Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/rMOG_QgO7a76tBPn9ZhdtWvhszE.roa
File: rMOG_QgO7a76tBPn9ZhdtWvhszE.roa (raw, json)
Hash identifier: sLgkP1pGRvHb7qkxrp9rjmpdTUwb4z7uAAT2tfY12jY=
Subject key identifier: AC:C3:86:FD:08:0E:ED:AE:FA:B4:13:E7:F5:98:5D:B5:6B:E1:B3:31
Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial: 03D17D7E
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/rMOG_QgO7a76tBPn9ZhdtWvhszE.roa
Signing time: Sat 01 Jan 2022 10:55:19 +0000
ROA not before: Sat 01 Jan 2022 10:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61386
IP address blocks: 185.167.124.0/22 maxlen: 22
185.167.124.0/24 maxlen: 24
185.167.125.0/24 maxlen: 24
185.167.126.0/24 maxlen: 24
185.167.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64060798 (0x3d17d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Validity
Not Before: Jan 1 10:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acc386fd080eedaefab413e7f5985db56be1b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:a1:be:40:16:76:ec:c2:42:81:aa:85:e4:
12:bf:82:29:07:93:3b:1b:8b:ac:62:bf:26:26:a5:
a7:74:37:e2:f2:5d:a9:ba:43:40:f9:53:69:dd:d5:
0d:1c:1a:41:47:b8:6c:70:4a:61:7b:38:4f:f4:84:
6e:a0:27:7c:67:e8:e1:88:64:2a:f0:2d:a8:11:35:
89:2e:58:19:63:9d:db:0a:e0:2a:53:b3:9a:43:4d:
71:35:d7:21:e6:e6:e4:5e:f0:8f:dd:f5:38:ac:c0:
ec:84:2e:4e:47:97:30:f8:45:d9:f8:e0:20:11:ad:
fc:87:eb:7a:3b:81:ec:f8:e2:f1:a0:d2:d4:30:1b:
a8:43:46:df:9a:38:b3:96:a8:3e:ac:6a:30:2a:f8:
f0:ec:a8:06:12:c5:d3:22:c9:db:83:70:4c:78:d9:
45:43:75:a1:dc:d5:87:8d:75:35:7d:c5:d0:04:14:
e8:10:f6:40:54:03:4e:79:64:07:ac:dd:30:a0:00:
b2:2e:e2:80:db:ed:d2:37:b0:d2:fc:a6:d8:81:a0:
2a:f6:cd:55:1b:ef:aa:9c:5b:39:4e:88:a5:13:57:
4e:69:8f:c9:e7:71:d2:be:b8:28:ae:24:d6:36:21:
fb:d4:a3:3c:49:ec:df:be:92:ce:c8:8d:ea:fa:35:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C3:86:FD:08:0E:ED:AE:FA:B4:13:E7:F5:98:5D:B5:6B:E1:B3:31
X509v3 Authority Key Identifier:
keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/rMOG_QgO7a76tBPn9ZhdtWvhszE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.124.0/22
Signature Algorithm: sha256WithRSAEncryption
45:3c:87:4f:bc:6b:75:e0:d7:11:06:5a:fb:45:36:92:bc:a7:
fa:28:9f:1b:ec:81:bd:90:e2:9b:d4:32:e8:a5:c4:9d:f2:5e:
4d:dc:cf:a4:71:02:11:1f:81:ba:c4:bb:22:ad:10:99:ee:28:
4d:61:2c:a6:df:28:d8:7c:34:6b:f1:c3:f2:c9:5c:e2:82:c4:
c9:60:ea:61:3e:fc:e4:c0:73:b6:ae:2a:d6:31:31:19:94:05:
df:72:55:1c:91:33:50:7d:9c:6b:c9:db:b1:4f:ed:b7:61:1c:
85:51:51:14:a5:01:87:c7:83:d2:b1:23:b1:9f:46:63:d6:4b:
48:6e:7f:7f:4c:da:b8:a3:56:7b:66:49:e9:65:73:2d:5b:20:
20:73:a8:89:76:0a:00:73:57:9c:c1:26:f5:d5:5c:69:5c:1a:
5b:3e:26:e1:d0:dd:3b:cb:a5:42:c8:63:73:41:f0:76:a9:d7:
2a:82:df:e0:98:74:8e:1b:a1:41:86:22:46:98:e6:ab:d2:2d:
8f:b9:da:59:62:7a:6c:c4:05:98:c2:e9:ec:86:fa:ac:6d:5f:
3b:94:a5:4c:60:1b:91:8e:bc:43:a9:c1:b3:b4:a0:56:47:06:
63:d1:60:63:35:83:91:61:5e:57:9e:ce:d6:e9:7f:74:14:a7:
09:72:ed:23
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9F9fjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MWJkNjRjYzk0YTRhODUxOGE3MWY5NmVmOGI3NzYyNWFmYTUyN2QxMB4XDTIyMDEw
MTEwNTUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWNjMzg2ZmQwODBl
ZWRhZWZhYjQxM2U3ZjU5ODVkYjU2YmUxYjMzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfoob5AFnbswkKBqoXkEr+CKQeTOxuLrGK/Jialp3Q34vJd
qbpDQPlTad3VDRwaQUe4bHBKYXs4T/SEbqAnfGfo4YhkKvAtqBE1iS5YGWOd2wrg
KlOzmkNNcTXXIebm5F7wj931OKzA7IQuTkeXMPhF2fjgIBGt/IfrejuB7Pji8aDS
1DAbqENG35o4s5aoPqxqMCr48OyoBhLF0yLJ24NwTHjZRUN1odzVh411NX3F0AQU
6BD2QFQDTnlkB6zdMKAAsi7igNvt0jew0vym2IGgKvbNVRvvqpxbOU6IpRNXTmmP
yedx0r64KK4k1jYh+9SjPEns376SzsiN6vo1cEUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSsw4b9CA7trvq0E+f1mF21a+GzMTAfBgNVHSMEGDAWgBTRvWTMlKSoUYpx
+W74t3Ylr6Un0TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBiMWt6SlNrcUZHS2NmbHUtTGQySmEtbEo5RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvMmVmYTUwLWY0ODMtNGI1My1iMWU3LTA4MjZmMzZmZjI4Zi8x
L3JNT0dfUWdPN2E3NnRCUG45WmhkdFd2aHN6RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
MmVmYTUwLWY0ODMtNGI1My1iMWU3LTA4MjZmMzZmZjI4Zi8xLzBiMWt6SlNrcUZH
S2NmbHUtTGQySmEtbEo5RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmnfDANBgkqhkiG9w0BAQsFAAOC
AQEARTyHT7xrdeDXEQZa+0U2kryn+iifG+yBvZDim9Qy6KXEnfJeTdzPpHECER+B
usS7Iq0Qme4oTWEspt8o2Hw0a/HD8slc4oLEyWDqYT785MBztq4q1jExGZQF33JV
HJEzUH2ca8nbsU/tt2EchVFRFKUBh8eD0rEjsZ9GY9ZLSG5/f0zauKNWe2ZJ6WVz
LVsgIHOoiXYKAHNXnMEm9dVcaVwaWz4m4dDdO8ulQshjc0HwdqnXKoLf4Jh0jhuh
QYYiRpjmq9Itj7naWWJ6bMQFmMLp7Ib6rG1fO5SlTGAbkY68Q6nBs7SgVkcGY9Fg
YzWDkWFeV57O1ul/dBSnCXLtIw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:17 2023 by rpki-client on console-fra.rpki-client.org