Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/MoGOO_0neHZfatlee0WvtWTVOVQ.roa
File: MoGOO_0neHZfatlee0WvtWTVOVQ.roa (raw, json)
Hash identifier: eq4Js1zCVyVDZ3AmZXyBY2JSetfO6h1FElT3+/OFo68=
Subject key identifier: 32:81:8E:3B:FD:27:78:76:5F:6A:D9:5E:7B:45:AF:B5:64:D5:39:54
Certificate issuer: /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial: 3730BFA8
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/MoGOO_0neHZfatlee0WvtWTVOVQ.roa
Signing time: Sat 01 Jan 2022 10:59:32 +0000
ROA not before: Sat 01 Jan 2022 10:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24592
IP address blocks: 185.86.32.0/22 maxlen: 22
212.92.32.0/19 maxlen: 19
212.92.39.0/24 maxlen: 24
217.13.112.0/20 maxlen: 20
212.92.55.0/24 maxlen: 24
217.13.124.0/24 maxlen: 24
212.92.60.0/22 maxlen: 22
89.45.36.0/22 maxlen: 22
2a02:23c8::/40 maxlen: 40
2a02:23c8:ff00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925941672 (0x3730bfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Validity
Not Before: Jan 1 10:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32818e3bfd2778765f6ad95e7b45afb564d53954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:1a:2b:57:32:e9:9c:1a:f4:4b:29:83:57:
cb:63:2c:01:c5:eb:2a:2d:0d:f2:6c:49:81:13:04:
34:bb:d1:d2:61:c4:a1:8f:3f:70:37:54:1c:cb:e4:
c8:2f:77:a5:da:28:80:e5:e1:ca:4c:40:8b:0e:c9:
6d:5d:d6:15:f5:1b:56:5f:37:ca:72:2e:ce:2e:47:
5d:84:d2:6e:fc:13:b9:b3:54:07:c6:71:6d:55:8e:
34:36:57:56:af:a6:03:77:da:6c:b0:8f:2d:6d:ca:
59:ef:72:2d:79:e6:ca:e3:ae:3e:81:a4:ed:86:fa:
2d:33:9f:d8:07:51:79:71:33:cd:2c:2b:5a:95:04:
94:ed:38:cc:23:f4:a0:48:42:9c:db:21:56:73:22:
35:95:e4:85:83:7b:4b:82:cf:79:d0:83:c2:72:66:
fd:45:d6:34:e0:61:d9:19:ed:3e:05:0d:a4:32:96:
5c:32:c7:7b:44:ab:15:e3:7a:26:9d:54:f3:2b:46:
34:60:8f:5b:29:81:eb:e2:48:96:12:b1:c3:78:04:
72:7f:45:65:8f:06:0c:f5:60:35:8f:85:dd:0b:19:
f0:b3:66:93:21:73:31:39:5b:46:85:1b:34:fa:c2:
05:86:6f:7c:94:9c:94:07:d6:d1:ab:6a:1c:43:38:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:8E:3B:FD:27:78:76:5F:6A:D9:5E:7B:45:AF:B5:64:D5:39:54
X509v3 Authority Key Identifier:
keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/MoGOO_0neHZfatlee0WvtWTVOVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.36.0/22
185.86.32.0/22
212.92.32.0/19
217.13.112.0/20
IPv6:
2a02:23c8::/40
2a02:23c8:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
35:84:06:6d:b8:99:95:77:85:1c:3a:6a:5a:76:b3:2f:78:a0:
8f:85:b3:ac:25:84:69:ed:80:17:25:cf:f9:68:1f:16:ba:71:
