Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/mqaeVI266tfj4ClsWCUjdAMA7CI.roa
File: mqaeVI266tfj4ClsWCUjdAMA7CI.roa (raw, json)
Hash identifier: RrU2dEhnMHtOiVuzmamBg/uG8YT2EkJ6qqvYAuDeB4c=
Subject key identifier: 9A:A6:9E:54:8D:BA:EA:D7:E3:E0:29:6C:58:25:23:74:03:00:EC:22
Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial: 082A754A
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/mqaeVI266tfj4ClsWCUjdAMA7CI.roa
Signing time: Sat 01 Jan 2022 07:56:48 +0000
ROA not before: Sat 01 Jan 2022 07:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42612
IP address blocks: 46.231.120.0/21 maxlen: 24
46.231.120.0/24 maxlen: 24
82.98.128.0/18 maxlen: 24
185.192.220.0/22 maxlen: 24
2a02:be8::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137000266 (0x82a754a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
Validity
Not Before: Jan 1 07:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aa69e548dbaead7e3e0296c582523740300ec22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:d2:38:e5:9a:97:fd:16:ef:34:5b:32:b3:
ec:0f:d8:91:9a:a7:c8:b3:32:91:a7:ae:32:81:dc:
48:9f:ee:24:37:f3:e8:f1:80:24:bf:82:14:fc:32:
99:b7:39:7c:1a:e7:6f:8d:0d:d3:47:37:40:ae:33:
de:b3:3d:d1:cb:40:9d:ca:d6:39:c1:08:59:22:a2:
1e:4b:57:f9:d4:08:ca:02:cd:05:5a:a3:84:95:60:
ca:8a:ca:5a:c8:93:9c:0c:6c:11:5f:f2:47:de:43:
30:43:e2:6a:38:17:5c:ac:b0:e4:cf:60:63:21:56:
e4:4f:8b:68:b2:a5:1f:7e:63:77:81:a1:ac:78:2c:
25:09:b4:64:43:12:47:a7:b0:66:45:6a:8f:ee:5f:
88:91:3a:13:78:a8:9d:01:3e:04:b1:ad:72:7f:6e:
b8:e9:12:c6:a6:45:5a:2b:64:86:7d:e3:68:49:11:
9c:f3:6c:aa:9e:8d:8e:c2:22:77:a2:46:2b:69:78:
96:6f:e3:88:22:e6:cc:ca:e5:ee:6c:c9:e0:85:1d:
18:60:7b:19:c8:2a:8a:fb:56:be:e4:4c:f9:e6:97:
bd:18:a0:15:98:e6:5d:9d:1c:17:ce:ff:5e:2a:c0:
15:71:23:16:26:64:ec:bb:64:af:bb:52:e4:99:11:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A6:9E:54:8D:BA:EA:D7:E3:E0:29:6C:58:25:23:74:03:00:EC:22
X509v3 Authority Key Identifier:
keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/mqaeVI266tfj4ClsWCUjdAMA7CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.120.0/21
82.98.128.0/18
185.192.220.0/22
IPv6:
2a02:be8::/32
Signature Algorithm: sha256WithRSAEncryption
17:b0:f5:09:da:1b:e0:60:be:c7:8c:f6:8a:f5:0c:87:0d:31:
08:df:ab:67:10:e8:f0:c5:29:6a:2f:d5:e2:ea:5b:2b:86:6c:
7a:af:64:5c:ea:8b:e1:0d:b8:4d:a8:16:f1:c1:3e:9a:54:27:
