Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MWZD1GeluZHL01h2zwkC7vZMT_E.roa
File: MWZD1GeluZHL01h2zwkC7vZMT_E.roa (raw, json)
Hash identifier: oR5dqGuN1yZyBBxwYTfHOiGJAcN8Am/E814sHBfw0eM=
Subject key identifier: 31:66:43:D4:67:A5:B9:91:CB:D3:58:76:CF:09:02:EE:F6:4C:4F:F1
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018572DF20C9A7770021E10A763CD1DD0D80
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MWZD1GeluZHL01h2zwkC7vZMT_E.roa
Signing time: Mon 02 Jan 2023 14:25:03 +0000
ROA not before: Mon 02 Jan 2023 14:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208737
IP address blocks: 78.159.130.0/24 maxlen: 24
91.92.54.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:20:c9:a7:77:00:21:e1:0a:76:3c:d1:dd:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 14:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=316643d467a5b991cbd35876cf0902eef64c4ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:ca:d2:6d:9d:72:63:d0:c4:d0:68:d9:73:
50:03:a4:bf:38:d2:35:79:49:65:6c:19:c2:a3:7f:
7f:4f:2f:78:5e:64:42:fb:5c:6d:2d:77:2b:2e:10:
66:9d:c4:ec:4a:ae:6e:5e:1a:a9:51:bd:70:96:b4:
c5:6e:3b:07:24:e0:1a:e5:90:93:d7:ce:18:6c:52:
43:21:88:23:69:c1:7a:0d:5d:dc:1a:e6:a9:23:e5:
38:c9:df:e0:b1:90:1c:f3:2c:ad:a0:a1:ae:96:b0:
3b:72:1a:6a:ae:7b:be:c9:29:4e:b0:a8:98:92:65:
99:ff:2c:b6:80:09:79:73:7f:ae:18:77:b8:c4:7f:
58:97:cc:15:3f:c0:bc:9d:f7:de:d1:0c:c1:80:fd:
e6:8e:60:1a:19:97:ef:a9:0a:aa:49:85:d9:c0:0f:
0e:27:73:32:c4:4d:c2:a3:da:d7:3f:f8:a4:47:a8:
4c:2c:e6:b7:0a:39:0e:b1:94:2c:cc:37:7d:e1:34:
51:bd:b9:03:8b:df:db:05:b8:f1:ff:15:8b:fc:e4:
aa:a8:2e:00:1a:32:78:15:9f:5a:59:40:75:75:65:
00:b1:df:19:7e:eb:04:84:ca:ba:88:6f:7b:e3:7a:
84:72:3e:24:b8:30:aa:a1:1b:c6:31:3e:83:4b:27:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:43:D4:67:A5:B9:91:CB:D3:58:76:CF:09:02:EE:F6:4C:4F:F1
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MWZD1GeluZHL01h2zwkC7vZMT_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.130.0/24
78.159.156.0/24
91.92.54.0/24
Signature Algorithm: sha256WithRSAEncryption
70:be:12:92:14:7f:f5:b7:ca:df:5f:62:de:47:3f:83:5f:86:
e2:e7:3b:60:c3:04:ec:f9:e8:ed:6e:f0:cd:3d:25:5d:ef:7c:
e5:f1:eb:9a:9a:ae:ce:af:1e:99:77:ef:3e:a7:b6:7b:a9:f1:
c1:80:eb:8b:29:d0:22:5d:74:f1:66:83:ef:82:f0:ac:f0:c9:
07:1b:65:80:5d:cd:c1:5c:0d:07:ec:01:83:36:2f:8a:f5:27:
ea:dd:9a:16:33:a5:98:ab:3a:04:67:19:72:ad:98:03:d2:09:
97:cd:ba:16:4a:06:eb:eb:37:13:94:aa:6b:5c:ce:65:dd:4c:
41:af:66:86:c0:3d:79:26:4b:6a:45:1e:bd:26:b6:6f:dd:2c:
ae:3c:25:53:32:a7:21:5a:13:c7:7b:57:ff:e3:b3:e2:7e:f4:
41:00:d7:1e:a2:6a:c7:c8:de:e8:7d:2e:e8:ba:11:99:29:39:
f6:51:50:68:69:06:ad:b3:64:9b:ba:97:ba:1c:46:2d:cb:dc:
a1:9f:e3:c8:96:18:4f:b0:c0:4f:59:99:7a:fc:84:bc:25:48:
26:2a:11:f2:76:e8:34:d8:cb:09:56:0b:61:c8:78:85:8f:08:
2b:51:ad:3f:d4:16:1e:e5:f8:9d:5a:c4:92:e7:7d:3e:52:d6:
27:81:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:18 2025 by rpki-client