Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Mir7xr3fZfMfewUTAFxbnrXmZsM.roa
File: Mir7xr3fZfMfewUTAFxbnrXmZsM.roa (raw, json)
Hash identifier: 9JFdDY1J6N+t7VFGNngXtTYsfTu2b2to+6F0CP4VK6k=
Subject key identifier: 32:2A:FB:C6:BD:DF:65:F3:1F:7B:05:13:00:5C:5B:9E:B5:E6:66:C3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 040B1A77
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Mir7xr3fZfMfewUTAFxbnrXmZsM.roa
Signing time: Fri 11 Mar 2022 10:37:28 +0000
ROA not before: Fri 11 Mar 2022 10:37:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28753
IP address blocks: 185.106.92.0/23 maxlen: 23
185.106.94.0/23 maxlen: 23
185.172.131.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
185.94.166.0/24 maxlen: 24
45.138.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67836535 (0x40b1a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 11 10:37:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=322afbc6bddf65f31f7b0513005c5b9eb5e666c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:a5:25:28:a5:ba:13:da:6d:f7:01:14:06:
69:91:d5:bf:c5:68:0c:f8:49:23:73:bc:0f:dc:48:
51:e3:d6:b8:a9:a8:03:eb:d4:b3:84:65:ca:ee:29:
9a:c7:5b:c3:58:6b:02:6b:9f:44:31:c1:bf:f3:d1:
bc:5c:6c:c2:26:85:c4:00:33:4a:fe:77:ce:c8:f3:
91:9e:cb:17:95:ef:e1:b9:29:4f:e1:0c:bf:89:22:
d1:47:56:91:cf:e9:c2:db:94:a2:6e:59:9a:64:d7:
aa:20:c4:05:68:b3:71:61:68:c2:28:47:45:6d:01:
db:00:1a:5b:2f:86:9f:af:37:88:ad:ec:fd:30:55:
65:25:2e:f8:ab:51:c4:12:7d:d8:10:88:b6:0d:5c:
1f:4a:e7:3c:5c:89:6c:0a:39:f8:ec:0d:c6:83:96:
34:6f:67:f4:72:2f:5a:29:fb:b6:a8:bb:3c:25:fb:
cc:97:ad:9d:1b:ec:1b:2d:74:ae:66:eb:f0:61:66:
5e:91:86:2b:ce:e9:ea:20:2b:19:e5:62:d9:22:7f:
53:46:23:4e:87:c8:d1:da:5b:bd:70:81:e7:08:48:
9e:88:51:b1:30:a6:6b:a6:03:b0:69:bf:02:a4:28:
29:ab:35:c7:31:18:72:07:37:64:00:54:b1:05:95:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:FB:C6:BD:DF:65:F3:1F:7B:05:13:00:5C:5B:9E:B5:E6:66:C3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Mir7xr3fZfMfewUTAFxbnrXmZsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.72.0/24
185.94.166.0/24
185.106.92.0/22
185.172.130.0/23
Signature Algorithm: sha256WithRSAEncryption
76:32:43:64:33:8e:1c:f2:31:2c:3f:9a:3c:3b:5b:8e:e4:3f:
c0:1d:a7:a8:6c:b1:d0:d2:13:53:95:eb:3f:56:47:b8:6b:fe:
44:30:a4:53:26:6a:9c:f0:3c:d4:1b:e2:a9:f3:ca:e1:ed:58:
c4:b0:29:07:cb:bd:76:2b:01:a3:d0:67:73:fa:6c:37:88:22:
5f:f9:5b:62:22:6b:98:39:27:f4:ae:df:00:6f:f1:64:c4:31:
1c:55:cb:76:6c:de:c6:df:1a:68:fe:a4:0b:06:5c:72:9c:8a:
f7:a0:62:55:48:ac:db:7b:11:50:13:fa:ec:b4:03:fa:2b:e8:
ee:b2:b8:0e:5c:30:eb:61:0b:7b:9e:4c:62:ec:3b:e9:4c:58:
53:ed:7d:9d:bc:0d:da:20:c8:18:3b:85:c9:8a:e1:c0:5e:fe:
7f:81:5f:d7:f2:d1:ff:5b:e7:f5:1c:e9:7c:42:e6:74:8c:3e:
b6:b9:e4:46:96:a2:0d:97:d3:ab:1c:c1:51:39:05:cb:a3:a0:
f0:8e:e7:bb:0f:fb:e8:65:bb:37:33:ec:22:b3:0b:99:30:77:
20:85:f7:c5:06:fb:7c:4d:7d:6c:f8:4e:ab:17:96:40:fe:be:
4b:e6:b6:93:3d:cb:b1:57:f6:7f:9b:93:81:32:4c:56:27:8d:
16:ba:7d:1a
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBAsadzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDMx
MTEwMzcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzIyYWZiYzZiZGRm
NjVmMzFmN2IwNTEzMDA1YzViOWViNWU2NjZjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVIpSUopboT2m33ARQGaZHVv8VoDPhJI3O8D9xIUePWuKmo
A+vUs4Rlyu4pmsdbw1hrAmufRDHBv/PRvFxswiaFxAAzSv53zsjzkZ7LF5Xv4bkp
T+EMv4ki0UdWkc/pwtuUom5ZmmTXqiDEBWizcWFowihHRW0B2wAaWy+Gn683iK3s
/TBVZSUu+KtRxBJ92BCItg1cH0rnPFyJbAo5+OwNxoOWNG9n9HIvWin7tqi7PCX7
zJetnRvsGy10rmbr8GFmXpGGK87p6iArGeVi2SJ/U0YjTofI0dpbvXCB5whInohR
sTCma6YDsGm/AqQoKas1xzEYcgc3ZABUsQWVKL8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQyKvvGvd9l8x97BRMAXFueteZmwzAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L01pcjd4cjNmWmZNZmV3VVRBRnhibnJYbVpzTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC2KSAMEALlepgMEArlqXAMEAbms
gjANBgkqhkiG9w0BAQsFAAOCAQEAdjJDZDOOHPIxLD+aPDtbjuQ/wB2nqGyx0NIT
U5XrP1ZHuGv+RDCkUyZqnPA81BviqfPK4e1YxLApB8u9disBo9Bnc/psN4giX/lb
YiJrmDkn9K7fAG/xZMQxHFXLdmzext8aaP6kCwZccpyK96BiVUis23sRUBP67LQD
+ivo7rK4Dlww62ELe55MYuw76UxYU+19nbwN2iDIGDuFyYrhwF7+f4Ff1/LR/1vn
9RzpfELmdIw+trnkRpaiDZfTqxzBUTkFy6Og8I7nuw/76GW7NzPsIrMLmTB3IIX3
xQb7fE19bPhOqxeWQP6+S+a2kz3LsVf2f5uTgTJMVieNFrp9Gg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org