:4a:47:1d:69:4f:
45:b2:c2:6f:21:44:f0:18:38:6e:3e:a8:c1:bb:71:
76:7a:00:83:2c:34:0d:7b:bf:97:4a:9c:4b:48:fc:
e7:d9:a3:c0:8d:06:b9:e5:c1:bc:8f:4e:ac:05:64:
d4:0e:eb:82:04:1b:91:66:17:6d:74:67:96:0f:0a:
68:fc:c5:3a:5a:8e:2a:7a:cc:a9:d2:96:bf:4c:62:
bf:60:41:8b:59:d2:a4:f7:ef:76:82:7c:26:87:ad:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:29:19:BE:57:F9:10:4A:F9:11:A3:79:BE:48:16:CD:3D:13:7A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mDIpGb5X-RBK-RGjeb5IFs09E3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.68.0/23
193.177.223.0/24
194.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7d:84:17:59:82:80:5c:ad:3d:5c:b6:4a:82:d2:30:24:60:
ae:3c:c3:c5:99:f1:95:73:a8:39:f6:3f:47:94:b1:df:da:ed:
89:e5:cf:4a:2b:7b:ec:c1:01:9b:46:e2:d1:4a:4f:2e:d8:2a:
c2:0a:a9:e4:1c:37:57:b8:58:79:12:9b:02:d2:e9:85:c8:23:
7f:ce:47:9a:2a:22:5d:ea:7e:c9:bf:22:02:7c:ec:ee:37:a9:
67:68:b2:ae:ca:50:dd:30:0c:42:ff:f6:c9:33:18:56:da:04:
f6:9a:52:1d:2c:1a:92:d3:98:6e:a4:11:a7:97:98:9b:da:44:
a4:51:eb:ce:41:67:2c:26:96:33:98:d7:a9:44:ac:58:4e:ba:
08:6e:30:ab:0c:81:38:d1:90:5f:6b:42:6a:a9:1c:73:b0:0a:
b7:8e:15:cf:30:a8:f8:b1:c5:fb:56:01:36:d8:86:87:3f:86:
3e:31:1c:a3:54:46:e9:b8:3d:51:b9:74:4d:e5:d2:f9:fb:d9:
63:55:2b:e1:f1:b6:b8:55:e2:16:c5:a8:29:94:65:82:f8:db:
19:36:53:4d:ee:d9:4f:fa:f3:0c:5a:22:c4:d5:b1:d6:30:11:
27:76:bf:ee:25:02:df:91:15:51:87:18:89:81:3b:8a:d6:9a:
96:3a:04:5f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEB65BtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEw
MTA4MDE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgzMjI5MTliZTU3
ZjkxMDRhZjkxMWEzNzliZTQ4MTZjZDNkMTM3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3mDZgPQdBdQf3q4MfPzRwLcn8rki5WPDMxF5pl/p/wCVC5
oCQ+FoLoubfGZblNdhBkd2040P65z6TbzSv02eyCMW62SNlC/BkqEV9Dq9FzY9+P
PuCZWecEeNpL+EgpOGW40ia9EsX7/gjMLP1bsrh84dIyBnBqlcIjTJ3eU8ow5Hda
cBgnfVvo2PsLEWuXk3026aGm+xhtF6fvFEJnu0pHHWlPRbLCbyFE8Bg4bj6owbtx
dnoAgyw0DXu/l0qcS0j859mjwI0GueXBvI9OrAVk1A7rggQbkWYXbXRnlg8KaPzF
OlqOKnrMqdKWv0xiv2BBi1nSpPfvdoJ8Joetmk8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSYMikZvlf5EEr5EaN5vkgWzT0TejAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L21ESXBHYjVYLVJCSy1SR2plYjVJRnMwOUUzby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAS0ORAMEAMGx3wMEAMIkGjANBgkq
hkiG9w0BAQsFAAOCAQEAiX2EF1mCgFytPVy2SoLSMCRgrjzDxZnxlXOoOfY/R5Sx
39rtieXPSit77MEBm0bi0UpPLtgqwgqp5Bw3V7hYeRKbAtLphcgjf85HmioiXep+
yb8iAnzs7jepZ2iyrspQ3TAMQv/2yTMYVtoE9ppSHSwaktOYbqQRp5eYm9pEpFHr
zkFnLCaWM5jXqUSsWE66CG4wqwyBONGQX2tCaqkcc7AKt44VzzCo+LHF+1YBNtiG
hz+GPjEco1RG6bg9Ubl0TeXS+fvZY1Ur4fG2uFXiFsWoKZRlgvjbGTZTTe7ZT/rz
DFoixNWx1jARJ3a/7iUC35EVUYcYiYE7itaaljoEXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org