Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/mNxWw5ZnCQ6jvcUSVLaPUfZlEzs.roa
File: mNxWw5ZnCQ6jvcUSVLaPUfZlEzs.roa (raw, json)
Hash identifier: fg6k47uSn851+ubpELlicIF52KRcKV+YOZbY35GL1T4=
Subject key identifier: 98:DC:56:C3:96:67:09:0E:A3:BD:C5:12:54:B6:8F:51:F6:65:13:3B
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0F3B9C69
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/mNxWw5ZnCQ6jvcUSVLaPUfZlEzs.roa
Signing time: Sat 01 Jan 2022 02:57:49 +0000
ROA not before: Sat 01 Jan 2022 02:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44979
IP address blocks: 185.111.4.0/24 maxlen: 24
185.111.6.0/24 maxlen: 24
185.111.7.0/24 maxlen: 24
185.111.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255564905 (0xf3b9c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jan 1 02:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98dc56c39667090ea3bdc51254b68f51f665133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:2f:d8:98:23:45:b6:85:a3:29:33:34:f5:
53:6e:f9:14:d0:2f:e6:c5:0b:10:44:b4:b3:1d:c2:
e2:d7:70:ab:f0:1b:b3:d8:78:36:d0:c1:ff:55:31:
b1:1e:6a:ff:6e:ee:7b:8d:66:57:90:68:00:ca:bf:
ce:db:c7:f8:2f:4e:c2:d9:5b:89:72:61:02:38:d7:
66:a8:72:bc:bb:8d:34:05:99:d5:e5:d1:09:d3:95:
0d:d0:06:3a:e2:c5:44:7c:43:0e:cb:76:65:e4:53:
b1:b9:e3:04:23:81:5a:81:bd:6b:35:14:de:84:f5:
8f:a6:f8:57:2a:ec:6b:04:f0:88:4a:b4:8a:7e:48:
c0:83:03:7e:aa:b6:34:ec:ff:9f:ae:d6:48:e5:9f:
5d:da:dc:ba:29:ab:24:91:03:77:19:f7:f5:d5:21:
3b:68:67:27:22:59:b1:6d:5b:8a:a7:e1:b2:41:df:
d4:33:c2:e8:66:49:22:5a:c7:b8:34:d2:a7:b0:10:
cf:8c:90:d7:0c:98:66:3e:a0:71:bd:29:69:55:9a:
86:73:8c:99:f1:cf:78:5d:c7:a4:c7:d8:d1:72:d0:
6b:6f:04:1f:33:91:89:5e:7f:5e:e5:d5:cf:fc:2f:
13:77:66:a4:47:a3:e4:3d:b0:80:0c:c3:f1:54:a2:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:56:C3:96:67:09:0E:A3:BD:C5:12:54:B6:8F:51:F6:65:13:3B
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/mNxWw5ZnCQ6jvcUSVLaPUfZlEzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:e5:df:bc:b5:55:4e:cc:e1:01:66:65:08:8c:8e:79:01:f6:
d8:c3:08:bf:a5:80:6d:e3:d8:25:3a:3e:1a:50:ae:ff:5b:02:
ef:0f:96:0a:62:64:ee:ec:fa:75:2b:82:91:85:0c:88:51:1c:
04:ec:5c:fa:00:92:d3:fc:e9:eb:69:87:c7:d3:4a:fc:b9:ee:
9d:6d:3e:47:29:48:78:fc:46:eb:c0:75:86:ef:0a:9a:5b:cd:
30:fb:cd:d7:cc:2f:22:bd:5a:c3:38:bf:17:cb:33:fa:4d:e1:
5b:fb:ee:87:94:e5:83:24:b0:7a:8e:d3:38:81:a9:c2:42:83:
25:c5:ec:e1:3c:25:d9:59:5a:f5:69:32:48:c5:ee:6e:ca:11:
98:b7:f3:56:dc:e9:72:bd:d8:f7:d2:6a:4b:86:50:9b:64:f5:
65:79:8b:0b:15:ad:73:1b:d6:5e:8b:fc:b1:65:30:b5:d4:eb:
b6:bf:8f:02:5b:57:9c:dc:48:54:c7:9a:90:0d:89:90:4a:bc:
2c:ec:69:99:46:50:d3:be:ce:46:9b:ac:61:9f:c3:25:ae:71:
22:30:84:57:f8:5a:79:57:f0:a0:c6:d2:9e:59:f1:df:7e:53:
02:9a:58:da:8f:bf:35:74:96:f9:2d:c6:92:05:0f:72:b1:37:
02:ce:90:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDzucaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OTdlYzlhMmE0ZDlkM2EyYzFjMDVkYWJkNDFhNWY5MjEyZTJkNmNmMB4XDTIyMDEw
MTAyNTc0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOThkYzU2YzM5NjY3
MDkwZWEzYmRjNTEyNTRiNjhmNTFmNjY1MTMzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMI8L9iYI0W2haMpMzT1U275FNAv5sULEES0sx3C4tdwq/Ab
s9h4NtDB/1UxsR5q/27ue41mV5BoAMq/ztvH+C9OwtlbiXJhAjjXZqhyvLuNNAWZ
1eXRCdOVDdAGOuLFRHxDDst2ZeRTsbnjBCOBWoG9azUU3oT1j6b4VyrsawTwiEq0
in5IwIMDfqq2NOz/n67WSOWfXdrcuimrJJEDdxn39dUhO2hnJyJZsW1biqfhskHf
1DPC6GZJIlrHuDTSp7AQz4yQ1wyYZj6gcb0paVWahnOMmfHPeF3HpMfY0XLQa28E
HzORiV5/XuXVz/wvE3dmpEej5D2wgAzD8VSi65ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSY3FbDlmcJDqO9xRJUto9R9mUTOzAfBgNVHSMEGDAWgBTJfsmipNnTosHA
XavUGl+SEuLWzzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lYN0pvcVRaMDZMQndGMnIxQnBma2hMaTFzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvMjEzNDY0LTFkZGItNGM2MC1iNTdlLTljNzI0ZjdkMTI2NS8x
L21OeFd3NVpuQ1E2anZjVVNWTGFQVWZabEV6cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
MjEzNDY0LTFkZGItNGM2MC1iNTdlLTljNzI0ZjdkMTI2NS8xL3lYN0pvcVRaMDZM
QndGMnIxQnBma2hMaTFzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlvBDANBgkqhkiG9w0BAQsFAAOC
AQEAj+XfvLVVTszhAWZlCIyOeQH22MMIv6WAbePYJTo+GlCu/1sC7w+WCmJk7uz6
dSuCkYUMiFEcBOxc+gCS0/zp62mHx9NK/LnunW0+RylIePxG68B1hu8KmlvNMPvN
18wvIr1awzi/F8sz+k3hW/vuh5TlgySweo7TOIGpwkKDJcXs4Twl2Vla9WkySMXu
bsoRmLfzVtzpcr3Y99JqS4ZQm2T1ZXmLCxWtcxvWXov8sWUwtdTrtr+PAltXnNxI
VMeakA2JkEq8LOxpmUZQ077ORpusYZ/DJa5xIjCEV/haeVfwoMbSnlnx335TAppY
2o+/NXSW+S3GkgUPcrE3As6QIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org