dd:86:2c:58:16:04:0b:c4:54:8a:4c:0a:a2:1d:b1:00:91:38:
c2:b7:7c:d4:fc:3f:2c:a7:a7:46:92:a7:94:04:14:d5:0c:e6:
70:20:90:f6:46:22:68:d8:31:fc:ef:15:a4:2f:da:7a:fd:4a:
3a:82:c0:b1:76:00:fc:7e:26:00:f3:23:22:47:21:65:d3:00:
14:0c:c6:66:88:16:ad:c1:bc:04:27:20:f7:14:b8:53:63:5e:
cd:a1:27:cc:8a:2b:f9:23:1c:9f:92:79:23:fa:b9:75:37:a5:
7d:7b:64:c0:9b:0b:0a:c2:8b:28:d5:3e:bf:6f:c2:93:99:8c:
e8:d2:72:af:70:9c:20:b9:d5:5d:2d:16:01:38:7c:5d:48:a7:
24:3e:3f:db:cd:67:2a:90:96:9f:d7:cd:05:10:6c:7c:ae:0b:
e3:d7:1d:df:4a:66:1f:07:85:c7:0d:10:32:69:04:b4:af:1d:
db:94:95:ee:98:b6:95:e5:1d:d4:0d:d6:33:39:59:98:47:6c:
fa:7f:ec:fa
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECCp1SjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzVlNzI1Y2FjZjgzYzk3ZjQ1N2E1Njc2MmNmODQ2ZDY0MzExN2NkMB4XDTIyMDEw
MTA3NTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFhNjllNTQ4ZGJh
ZWFkN2UzZTAyOTZjNTgyNTIzNzQwMzAwZWMyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOBy0jjlmpf9Fu80WzKz7A/YkZqnyLMykaeuMoHcSJ/uJDfz
6PGAJL+CFPwymbc5fBrnb40N00c3QK4z3rM90ctAncrWOcEIWSKiHktX+dQIygLN
BVqjhJVgyorKWsiTnAxsEV/yR95DMEPiajgXXKyw5M9gYyFW5E+LaLKlH35jd4Gh
rHgsJQm0ZEMSR6ewZkVqj+5fiJE6E3ionQE+BLGtcn9uuOkSxqZFWitkhn3jaEkR
nPNsqp6NjsIid6JGK2l4lm/jiCLmzMrl7mzJ4IUdGGB7GcgqivtWvuRM+eaXvRig
FZjmXZ0cF87/XirAFXEjFiZk7Ltkr7tS5JkR7d8CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSapp5Ujbrq1+PgKWxYJSN0AwDsIjAfBgNVHSMEGDAWgBQzXnJcrPg8l/RX
pWdiz4RtZDEXzTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L00xNXlYS3o0UEpmMFY2Vm5Zcy1FYldReEY4MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTIvMDI2NTQ4LTUwMTItNGFkMC1hNWJiLTgyYzA1NjA1OTVjZC8x
L21xYWVWSTI2NnRmajRDbHNXQ1VqZEFNQTdDSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIv
MDI2NTQ4LTUwMTItNGFkMC1hNWJiLTgyYzA1NjA1OTVjZC8xL00xNXlYS3o0UEpm
MFY2Vm5Zcy1FYldReEY4MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAy7neAMEBlJigAMEArnA3DANBAIA
AjAHAwUAKgIL6DANBgkqhkiG9w0BAQsFAAOCAQEAF7D1Cdob4GC+x4z2ivUMhw0x
CN+rZxDo8MUpai/V4upbK4Zseq9kXOqL4Q24TagW8cE+mlQn3YYsWBYEC8RUikwK
oh2xAJE4wrd81Pw/LKenRpKnlAQU1QzmcCCQ9kYiaNgx/O8VpC/aev1KOoLAsXYA
/H4mAPMjIkchZdMAFAzGZogWrcG8BCcg9xS4U2NezaEnzIor+SMcn5J5I/q5dTel
fXtkwJsLCsKLKNU+v2/Ck5mM6NJyr3CcILnVXS0WATh8XUinJD4/281nKpCWn9fN
BRBsfK4L49cd30pmHweFxw0QMmkEtK8d25SV7pi2leUd1A3WMzlZmEds+n/s+g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:32 2023 by rpki-client on console-fra.rpki-client.org