Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/mLJ-ERuWj11D0oM-3_aN9AX7qDc.roa
File: mLJ-ERuWj11D0oM-3_aN9AX7qDc.roa (raw, json)
Hash identifier: f41aK17OgTv9lcgiYsl2WC5YP0NZILUy8dT/j3lJPHo=
Subject key identifier: 98:B2:7E:11:1B:96:8F:5D:43:D2:83:3E:DF:F6:8D:F4:05:FB:A8:37
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 06A0D8D2
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/mLJ-ERuWj11D0oM-3_aN9AX7qDc.roa
Signing time: Wed 20 Apr 2022 13:26:00 +0000
ROA not before: Wed 20 Apr 2022 13:26:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111204562 (0x6a0d8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Apr 20 13:26:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98b27e111b968f5d43d2833edff68df405fba837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:90:e8:7c:67:43:54:59:01:f5:96:96:54:84:
77:46:c6:94:10:b4:c8:f8:d8:26:66:09:ee:fc:50:
00:73:34:12:86:48:b6:23:7f:45:36:70:a0:12:ac:
50:cc:1c:09:9b:47:4d:e6:78:93:30:a6:64:09:99:
62:fa:bc:fa:76:57:10:e4:21:df:b6:ea:b7:d3:d1:
db:86:e7:e5:24:d5:6f:48:7b:d8:61:90:0a:f5:0d:
44:f3:a2:6d:db:c2:cd:c9:5d:99:17:4d:07:a4:8c:
f7:8d:7f:81:29:2e:82:a4:b4:c9:3b:8d:e6:07:bb:
40:4b:04:ba:8a:97:17:8c:c3:8d:89:75:73:13:d8:
00:18:a6:81:ad:34:70:2b:7e:82:df:88:e1:eb:d5:
56:3f:c6:25:29:34:8e:fd:c7:2b:11:c4:93:0f:4f:
2f:bc:ec:45:b1:81:4d:2c:9e:b9:84:a4:43:9d:a8:
bc:77:05:1b:b5:68:20:35:72:c2:fd:91:ae:5b:86:
60:da:05:7b:52:2e:7f:c7:43:ce:41:5d:b8:21:2a:
78:8a:c9:26:7d:eb:92:01:5b:e6:05:d3:c6:e1:3c:
2c:a1:86:d7:7a:77:f9:da:12:c3:ab:f0:1a:52:2f:
aa:ae:97:95:a3:7c:e7:dc:c0:0a:75:b8:d3:b5:0f:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:7E:11:1B:96:8F:5D:43:D2:83:3E:DF:F6:8D:F4:05:FB:A8:37
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/mLJ-ERuWj11D0oM-3_aN9AX7qDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/23
45.11.88.0/22
185.149.232.0/22
185.202.174.0/24
193.39.184.0/24
Signature Algorithm: sha256WithRSAEncryption
83:aa:9f:19:16:63:a7:00:c2:17:7b:2f:f3:66:16:5f:b3:3b:
a9:ba:58:ad:f8:b8:19:5d:91:9a:95:86:f3:ca:56:28:85:c5:
96:d2:4e:d7:7b:b2:da:e5:1f:6c:ae:08:d8:bb:2e:31:4d:88:
33:a2:5b:d9:99:31:ad:5c:da:29:3a:c9:dd:7b:99:cf:11:b9:
41:3e:71:4c:44:29:64:98:06:e7:e6:c2:8d:72:04:36:f3:cb:
76:b8:d7:c5:61:24:d9:ee:ea:87:15:87:af:38:61:8a:6e:f6:
b6:97:88:78:2b:d6:48:17:91:be:87:ae:be:60:7a:09:85:74:
2c:e8:51:1e:66:62:3e:15:41:94:81:f9:b2:56:8d:ce:e1:0a:
09:dc:ba:09:6f:4b:07:bd:19:fe:be:c5:ef:5f:c8:1a:42:06:
b9:02:7f:c3:fe:17:a7:31:e8:13:95:aa:02:53:ab:13:ec:53:
00:a4:84:e8:a6:f3:34:cc:64:71:dc:10:e9:4d:8f:cb:7c:71:
d0:9c:e7:ec:8e:8c:77:d2:6d:a2:90:b5:94:cf:46:ba:fe:55:
0f:9c:c2:7b:0f:7c:1f:f0:cb:ea:09:0b:9f:b6:78:2d:97:30:
14:d7:d8:5f:f6:a8:76:0c:59:bc:e0:c3:51:d3:0d:38:f4:27:
d6:ee:ef:d5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBqDY0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWM4YjczYWI3YmRlYjc2ZmY0OGIyY2EwOTk2MTZlZGJlNzFjNDI2MB4XDTIyMDQy
MDEzMjYwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOThiMjdlMTExYjk2
OGY1ZDQzZDI4MzNlZGZmNjhkZjQwNWZiYTgzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAImQ6HxnQ1RZAfWWllSEd0bGlBC0yPjYJmYJ7vxQAHM0EoZI
tiN/RTZwoBKsUMwcCZtHTeZ4kzCmZAmZYvq8+nZXEOQh37bqt9PR24bn5STVb0h7
2GGQCvUNRPOibdvCzcldmRdNB6SM941/gSkugqS0yTuN5ge7QEsEuoqXF4zDjYl1
cxPYABimga00cCt+gt+I4evVVj/GJSk0jv3HKxHEkw9PL7zsRbGBTSyeuYSkQ52o
vHcFG7VoIDVywv2RrluGYNoFe1Iuf8dDzkFduCEqeIrJJn3rkgFb5gXTxuE8LKGG
13p3+doSw6vwGlIvqq6XlaN859zACnW407UPnucCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSYsn4RG5aPXUPSgz7f9o30BfuoNzAfBgNVHSMEGDAWgBSByLc6t73rdv9I
ssoJlhbtvnHEJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djaTNPcmU5NjNiX1NMTEtDWllXN2I1eHhDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvMjA3OTM0LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8x
L21MSi1FUnVXajExRDBvTS0zX2FOOUFYN3FEYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
MjA3OTM0LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8xL2djaTNPcmU5NjNi
X1NMTEtDWllXN2I1eHhDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAQW1pAMEAi0LWAMEArmV6AMEALnK
rgMEAMEnuDANBgkqhkiG9w0BAQsFAAOCAQEAg6qfGRZjpwDCF3sv82YWX7M7qbpY
rfi4GV2RmpWG88pWKIXFltJO13uy2uUfbK4I2LsuMU2IM6Jb2ZkxrVzaKTrJ3XuZ
zxG5QT5xTEQpZJgG5+bCjXIENvPLdrjXxWEk2e7qhxWHrzhhim72tpeIeCvWSBeR
voeuvmB6CYV0LOhRHmZiPhVBlIH5slaNzuEKCdy6CW9LB70Z/r7F71/IGkIGuQJ/
w/4XpzHoE5WqAlOrE+xTAKSE6KbzNMxkcdwQ6U2Py3xx0Jzn7I6Md9JtopC1lM9G
uv5VD5zCew98H/DL6gkLn7Z4LZcwFNfYX/aodgxZvODDUdMNOPQn1u7v1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org