Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Mf4UB5FIMoWubPdLD5kQbU8BbOs.roa
File: Mf4UB5FIMoWubPdLD5kQbU8BbOs.roa (raw, json)
Hash identifier: isna7VgCh8Gx3nz/ThYGxFm1JoBAhfvxdLr1CtGyfC0=
Subject key identifier: 31:FE:14:07:91:48:32:85:AE:6C:F7:4B:0F:99:10:6D:4F:01:6C:EB
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 04FC9097
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Mf4UB5FIMoWubPdLD5kQbU8BbOs.roa
Signing time: Fri 13 May 2022 09:45:40 +0000
ROA not before: Fri 13 May 2022 09:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207743
IP address blocks: 188.74.129.0/24 maxlen: 24
188.74.132.0/22 maxlen: 24
188.119.156.0/23 maxlen: 24
5.154.252.0/23 maxlen: 23
5.157.130.0/23 maxlen: 23
5.157.129.0/24 maxlen: 24
5.154.254.0/23 maxlen: 23
37.35.42.0/23 maxlen: 23
37.35.40.0/23 maxlen: 23
178.157.72.0/22 maxlen: 24
188.74.210.0/23 maxlen: 23
178.157.102.0/23 maxlen: 23
188.74.240.0/22 maxlen: 24
188.74.168.0/23 maxlen: 23
188.74.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83660951 (0x4fc9097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 13 09:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31fe140791483285ae6cf74b0f99106d4f016ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:b8:0a:06:4c:f4:50:37:b7:76:04:c9:83:
c0:c8:b7:63:88:a6:8f:60:87:5a:fe:5b:0d:99:57:
69:25:d4:09:f3:fd:bc:be:7c:14:e1:2f:7b:0b:94:
a4:64:2c:eb:ba:42:85:ae:00:9f:ae:ae:ac:71:c5:
92:72:2a:92:88:02:b8:a6:9f:69:d6:da:aa:2f:e4:
e1:a3:24:1f:b7:57:92:89:ff:be:5d:f3:1a:81:93:
a7:b1:95:c6:fa:95:7c:db:d6:da:1a:39:30:b9:2b:
80:fa:59:47:0e:c9:b5:89:83:50:7c:c2:c5:d0:8d:
0d:68:16:8e:de:d4:5f:3a:52:27:31:aa:fd:0d:49:
07:3f:54:17:fd:5f:70:31:89:98:18:e1:5d:c3:d8:
79:b6:31:58:ad:9b:ed:8d:25:9e:44:86:0f:ea:30:
fe:83:8e:48:aa:14:98:5b:bb:e8:2f:38:73:82:ef:
34:4c:f9:6e:72:3f:90:9e:58:9a:59:94:09:a2:11:
73:bd:8f:8b:3a:d4:73:ad:a9:cc:ef:8b:dd:c9:d9:
2c:40:e7:c0:c8:4b:da:ec:6b:44:ec:bf:96:35:57:
e7:fb:44:41:a4:d8:dc:0b:7b:cd:c4:71:96:78:74:
11:fb:56:fe:1b:60:b8:91:22:a4:66:4a:4c:3e:01:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:14:07:91:48:32:85:AE:6C:F7:4B:0F:99:10:6D:4F:01:6C:EB
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Mf4UB5FIMoWubPdLD5kQbU8BbOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.252.0/22
5.157.129.0-5.157.131.255
37.35.40.0/22
178.157.72.0/22
178.157.102.0/23
188.74.129.0/24
188.74.132.0/22
188.74.168.0/23
188.74.182.0/23
188.74.210.0/23
188.74.240.0/22
188.119.156.0/23
Signature Algorithm: sha256WithRSAEncryption
68:cd:94:48:e7:5b:d1:3d:9c:e6:9a:6b:63:de:d0:4e:80:2b:
2b:a9:0c:ee:20:be:a3:f9:b0:1f:bf:c0:f3:1e:db:11:5d:2b:
b1:b4:65:be:86:4a:9f:1d:b5:0e:d7:ee:03:37:8c:dc:37:41:
9c:4e:31:ad:77:19:2d:45:d7:2e:b7:bf:8c:de:73:38:08:3d:
6d:a6:6a:e8:3b:c0:65:a0:ef:e1:dd:18:f6:a9:2e:80:8b:b9:
f0:6f:c0:f6:7e:cd:cc:95:19:07:ab:b3:d5:46:50:df:17:0a:
cc:85:10:19:fd:88:96:d6:4b:6e:e4:a0:8d:77:e9:33:c9:52:
23:87:d5:29:f3:54:58:ea:55:0c:88:a9:68:16:34:96:f1:76:
96:79:e9:de:30:ef:20:98:8d:ef:d5:2b:cd:3d:7c:ef:d3:af:
5c:e3:94:76:3a:3d:0f:fb:c8:47:05:d5:90:ce:c0:24:a2:3d:
9f:c7:5e:46:e9:31:08:2f:6e:95:10:7c:9e:43:c9:36:0e:c0:
54:56:57:53:1d:29:eb:c3:a3:99:63:53:28:4c:14:2e:52:2f:
f3:53:f9:da:15:5a:a5:0e:bf:25:f7:65:49:a5:49:e9:26:7a:
d6:b2:d9:21:5f:29:4b:fd:28:44:4f:43:0b:f6:c0:4f:34:2a:
d1:d7:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-ams.rpki-client.org