c0:e6:35:57:05:f3:42:ee:39:9b:21:dd:65:38:fb:44:4a:f7:
16:7d:87:aa:0e:58:ed:a7:b1:00:23:29:8a:dd:df:95:32:59:
86:70:29:4e:6b:f1:8a:6c:55:96:d6:26:fe:14:db:a9:9f:4e:
eb:ba:c5:ab:ff:15:c6:95:9a:f3:8a:3a:14:8d:c6:50:fa:24:
40:7c:43:ed:da:14:e9:11:c0:a6:73:58:66:c9:57:5d:1c:f6:
39:3b:77:60:d5:8e:a6:a2:c7:44:a7:40:0a:ed:76:76:5b:a0:
ac:48:8f:fd:0f:ee:5f:50:c1:dd:9d:46:cd:dc:48:5c:43:dd:
f4:85:b7:f0:07:14:1e:30:e7:95:b1:ef:b9:a9:af:9d:5b:74:
d9:04:7c:45:11:72:b9:8a:67:26:89:d3:10:21:2b:0d:d3:57:
24:de:b2:21:30:e9:f0:5b:68:5e:6c:15:4a:1c:23:81:9d:83:
3c:05:7e:d0:ce:1b:ef:ce:bb:4b:f8:01:c4:90:b6:83:70:c8:
1a:cb:4e:cd:78:fc:33:bc:f8:7b:9d:a0:3f:7d:f0:d9:92:66:
bc:8c:44:97
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIENzC/qDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YWU2MjE0OGIzMGI2NmJkMGEzZGEzODk3ZWNmYmZkOWFmNGY0MzFlMB4XDTIyMDEw
MTEwNTkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzI4MThlM2JmZDI3
Nzg3NjVmNmFkOTVlN2I0NWFmYjU2NGQ1Mzk1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKpqGitXMumcGvRLKYNXy2MsAcXrKi0N8mxJgRMENLvR0mHE
oY8/cDdUHMvkyC93pdoogOXhykxAiw7JbV3WFfUbVl83ynIuzi5HXYTSbvwTubNU
B8ZxbVWONDZXVq+mA3fabLCPLW3KWe9yLXnmyuOuPoGk7Yb6LTOf2AdReXEzzSwr
WpUElO04zCP0oEhCnNshVnMiNZXkhYN7S4LPedCDwnJm/UXWNOBh2RntPgUNpDKW
XDLHe0SrFeN6Jp1U8ytGNGCPWymB6+JIlhKxw3gEcn9FZY8GDPVgNY+F3QsZ8LNm
kyFzMTlbRoUbNPrCBYZvfJSclAfW0atqHEM4AfsCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBQygY47/Sd4dl9q2V57Ra+1ZNU5VDAfBgNVHSMEGDAWgBR65iFIswtmvQo9
o4l+z7/Zr09DHjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2V1WWhTTE1MWnIwS1BhT0pmcy1fMmE5UFF4NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvMzFmMjdhLWI1N2ItNDc4MC04NGQwLTI3MWJkNzJjZGY2OS8x
L01vR09PXzBuZUhaZmF0bGVlMFd2dFdUVk9WUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
MzFmMjdhLWI1N2ItNDc4MC04NGQwLTI3MWJkNzJjZGY2OS8xL2V1WWhTTE1MWnIw
S1BhT0pmcy1fMmE5UFF4NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwHgQCAAEwGAMEAlktJAMEArlWIAMEBdRcIAMEBNkN
cDAWBAIAAjAQAwYAKgIjyAADBgAqAiPI/zANBgkqhkiG9w0BAQsFAAOCAQEANYQG
bbiZlXeFHDpqWnazL3igj4WzrCWEae2AFyXP+WgfFrpxwOY1VwXzQu45myHdZTj7
REr3Fn2Hqg5Y7aexACMpit3flTJZhnApTmvximxVltYm/hTbqZ9O67rFq/8VxpWa
84o6FI3GUPokQHxD7doU6RHApnNYZslXXRz2OTt3YNWOpqLHRKdACu12dlugrEiP
/Q/uX1DB3Z1GzdxIXEPd9IW38AcUHjDnlbHvuamvnVt02QR8RRFyuYpnJonTECEr
DdNXJN6yITDp8FtoXmwVShwjgZ2DPAV+0M4b7867S/gBxJC2g3DIGstOzXj8M7z4
e52gP33w2ZJmvIxElw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org