Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mCwRQMgDRmF1DjzRDJ9KXLen1SU.roa
File: mCwRQMgDRmF1DjzRDJ9KXLen1SU.roa (raw, json)
Hash identifier: 0SUhmTlVrpCChkDrfgfd5+AEAubwXAF1l8E9SlwyBc8=
Subject key identifier: 98:2C:11:40:C8:03:46:61:75:0E:3C:D1:0C:9F:4A:5C:B7:A7:D5:25
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 063F1C9F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mCwRQMgDRmF1DjzRDJ9KXLen1SU.roa
Signing time: Sat 01 Jan 2022 06:52:36 +0000
ROA not before: Sat 01 Jan 2022 06:52:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60609
IP address blocks: 185.150.78.0/23 maxlen: 23
185.150.76.0/24 maxlen: 24
194.26.172.0/23 maxlen: 23
194.26.174.0/24 maxlen: 24
194.26.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104799391 (0x63f1c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=982c1140c8034661750e3cd10c9f4a5cb7a7d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:cc:2e:fe:38:0b:f3:80:45:54:08:18:18:
4b:f7:33:e9:a0:2d:ea:59:5f:e9:cc:d2:2c:ae:a3:
ae:ce:ef:88:81:f7:31:8f:da:2c:f7:c1:a8:27:5f:
1b:66:02:50:59:dd:77:16:9e:cb:6a:88:4c:0c:fd:
f4:f4:fc:8b:09:50:3f:3c:9f:92:f9:58:cf:11:de:
92:48:d4:91:99:f4:25:e9:a2:fe:48:e7:09:32:af:
c4:80:04:76:2f:d1:a9:29:bb:1f:41:fa:00:b7:28:
44:ae:15:8f:61:5a:f4:20:a5:a9:74:21:49:53:2e:
85:f8:9f:5f:49:8e:65:5c:c8:52:8c:5f:aa:1e:f0:
84:8d:2a:96:c9:d3:3a:53:0a:9f:f8:6f:2d:1c:34:
7f:12:c9:b1:1b:02:f9:76:81:97:3d:a4:23:e7:b1:
b5:2c:5d:45:53:bc:08:4a:86:38:b7:42:37:13:36:
00:c3:f7:30:f7:4a:61:e0:d0:d9:d3:2d:97:73:87:
d0:d2:a7:61:4f:fc:9d:7d:34:d9:61:63:b6:33:1a:
4b:61:87:16:1c:79:fe:e3:fb:ab:71:a7:46:77:54:
92:65:e1:f0:6b:51:3d:5a:a4:26:13:99:8f:c8:b6:
19:fd:31:a8:dd:2b:e5:62:8b:23:82:43:0b:26:b0:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:11:40:C8:03:46:61:75:0E:3C:D1:0C:9F:4A:5C:B7:A7:D5:25
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mCwRQMgDRmF1DjzRDJ9KXLen1SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.76.0/24
185.150.78.0/23
194.26.172.0/22
Signature Algorithm: sha256WithRSAEncryption
70:d3:cd:18:b5:a8:67:05:8a:56:76:cf:a4:01:b7:fa:99:fb:
27:25:5d:fa:66:ce:6d:c6:30:39:30:cb:a5:44:38:fe:0e:29:
da:14:31:f1:a0:46:ea:39:24:6f:15:b0:99:b3:c4:bd:ba:75:
74:bf:2f:37:0a:b4:7f:c6:4d:9b:da:a2:81:41:42:2e:25:50:
e7:98:f1:76:ae:ff:f4:1d:4d:25:e3:eb:e3:4f:2f:3d:dc:6b:
ab:6c:88:3b:38:8d:2f:a0:06:55:92:be:22:d6:d3:b6:8d:b2:
8b:bb:c3:0d:4b:ad:00:84:35:6c:8b:f8:31:93:40:5d:66:37:
76:56:b8:7c:e5:65:8a:7a:8c:67:7f:06:58:9e:2c:1f:8c:8d:
a0:b7:b8:aa:1c:06:e1:94:a0:84:f4:d3:cb:4a:af:5c:be:57:
5a:97:0f:19:d6:8f:f3:52:31:af:45:05:e5:dc:4f:2b:26:33:
63:7a:55:86:9d:50:13:da:c1:6e:ed:00:e8:b7:23:85:a5:88:
a6:c5:c2:3e:96:2f:3f:bd:2d:4a:c1:9a:d5:1f:0d:cf:df:c2:
62:e4:a7:18:ac:8d:23:41:a0:90:17:b0:74:de:5d:a6:6d:a4:
a0:7f:b6:83:56:72:9c:ee:28:3c:c3:e6:78:10:f0:9d:cb:de:
e5:40:0b:2c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBj8cnzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDEw
MTA2NTIzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgyYzExNDBjODAz
NDY2MTc1MGUzY2QxMGM5ZjRhNWNiN2E3ZDUyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhzzC7+OAvzgEVUCBgYS/cz6aAt6llf6czSLK6jrs7viIH3
MY/aLPfBqCdfG2YCUFnddxaey2qITAz99PT8iwlQPzyfkvlYzxHekkjUkZn0Jemi
/kjnCTKvxIAEdi/RqSm7H0H6ALcoRK4Vj2Fa9CClqXQhSVMuhfifX0mOZVzIUoxf
qh7whI0qlsnTOlMKn/hvLRw0fxLJsRsC+XaBlz2kI+extSxdRVO8CEqGOLdCNxM2
AMP3MPdKYeDQ2dMtl3OH0NKnYU/8nX002WFjtjMaS2GHFhx5/uP7q3GnRndUkmXh
8GtRPVqkJhOZj8i2Gf0xqN0r5WKLI4JDCyawU2sCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSYLBFAyANGYXUOPNEMn0pct6fVJTAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L21Dd1JRTWdEUm1GMURqelJESjlLWExlbjFTVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEALmWTAMEAbmWTgMEAsIarDANBgkq
hkiG9w0BAQsFAAOCAQEAcNPNGLWoZwWKVnbPpAG3+pn7JyVd+mbObcYwOTDLpUQ4
/g4p2hQx8aBG6jkkbxWwmbPEvbp1dL8vNwq0f8ZNm9qigUFCLiVQ55jxdq7/9B1N
JePr408vPdxrq2yIOziNL6AGVZK+ItbTto2yi7vDDUutAIQ1bIv4MZNAXWY3dla4
fOVlinqMZ38GWJ4sH4yNoLe4qhwG4ZSghPTTy0qvXL5XWpcPGdaP81Ixr0UF5dxP
KyYzY3pVhp1QE9rBbu0A6LcjhaWIpsXCPpYvP70tSsGa1R8Nz9/CYuSnGKyNI0Gg
kBewdN5dpm2koH+2g1ZynO4oPMPmeBDwncve5UALLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org