Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/MXS_34vwRnH6ojH3d_cYCYo0ZrE.roa
File: MXS_34vwRnH6ojH3d_cYCYo0ZrE.roa (raw, json)
Hash identifier: VcpJTYk4ao0ecG0nZpyaObjtb2Oxg8qmzHPicBaT/OI=
Subject key identifier: 31:74:BF:DF:8B:F0:46:71:FA:A2:31:F7:77:F7:18:09:8A:34:66:B1
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 259083
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/MXS_34vwRnH6ojH3d_cYCYo0ZrE.roa
Signing time: Tue 28 Jun 2022 11:06:02 +0000
ROA not before: Tue 28 Jun 2022 11:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50889
IP address blocks: 185.136.71.0/24 maxlen: 24
185.136.69.0/24 maxlen: 24
77.111.250.0/24 maxlen: 24
77.111.248.0/24 maxlen: 24
77.111.249.0/24 maxlen: 24
80.84.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461827 (0x259083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Jun 28 11:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3174bfdf8bf04671faa231f777f718098a3466b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:7d:8f:f5:2f:12:c9:11:ae:86:76:0f:90:
d1:b4:9d:56:0e:f9:11:86:c3:2c:d5:36:91:f0:09:
81:f9:b2:f3:15:fd:f1:5c:1b:a7:fc:e1:d9:fa:a7:
61:07:f5:69:8e:e0:cb:21:cd:a8:c5:d5:ee:37:b8:
87:9b:f6:9b:10:c2:c5:d1:f1:2a:5e:18:b9:99:89:
53:6c:cc:82:05:14:d0:c8:80:e4:aa:99:6b:c9:a8:
f3:63:f3:e2:77:18:85:e1:f7:47:9c:4f:be:1e:af:
7a:30:18:a4:02:6d:5c:b0:c5:1c:40:62:57:c2:fd:
d2:ff:2b:07:c1:d7:76:50:dc:9b:23:62:72:c1:5a:
31:d9:71:25:cf:49:e3:51:77:08:1f:80:fa:05:f1:
89:8b:bf:bd:19:a7:6f:e9:64:83:7e:65:71:09:e6:
81:df:5c:79:aa:c5:d5:f4:05:6b:03:a6:2b:4d:6c:
4f:e9:fd:98:66:3f:71:65:e1:fd:45:f5:0e:57:fe:
ba:50:e3:7d:ab:92:03:2a:3f:3f:34:32:18:e3:3d:
6a:89:5a:4c:d7:82:f5:e5:0d:85:43:4c:57:7a:80:
09:5d:5a:6e:52:38:e5:99:71:3f:44:e8:f2:3d:a6:
ec:2b:c7:f2:f3:ff:61:75:f4:7e:4b:6a:39:ba:a3:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:BF:DF:8B:F0:46:71:FA:A2:31:F7:77:F7:18:09:8A:34:66:B1
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/MXS_34vwRnH6ojH3d_cYCYo0ZrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.248.0-77.111.250.255
80.84.167.0/24
185.136.69.0/24
185.136.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:91:df:5f:57:a1:b8:86:5f:77:1a:21:6d:21:d3:c7:b5:56:
e9:05:be:6d:a7:a7:a9:58:ed:76:9d:14:b9:d5:af:dd:4b:97:
4a:f3:53:2d:51:3c:8d:4e:c5:3e:7c:67:6e:c5:61:76:3b:8c:
2f:26:3f:a9:f0:1d:d1:a3:10:51:99:9e:e6:a0:b7:14:9f:0b:
2a:a8:f8:09:a8:16:e4:02:9e:b1:9d:64:53:4c:c8:5f:71:a4:
26:20:01:3d:8e:46:6a:67:9c:3e:29:87:92:93:25:2c:ff:4d:
55:6f:9e:39:b7:84:0d:7f:6e:73:45:67:a8:98:9c:47:71:af:
04:88:72:23:21:34:23:92:ee:38:d8:66:4d:e5:8b:d7:5f:16:
5c:a2:0a:41:b7:70:ea:7c:6b:1f:ff:e1:7e:d1:f3:62:97:00:
a4:eb:82:f4:32:0f:12:ef:ca:48:cd:cf:9c:ab:7d:7b:c8:74:
e2:06:a2:17:f2:e1:39:6c:ca:aa:36:0e:2d:16:fe:0d:1a:ab:
01:09:16:51:27:1e:6a:54:75:a0:7d:84:a8:f3:b6:d0:a5:6b:
57:9a:cc:81:4c:a5:2e:8f:de:99:6c:32:d3:93:af:6f:c3:0f:
88:a6:90:53:88:ae:3c:b8:e3:c4:ec:2b:8d:b2:e4:97:57:de:
b7:5a:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:11 2025 by rpki-client