Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/MuN2xt1uZtyYV4DI5UacGEzfFd4.roa
File: MuN2xt1uZtyYV4DI5UacGEzfFd4.roa (raw, json)
Hash identifier: LNVk2O36T+5x97FlCzTTfo/UlO+L3NQ0JWUL/pesxL4=
Subject key identifier: 32:E3:76:C6:DD:6E:66:DC:98:57:80:C8:E5:46:9C:18:4C:DF:15:DE
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0BB929ED
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/MuN2xt1uZtyYV4DI5UacGEzfFd4.roa
Signing time: Sat 01 Jan 2022 11:56:51 +0000
ROA not before: Sat 01 Jan 2022 11:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202401
IP address blocks: 194.39.204.0/22 maxlen: 24
2a0c:8fc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196684269 (0xbb929ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jan 1 11:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32e376c6dd6e66dc985780c8e5469c184cdf15de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:69:f1:68:82:7d:55:e7:37:63:26:c8:49:
11:c5:33:da:4a:9f:b5:55:65:51:48:1d:29:b8:5c:
dd:84:76:ed:0c:40:8c:55:1d:68:ce:39:21:fe:4c:
2d:8d:d5:3c:06:43:96:f4:bf:7c:75:2a:74:5d:d6:
fd:05:50:12:ba:4c:11:41:b3:18:ed:7d:7a:da:0f:
3d:a3:03:e3:4e:72:ec:73:cd:ef:c4:9f:86:6d:94:
1c:55:6e:55:d5:95:a8:cf:8b:51:62:73:c3:51:a7:
da:f3:79:66:67:1b:93:44:b4:a2:e2:e1:60:f6:74:
b4:45:a7:61:c7:5b:76:3c:a4:bf:55:71:59:f7:c1:
58:17:65:7c:a0:f2:a0:57:3a:b6:28:ef:09:30:be:
a4:53:de:c8:87:b4:d9:8d:a5:19:62:5c:98:92:26:
0b:7b:70:f8:b3:9b:38:8b:79:49:9e:3c:55:c3:56:
25:7a:52:54:50:6c:fe:b3:0b:71:59:68:19:f9:94:
7a:2c:99:00:02:cb:ab:39:cf:1e:a9:10:27:e1:f4:
7e:2c:fd:e7:16:c2:37:82:b7:d4:79:ba:fc:f7:c5:
a3:3e:5d:d1:12:f2:07:ea:63:3e:99:64:6b:69:de:
26:c8:03:9f:5a:ef:cb:bf:07:55:c8:7f:40:9a:90:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E3:76:C6:DD:6E:66:DC:98:57:80:C8:E5:46:9C:18:4C:DF:15:DE
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/MuN2xt1uZtyYV4DI5UacGEzfFd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.204.0/22
IPv6:
2a0c:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:80:9c:5d:22:20:67:0c:a0:c7:68:03:ae:77:ae:c0:ef:ac:
20:fd:da:e2:81:79:03:2c:65:56:40:de:71:6d:66:fc:24:af:
2b:51:1b:fa:84:e3:5f:8e:39:84:7a:06:c7:0d:60:02:7c:a0:
a4:91:d9:23:21:22:ce:c0:5e:d4:67:2e:02:40:aa:f9:91:e1:
19:13:ac:12:d0:e4:42:b9:ca:12:78:16:b3:33:b7:bf:be:62:
91:f8:9a:10:64:54:de:d7:33:6c:b0:4b:8c:0d:eb:9a:c7:9c:
c8:13:22:47:78:19:3b:12:97:04:4c:82:89:77:d1:8d:88:24:
fb:ad:a7:1f:c8:fa:7a:09:13:fe:5d:b4:f7:eb:33:d7:8e:e4:
03:2b:7a:19:d2:b3:9e:a3:32:b1:d4:6c:98:e8:30:3a:86:ea:
81:bc:07:d5:1e:cf:a3:84:ed:c4:ca:0d:96:3d:0a:2c:e5:6c:
ff:3b:7b:25:fc:65:0e:9b:9a:84:9a:ce:c2:b0:71:bf:3f:91:
2b:2a:08:80:cd:f5:b9:27:64:f9:30:d2:2d:64:d9:ab:81:b1:
54:63:cf:e9:15:e2:a7:bb:5b:fe:eb:f0:60:52:59:ea:10:c5:
a5:bb:1a:64:f3:7d:3e:91:c3:68:76:b7:59:2d:f7:8e:99:0f:
ed:7b:cc:39
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEC7kp7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZjNiZDU2ZThiNTRlNmRhMjdiYmU2NjIyZGFjNjdjYmYwMmE4MWVhMB4XDTIyMDEw
MTExNTY1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJlMzc2YzZkZDZl
NjZkYzk4NTc4MGM4ZTU0NjljMTg0Y2RmMTVkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdmafFogn1V5zdjJshJEcUz2kqftVVlUUgdKbhc3YR27QxA
jFUdaM45If5MLY3VPAZDlvS/fHUqdF3W/QVQErpMEUGzGO19etoPPaMD405y7HPN
78Sfhm2UHFVuVdWVqM+LUWJzw1Gn2vN5Zmcbk0S0ouLhYPZ0tEWnYcdbdjykv1Vx
WffBWBdlfKDyoFc6tijvCTC+pFPeyIe02Y2lGWJcmJImC3tw+LObOIt5SZ48VcNW
JXpSVFBs/rMLcVloGfmUeiyZAALLqznPHqkQJ+H0fiz95xbCN4K31Hm6/PfFoz5d
0RLyB+pjPplka2neJsgDn1rvy78HVch/QJqQHPkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQy43bG3W5m3JhXgMjlRpwYTN8V3jAfBgNVHSMEGDAWgBRPO9Vui1Tm2ie7
5mItrGfL8CqB6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1R6dlZib3RVNXRvbnUtWmlMYXhueV9BcWdlby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvNmZlMTQ5LThhNzItNDdmZC04NzM1LTdkYzViZGRmOTFiNS8x
L011TjJ4dDF1WnR5WVY0REk1VWFjR0V6ZkZkNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
NmZlMTQ5LThhNzItNDdmZC04NzM1LTdkYzViZGRmOTFiNS8xL1R6dlZib3RVNXRv
bnUtWmlMYXhueV9BcWdlby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsInzDANBAIAAjAHAwUDKgyPwDAN
BgkqhkiG9w0BAQsFAAOCAQEAW4CcXSIgZwygx2gDrneuwO+sIP3a4oF5AyxlVkDe
cW1m/CSvK1Eb+oTjX445hHoGxw1gAnygpJHZIyEizsBe1GcuAkCq+ZHhGROsEtDk
QrnKEngWszO3v75ikfiaEGRU3tczbLBLjA3rmsecyBMiR3gZOxKXBEyCiXfRjYgk
+62nH8j6egkT/l209+sz147kAyt6GdKznqMysdRsmOgwOobqgbwH1R7Po4TtxMoN
lj0KLOVs/zt7JfxlDpuahJrOwrBxvz+RKyoIgM31uSdk+TDSLWTZq4GxVGPP6RXi
p7tb/uvwYFJZ6hDFpbsaZPN9PpHDaHa3WS33jpkP7XvMOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:43 2024 by rpki-client on console-ams.rpki-client.org