Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Mmb1Rx2Ikn1qP8UzbaCcr-gO2Jc.roa
File: Mmb1Rx2Ikn1qP8UzbaCcr-gO2Jc.roa (raw, json)
Hash identifier: uVzcZE6Y6Z+GYPC/KC+0SHzh7DSzJcq08qfl+uobQu0=
Subject key identifier: 32:66:F5:47:1D:88:92:7D:6A:3F:C5:33:6D:A0:9C:AF:E8:0E:D8:97
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 351938CC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Mmb1Rx2Ikn1qP8UzbaCcr-gO2Jc.roa
Signing time: Sat 01 Jan 2022 05:46:04 +0000
ROA not before: Sat 01 Jan 2022 05:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.48.0/23 maxlen: 23
185.243.48.0/22 maxlen: 22
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 22
185.124.175.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.44.0/22 maxlen: 22
37.32.47.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890845388 (0x351938cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 05:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3266f5471d88927d6a3fc5336da09cafe80ed897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:ce:be:85:c5:d0:39:26:cf:b5:d7:4e:a2:
c6:a7:18:25:1d:d0:3a:60:66:00:fa:0a:58:fd:64:
0e:56:81:1f:78:f2:39:bd:bc:1d:03:bd:3f:a0:a6:
bd:1f:ed:5c:5d:34:9d:82:18:dc:89:c2:8f:d4:1d:
dc:8b:97:79:20:4f:f6:ef:d2:be:f1:a6:12:e4:7b:
52:e8:c3:c9:0c:f6:28:42:d4:5f:d0:ac:1c:b6:46:
b5:89:0f:ec:40:cb:b1:20:a3:21:ee:33:7c:68:16:
8f:8b:51:d9:57:2b:54:fa:a3:df:09:0a:d0:da:af:
01:8f:2f:d6:be:0b:6c:90:42:57:f1:4d:e1:67:4f:
bd:2f:3f:bc:1d:c6:b0:13:3b:0f:ec:db:ea:3e:13:
2c:be:4e:da:42:6c:f9:99:cd:ed:d4:a3:ca:57:e3:
87:9d:ec:96:40:60:26:5e:98:b9:52:71:9b:c1:fc:
26:09:d2:57:75:27:1b:3b:ad:c9:ca:69:c6:30:9c:
f1:87:36:10:a0:ee:95:6a:d7:56:34:06:4d:4c:40:
71:e7:da:ab:2a:0e:f0:29:ea:af:0a:4a:81:13:12:
7b:23:a0:c8:b3:34:75:71:e9:3e:c8:f0:bc:8a:bd:
b2:f9:07:c4:bb:d3:a4:cd:e5:01:46:c0:a4:6d:22:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:F5:47:1D:88:92:7D:6A:3F:C5:33:6D:A0:9C:AF:E8:0E:D8:97
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Mmb1Rx2Ikn1qP8UzbaCcr-gO2Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.44.0/22
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:24:d7:f3:1f:54:04:4a:48:19:6f:cb:6a:f3:d2:b8:08:ca:
73:f6:29:9a:c0:cb:0b:6a:a0:83:ca:3c:f0:0c:43:4b:e1:d0:
41:52:74:8c:1e:ca:91:6c:cc:95:0f:49:20:1e:02:39:71:fb:
7b:1d:25:df:3b:5b:c3:57:24:63:97:4f:dc:84:0d:d2:6d:bc:
b6:5e:10:18:30:01:f5:cd:1f:5e:c3:01:07:83:18:9a:78:78:
b3:eb:2f:16:f0:98:db:ea:ce:bd:44:30:64:44:39:9c:ea:10:
4b:9a:1a:35:2c:69:15:dc:5b:2e:23:1e:c5:9c:d0:0f:d6:63:
06:f3:30:de:ef:f7:34:df:ae:53:32:df:2d:72:01:11:99:54:
c2:8b:80:c2:de:34:ed:d2:f5:cb:9b:56:2d:73:e7:a1:8e:df:
eb:4a:6e:a1:15:5c:86:5b:11:25:b1:c9:73:f3:8e:cc:ae:dd:
ca:28:a2:b1:1a:53:e1:a4:cb:c6:b6:32:8e:00:41:f6:1f:5f:
e8:22:bc:d0:b2:3e:79:04:a9:ab:7c:70:96:4a:47:c6:ff:2e:
5a:22:66:d7:51:c4:2f:aa:f0:1e:32:d9:21:f9:ec:e0:e7:38:
a3:7c:56:f7:7f:4f:b4:63:b4:14:3d:82:e5:32:71:95:f1:56:
40:a7:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:44 2025 by rpki-client