Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/MDSp-8qz7KmulfHh7L53TTs_Hm8.roa
File: MDSp-8qz7KmulfHh7L53TTs_Hm8.roa (raw, json)
Hash identifier: D71cxrrK2Zai7NrtoGyVo2UwhKT1zaqQyb41UGADpAs=
Subject key identifier: 30:34:A9:FB:CA:B3:EC:A9:AE:95:F1:E1:EC:BE:77:4D:3B:3F:1E:6F
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 03DD7E08
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/MDSp-8qz7KmulfHh7L53TTs_Hm8.roa
Signing time: Sat 01 Jan 2022 14:08:15 +0000
ROA not before: Sat 01 Jan 2022 14:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.85.233.0/24 maxlen: 24
185.85.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64847368 (0x3dd7e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Jan 1 14:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3034a9fbcab3eca9ae95f1e1ecbe774d3b3f1e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:f1:96:6d:b6:ae:ab:45:08:b5:a4:f0:5f:
bb:ef:b6:37:aa:e7:09:5b:df:19:b1:cc:92:e7:d3:
4c:96:60:1e:22:be:98:fd:ee:e9:f0:9c:85:c7:82:
ef:3b:ed:5e:07:c6:01:45:e6:59:93:5d:ca:1b:58:
be:26:08:21:1f:90:3b:c0:92:84:9c:52:2d:eb:b1:
04:d3:1b:56:20:32:54:08:85:28:23:ee:8b:23:02:
09:ff:ea:6d:ca:29:5c:95:f4:5f:4c:38:d0:77:95:
d4:43:1a:3e:c9:2b:e6:a8:03:09:d2:c6:54:4d:d7:
8b:9f:6d:80:54:be:28:de:57:61:9f:91:1c:95:a7:
bd:89:e1:85:e4:a1:cc:fc:a5:fb:75:47:e8:d9:c2:
b3:d9:b0:db:7c:fd:2b:db:ba:94:54:0a:f2:70:a9:
1d:f7:01:b4:64:ef:e4:4e:3d:f3:c5:2e:fb:1b:7c:
5c:a9:fb:26:76:72:4d:18:88:89:c3:f4:b8:b1:ec:
ea:5a:c4:df:ca:9e:30:9f:89:3e:cc:5d:d4:2b:25:
b2:c5:d9:3a:5c:b3:6e:7a:2f:cc:5f:d2:e5:59:f1:
91:d9:ae:4f:70:ff:28:08:ef:e7:4f:d5:0e:5e:89:
7b:50:e6:41:b2:18:18:f6:67:22:aa:c9:fd:f4:44:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:A9:FB:CA:B3:EC:A9:AE:95:F1:E1:EC:BE:77:4D:3B:3F:1E:6F
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/MDSp-8qz7KmulfHh7L53TTs_Hm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.233.0/24
185.85.235.0/24
Signature Algorithm: sha256WithRSAEncryption
be:67:dd:09:c9:c1:cd:2d:dc:84:a0:ca:75:40:e3:73:d4:8e:
f5:5a:25:6c:52:a2:3a:cc:66:d3:9d:28:4c:f2:b7:8d:21:4f:
13:e5:cd:5e:a8:75:73:d8:07:70:97:e9:11:0b:43:23:58:60:
6e:3e:36:a9:f8:23:ef:85:a0:91:af:8a:60:9f:47:0b:44:12:
0b:92:2a:e5:91:22:99:9d:2a:1d:2f:c1:f3:5b:60:da:ce:db:
bb:24:25:05:f4:33:41:59:97:15:19:82:f0:a9:d3:74:9e:68:
ee:29:2b:61:3d:41:64:0a:5a:19:35:75:86:5d:eb:95:8e:77:
b8:5b:96:fa:26:df:b3:c1:f1:e1:00:1b:43:f2:7d:ee:7e:20:
87:1c:7e:96:02:95:7f:21:8e:e3:78:95:6a:63:4e:7a:6a:ab:
c0:80:7a:b2:1f:cc:9e:8a:dc:52:63:f9:00:1b:76:68:4c:ba:
f2:ef:9c:68:fc:7d:49:5c:0a:54:a7:02:06:6a:f7:2b:55:76:
f1:8b:4b:17:2a:0e:ae:c0:25:91:ce:91:9e:2c:0a:e8:bb:d0:
26:72:9f:51:73:0e:6e:58:39:70:69:68:8e:d2:e6:f2:9b:60:
46:4c:49:4e:04:06:87:ca:a4:4c:e8:ac:d2:b5:a3:07:85:92:
74:34:9f:8c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA91+CDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OWIyNDQ0NjQ0YzQzMzQ4ZDdjNTBmNGU1MGU3NDM1NmU5ODk2ZGJmMB4XDTIyMDEw
MTE0MDgxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzAzNGE5ZmJjYWIz
ZWNhOWFlOTVmMWUxZWNiZTc3NGQzYjNmMWU2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYE8ZZttq6rRQi1pPBfu++2N6rnCVvfGbHMkufTTJZgHiK+
mP3u6fCchceC7zvtXgfGAUXmWZNdyhtYviYIIR+QO8CShJxSLeuxBNMbViAyVAiF
KCPuiyMCCf/qbcopXJX0X0w40HeV1EMaPskr5qgDCdLGVE3Xi59tgFS+KN5XYZ+R
HJWnvYnhheShzPyl+3VH6NnCs9mw23z9K9u6lFQK8nCpHfcBtGTv5E4988Uu+xt8
XKn7JnZyTRiIicP0uLHs6lrE38qeMJ+JPsxd1CslssXZOlyzbnovzF/S5Vnxkdmu
T3D/KAjv50/VDl6Je1DmQbIYGPZnIqrJ/fREF5UCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQwNKn7yrPsqa6V8eHsvndNOz8ebzAfBgNVHSMEGDAWgBRJskRGRMQzSNfF
D05Q50NW6YltvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NiSkVSa1RFTTBqWHhROU9VT2REVnVtSmJiOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvNjRjZGJkLWM4NTEtNGIzNS1iYjc5LTc1M2Q5NjlhMDcwMi8x
L01EU3AtOHF6N0ttdWxmSGg3TDUzVFRzX0htOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
NjRjZGJkLWM4NTEtNGIzNS1iYjc5LTc1M2Q5NjlhMDcwMi8xL1NiSkVSa1RFTTBq
WHhROU9VT2REVnVtSmJiOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALlV6QMEALlV6zANBgkqhkiG9w0B
AQsFAAOCAQEAvmfdCcnBzS3chKDKdUDjc9SO9VolbFKiOsxm050oTPK3jSFPE+XN
Xqh1c9gHcJfpEQtDI1hgbj42qfgj74Wgka+KYJ9HC0QSC5Iq5ZEimZ0qHS/B81tg
2s7buyQlBfQzQVmXFRmC8KnTdJ5o7ikrYT1BZApaGTV1hl3rlY53uFuW+ibfs8Hx
4QAbQ/J97n4ghxx+lgKVfyGO43iVamNOemqrwIB6sh/MnorcUmP5ABt2aEy68u+c
aPx9SVwKVKcCBmr3K1V28YtLFyoOrsAlkc6RniwK6LvQJnKfUXMOblg5cGlojtLm
8ptgRkxJTgQGh8qkTOis0rWjB4WSdDSfjA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:26 2023 by rpki-client on console-fra.rpki-client.org