Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/M_myHcsF-i1H--CW0S9Ko3n_mqs.roa
File: M_myHcsF-i1H--CW0S9Ko3n_mqs.roa (raw, json)
Hash identifier: ZB6NGn+ArV4xHHxJ1BBQDnSSdYODcX+IoDcebYABfks=
Subject key identifier: 33:F9:B2:1D:CB:05:FA:2D:47:FB:E0:96:D1:2F:4A:A3:79:FF:9A:AB
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 18CEC94D
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/M_myHcsF-i1H--CW0S9Ko3n_mqs.roa
Signing time: Sat 01 Jan 2022 15:59:55 +0000
ROA not before: Sat 01 Jan 2022 15:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199484
IP address blocks: 195.142.133.0/24 maxlen: 24
195.142.134.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
185.28.0.0/22 maxlen: 24
195.142.135.0/24 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
195.142.104.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
195.142.105.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
37.75.8.0/24 maxlen: 24
37.75.8.0/21 maxlen: 21
195.142.106.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
195.142.109.0/24 maxlen: 24
195.142.110.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
195.142.107.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
195.142.108.0/24 maxlen: 24
195.142.111.0/24 maxlen: 24
195.142.132.0/24 maxlen: 24
195.142.1.0/24 maxlen: 24
195.142.2.0/24 maxlen: 24
195.142.0.0/24 maxlen: 24
195.142.3.0/24 maxlen: 24
2a03:c040:1::/48 maxlen: 48
2a03:c040::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416205133 (0x18cec94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 1 15:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33f9b21dcb05fa2d47fbe096d12f4aa379ff9aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:4f:0f:29:19:9b:42:dd:b8:c6:a9:fa:f4:
d9:7e:76:5e:ae:11:a6:7a:09:b4:ba:af:b0:b4:4f:
2f:9c:ff:d2:e4:4c:fa:8a:1a:d0:04:d0:11:33:13:
47:bb:81:47:95:1a:5a:64:87:e5:ce:71:7d:47:b2:
3a:ee:08:18:89:7d:f9:1d:b8:10:ad:3e:90:2c:9e:
94:45:26:38:3d:bd:23:93:b0:7b:cc:7c:41:0f:aa:
9f:df:55:38:55:30:70:4f:06:6f:81:12:f3:45:36:
cc:02:db:bd:d6:de:88:30:c4:c0:da:28:fa:18:df:
b1:99:78:0c:24:4b:7a:68:6b:4a:89:75:dc:36:f7:
74:76:45:25:6b:41:22:0c:ae:8b:e3:8d:cf:64:d6:
61:ea:65:5e:bf:2b:14:56:28:78:4d:94:6d:2e:ae:
b2:ee:bc:e1:1c:7a:f1:eb:b4:f1:90:7f:e8:22:b1:
66:c9:03:84:69:61:09:65:03:ef:83:af:8b:4f:56:
a9:0c:37:e8:ce:6c:72:d5:a1:3b:3f:70:37:b5:c7:
b0:a0:a6:a1:14:16:43:82:dd:4d:6f:c1:03:c4:22:
ff:d8:c1:ea:7d:1f:2c:9e:22:e4:20:e2:bf:d4:9f:
89:7b:62:a7:32:c3:33:90:67:f2:d2:79:dc:4d:98:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:B2:1D:CB:05:FA:2D:47:FB:E0:96:D1:2F:4A:A3:79:FF:9A:AB
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/M_myHcsF-i1H--CW0S9Ko3n_mqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a03:c040::/32
Signature Algorithm: sha256WithRSAEncryption
46:2c:68:51:e6:db:38:47:61:19:5e:6b:20:1c:27:66:8d:2f:
1b:38:b1:63:00:a8:8e:42:75:07:b5:6c:8a:de:aa:78:71:c3:
37:30:17:00:86:a6:52:99:b9:a3:6a:6f:8a:57:b3:bd:48:c1:
e3:3b:e2:53:e6:19:70:af:ac:d7:c4:e6:ad:24:3b:7b:3e:4d:
82:1f:1d:98:fd:13:6e:86:7e:5d:54:11:dd:88:f7:7a:ea:33:
dc:18:2c:40:1e:43:43:e0:6f:dc:0f:58:68:3c:c8:35:26:9a:
67:08:de:ed:49:16:a9:65:83:9d:e7:d5:0a:18:d5:78:9a:0f:
f1:66:8d:d2:75:4c:d1:a1:19:9c:03:ee:9b:17:7a:e4:08:bb:
4f:b6:50:53:6d:31:ea:9c:3f:d2:c1:83:f9:9a:e4:ba:91:b1:
61:6f:38:70:2c:1f:40:75:a2:20:11:84:30:eb:b0:d3:45:20:
ea:68:11:a3:a5:a4:90:4e:69:d1:0f:98:4e:07:72:9b:75:79:
a7:3f:59:07:a4:e7:9c:c0:ca:ce:dc:d5:86:c0:46:8e:20:9b:
a6:d3:fc:70:55:28:1d:70:30:86:60:5a:02:6b:11:a6:c9:86:
ae:89:95:f2:00:19:64:4d:fd:be:54:a9:32:69:23:94:cc:61:
72:ee:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:52 2023 by rpki-client on console-ams.rpki-client.org