Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mRHr3OfAwnxJeHfg1yNFFYFgTCA.roa
File: mRHr3OfAwnxJeHfg1yNFFYFgTCA.roa (raw, json)
Hash identifier: zbcBRxE4NYXfCCSJ4FtjvU2ws4D4e9tBBbxR7VdVXZk=
Subject key identifier: 99:11:EB:DC:E7:C0:C2:7C:49:78:77:E0:D7:23:45:15:81:60:4C:20
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0184AA7601B4B8C81F1D3F9A4D1FCFAA6803
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mRHr3OfAwnxJeHfg1yNFFYFgTCA.roa
Signing time: Thu 24 Nov 2022 16:26:11 +0000
ROA not before: Thu 24 Nov 2022 16:26:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.231.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
88.209.227.0/24 maxlen: 24
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
88.209.204.0/22 maxlen: 24
88.209.200.0/22 maxlen: 32
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
178.210.252.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
5.182.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:76:01:b4:b8:c8:1f:1d:3f:9a:4d:1f:cf:aa:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 24 16:26:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9911ebdce7c0c27c497877e0d723451581604c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:84:91:d2:78:3c:d9:fe:63:e1:80:b8:65:
37:8c:4b:c7:be:5b:ad:1e:7f:33:ce:0b:6f:ed:cb:
84:6e:a3:29:8e:46:97:c9:b8:23:80:34:82:89:1a:
a1:5f:d8:38:d3:10:0f:68:81:3b:85:3d:52:fc:8a:
c0:ea:48:99:4e:2b:c6:3c:8e:41:18:0f:ff:fc:b7:
5b:9e:ee:ab:14:ac:ad:1f:c8:28:83:d1:6c:f1:99:
21:37:97:eb:6c:94:d3:a0:61:98:a3:a1:10:be:3d:
33:e9:3f:8c:a2:61:e0:34:c5:df:30:84:f2:6f:67:
5a:9a:38:66:83:90:7b:53:03:a7:19:58:7a:ac:ab:
62:7b:13:7f:c6:52:ca:da:4a:75:33:f9:b3:4a:e2:
dd:3f:78:99:cc:bd:c5:4f:72:06:ab:d3:4f:31:9b:
6d:51:59:dd:cb:63:af:88:67:04:48:e3:03:d1:f0:
e7:49:b1:32:b0:c9:1a:57:3b:c3:17:c1:9d:32:2e:
f2:5d:e0:23:b4:67:fc:58:4a:fd:a7:bf:65:79:c2:
4f:c1:4a:51:9e:52:53:85:0d:7e:e8:26:7d:9a:2c:
f3:7a:f5:cd:30:e9:dd:31:d3:4d:14:c1:9c:59:2f:
06:4a:91:ae:70:37:32:cb:95:d6:f1:f6:85:e8:ca:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:EB:DC:E7:C0:C2:7C:49:78:77:E0:D7:23:45:15:81:60:4C:20
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/mRHr3OfAwnxJeHfg1yNFFYFgTCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
83.137.152.0/24
83.137.154.0/23
88.151.61.0/24
88.151.63.0/24
88.209.200.0/21
88.209.226.0/23
88.209.231.0-88.209.235.255
178.210.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1f:3d:98:4f:13:f4:b0:35:f9:fd:e8:75:e9:d1:63:c6:4f:
16:7a:dd:ff:be:9f:77:02:17:74:e7:cb:f2:5e:17:1b:77:6d:
31:10:5e:7f:1a:f5:10:ba:a4:6e:9c:82:a5:79:09:8b:44:cb:
82:0b:d5:a5:79:d8:20:5b:b1:6c:8e:59:e7:f2:f7:bb:7c:64:
be:6b:71:51:2f:13:5e:81:19:7e:3e:20:da:99:eb:5a:56:7c:
7d:87:9d:bd:3c:66:ce:90:32:b2:e9:20:ca:a4:3e:bb:af:a5:
ad:63:95:b9:4d:1b:e3:c3:06:75:7c:8a:66:1a:7b:cb:5f:44:
1d:67:68:3d:6d:26:51:83:16:0c:91:79:30:51:30:cb:e0:cc:
a5:c5:e8:da:2f:9b:1b:8b:87:a8:c2:72:03:73:be:8a:85:00:
ad:14:db:5e:57:4d:5b:58:c9:62:b9:ed:b9:73:7f:b2:e2:46:
d1:61:37:94:0f:5e:33:78:cd:d3:12:84:48:c5:01:93:75:80:
0a:84:bb:23:dc:7b:b7:c2:7e:e6:aa:d0:6f:54:c1:15:80:23:
29:57:57:78:5b:e3:37:64:c7:72:05:11:b7:e1:31:a7:44:09:
54:4e:8e:b1:93:3e:44:19:06:d6:d0:49:05:68:fc:60:97:33:
61:6a:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org