Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/mHOyZRgymum7qM5hcuX1B8iR0ww.roa
File: mHOyZRgymum7qM5hcuX1B8iR0ww.roa (raw, json)
Hash identifier: FgcO6oUFkRSS5FcYjVfnnYqy+Fv9Oxf9YafdxHXqROU=
Subject key identifier: 98:73:B2:65:18:32:9A:E9:BB:A8:CE:61:72:E5:F5:07:C8:91:D3:0C
Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial: 12B40557
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/mHOyZRgymum7qM5hcuX1B8iR0ww.roa
Signing time: Sat 01 Jan 2022 16:10:33 +0000
ROA not before: Sat 01 Jan 2022 16:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.71.0.0/16 maxlen: 16
192.108.51.0/24 maxlen: 24
192.108.52.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313787735 (0x12b40557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Validity
Not Before: Jan 1 16:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9873b26518329ae9bba8ce6172e5f507c891d30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:4a:c4:60:f2:3e:07:64:53:52:e5:e1:f6:
73:d1:a6:4a:be:9f:b6:dd:30:08:11:51:cf:4f:32:
7b:af:87:57:d7:22:c3:c5:37:52:43:c7:d3:da:c8:
b8:7d:ec:73:e7:b8:57:21:1e:1b:41:3c:8c:aa:9f:
ee:bb:d7:7a:38:ce:66:cf:1a:1a:7b:e2:00:66:3e:
f6:27:e1:c8:16:c4:89:77:35:2a:94:cb:ea:f1:ef:
a6:80:bd:57:00:65:f6:aa:04:d5:b9:17:c2:47:93:
83:e3:c0:d3:bc:bd:6c:0b:98:93:40:7f:c2:3a:6d:
6f:b1:c5:0c:d1:e9:77:fd:c0:e2:2f:49:7e:c5:a7:
f0:74:15:cf:a4:d1:56:ef:b1:70:4d:8c:a8:15:b1:
66:e1:2d:2a:cc:90:9f:c1:3b:89:bd:fe:c2:01:16:
47:76:96:38:50:5b:fd:7a:f2:e5:af:85:c5:0d:7f:
0a:cf:7b:8c:d8:4e:2d:e4:df:a0:48:ef:4f:ee:ab:
75:b9:c9:97:b3:51:cf:9e:b9:af:43:92:43:bb:2e:
03:6b:45:97:89:7b:93:53:31:34:77:5e:52:b3:3d:
3b:53:6a:2c:20:de:6a:e0:3e:36:6d:72:81:27:f9:
e6:fa:97:4e:a2:90:4b:4b:6b:b2:a3:2f:59:21:45:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:B2:65:18:32:9A:E9:BB:A8:CE:61:72:E5:F5:07:C8:91:D3:0C
X509v3 Authority Key Identifier:
keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/mHOyZRgymum7qM5hcuX1B8iR0ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.71.0.0/16
192.108.51.0-192.108.53.255
Signature Algorithm: sha256WithRSAEncryption
50:7f:ef:23:23:db:52:1e:28:e0:4a:64:f7:be:b1:0d:5c:48:
94:e6:06:4d:b2:89:d3:c3:53:36:e7:82:a0:bb:98:fb:56:40:
85:af:27:7b:03:ff:61:4c:33:2e:07:5a:41:7e:e0:53:6b:2f:
5a:36:ac:c7:2a:ff:95:bc:89:ff:6b:8d:57:c9:db:00:f9:20:
e1:7f:32:bc:4b:ea:5e:d4:5b:a7:2c:24:8d:04:7c:48:ee:ba:
95:da:72:d6:33:2d:d8:c9:b0:00:bd:c9:00:b2:90:ff:1e:de:
4b:11:d5:ae:b4:97:0c:63:9a:65:03:15:68:ce:6d:e8:71:03:
41:d4:0b:6c:81:e8:a6:9a:7d:8e:3e:ca:e9:d5:d1:64:1c:f1:
4e:13:af:28:fa:26:59:42:86:8f:a4:cd:6f:7e:b9:98:c6:d3:
45:45:88:eb:dd:cf:ac:cc:c1:52:cc:84:a0:43:a2:2a:3b:15:
37:8b:79:a2:dc:34:8e:75:f2:b3:df:7f:17:dc:d5:39:63:f2:
a7:4d:20:60:43:c5:ab:de:55:4a:4a:81:8e:a2:79:16:2f:03:
61:ed:3e:2c:23:e1:db:65:a8:b1:7f:6b:10:5c:80:91:bb:a1:
f0:49:f0:3d:49:33:25:70:af:da:08:db:7c:9f:77:51:e8:a8:
63:17:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:48 2025 by rpki-client