Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/mBzvoJ28_Ze5vJY-wXMDTQyhxJ4.roa
File: mBzvoJ28_Ze5vJY-wXMDTQyhxJ4.roa (raw, json)
Hash identifier: 85Vl9TS9jm+eeWBaUURL6kuWyBqGDFSfrvb4ocIfKaw=
Subject key identifier: 98:1C:EF:A0:9D:BC:FD:97:B9:BC:96:3E:C1:73:03:4D:0C:A1:C4:9E
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 018428EE36450FC50316EB364A727C7C1D7A
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/mBzvoJ28_Ze5vJY-wXMDTQyhxJ4.roa
Signing time: Sun 30 Oct 2022 12:46:50 +0000
ROA not before: Sun 30 Oct 2022 12:46:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 185.131.48.0/24 maxlen: 24
185.131.49.0/24 maxlen: 24
185.131.51.0/24 maxlen: 24
185.131.50.0/24 maxlen: 24
185.241.137.0/24 maxlen: 24
185.241.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:ee:36:45:0f:c5:03:16:eb:36:4a:72:7c:7c:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Oct 30 12:46:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=981cefa09dbcfd97b9bc963ec173034d0ca1c49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:f6:96:ba:6b:93:47:24:62:0d:35:7c:a4:
34:2f:d3:0d:0b:41:b9:67:b9:96:cf:5d:3f:a7:e6:
50:22:0c:ba:61:de:c1:0a:e7:ca:7b:14:35:4f:18:
91:7f:83:de:81:7f:8b:ac:12:81:8b:92:d4:f1:4b:
21:39:e8:bb:3f:cf:34:3f:87:eb:4a:ac:77:04:d5:
6a:a8:d7:ba:2a:7a:e9:7e:91:67:35:8f:ec:6b:ee:
65:bf:b1:74:71:c1:a7:f0:61:8a:8f:97:de:3c:d0:
4c:d9:b1:d1:09:1e:30:1c:a4:1a:33:95:b0:61:01:
f5:3f:c6:1c:b6:b8:e6:58:e1:a8:1d:f4:67:6a:16:
79:32:80:ea:7b:98:3b:5f:cb:ae:6b:3b:61:e9:06:
32:3b:27:8c:d8:86:55:96:8a:6f:a4:b2:68:81:4b:
96:53:29:ea:3c:db:18:58:aa:a4:85:19:43:c5:af:
62:b4:1a:36:ff:1d:aa:62:6d:88:64:a4:9f:f6:44:
4a:0d:54:4d:13:65:9e:ae:2f:30:3c:36:c5:34:4f:
ff:14:f4:e1:2a:02:71:26:4e:3a:5e:1f:e4:75:8c:
b5:99:a8:44:09:74:0a:80:78:e1:82:1f:77:95:79:
99:c5:d8:42:41:75:e4:9b:3d:ca:0e:66:b1:07:ce:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:EF:A0:9D:BC:FD:97:B9:BC:96:3E:C1:73:03:4D:0C:A1:C4:9E
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/mBzvoJ28_Ze5vJY-wXMDTQyhxJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.48.0/22
185.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:b4:7f:92:79:47:09:54:62:de:8d:28:a6:9c:52:45:ee:81:
42:4a:d4:a0:c2:2b:01:46:42:11:0b:8d:26:e2:c4:60:e4:66:
65:99:19:e3:a9:92:f9:1f:5e:bb:f4:be:ca:1f:11:8c:ba:c4:
aa:9b:ce:41:59:ea:a1:da:e8:bd:e0:a3:4a:15:d3:ea:9c:73:
15:f5:cd:72:77:ba:ce:bd:80:b4:f4:c3:3c:f7:ad:78:2c:ea:
db:8f:12:a8:01:5f:e8:2b:0f:0f:92:74:65:6d:4d:32:14:fc:
66:39:a3:ca:83:f9:73:f4:b0:36:7c:27:dc:53:e2:f0:5b:92:
30:51:6e:55:f2:19:82:4a:9e:5d:ca:ea:ce:78:35:11:ad:3c:
51:25:ac:c8:ff:25:f2:dc:7e:d3:d5:6c:9c:fb:b2:36:87:77:
71:df:e0:dd:40:e0:33:ff:0a:d5:ed:9c:9d:f4:05:7a:dc:d3:
ea:eb:39:5f:99:d6:95:dd:6d:66:9a:4a:d6:f0:71:5e:44:30:
1c:11:3e:b0:86:87:a4:a5:db:b5:47:d0:19:1d:a3:d1:37:8b:
d9:dc:7b:83:0a:55:ed:58:6f:07:41:ad:44:06:49:11:9f:a7:
8e:73:d7:40:4a:b7:fa:0c:da:80:fd:e7:aa:3c:2f:e6:ae:80:
e5:e1:d3:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQo7jZFD8UDFus2SnJ8fB16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk
MzZiYTUwHhcNMjIxMDMwMTI0NjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODFjZWZhMDlkYmNmZDk3YjliYzk2M2VjMTczMDM0ZDBjYTFjNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kz2lrprk0ckYg01fKQ0L9MNC0G5
Z7mWz10/p+ZQIgy6Yd7BCufKexQ1TxiRf4PegX+LrBKBi5LU8UshOei7P880P4fr
Sqx3BNVqqNe6KnrpfpFnNY/sa+5lv7F0ccGn8GGKj5fePNBM2bHRCR4wHKQaM5Ww
YQH1P8YctrjmWOGoHfRnahZ5MoDqe5g7X8uuazth6QYyOyeM2IZVlopvpLJogUuW
UynqPNsYWKqkhRlDxa9itBo2/x2qYm2IZKSf9kRKDVRNE2Weri8wPDbFNE//FPTh
KgJxJk46Xh/kdYy1mahECXQKgHjhgh93lXmZxdhCQXXkmz3KDmaxB87zVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJgc76CdvP2XubyWPsFzA00MocSeMB8GA1UdIwQY
MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt
N2UwMzQwZWM5NjY3LzEvbUJ6dm9KMjhfWmU1dkpZLXdYTURUUXloeEo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3
LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYMwAwQB
ufGIMA0GCSqGSIb3DQEBCwUAA4IBAQB9tH+SeUcJVGLejSimnFJF7oFCStSgwisB
RkIRC40m4sRg5GZlmRnjqZL5H1679L7KHxGMusSqm85BWeqh2ui94KNKFdPqnHMV
9c1yd7rOvYC09MM89614LOrbjxKoAV/oKw8PknRlbU0yFPxmOaPKg/lz9LA2fCfc
U+LwW5IwUW5V8hmCSp5dyurOeDURrTxRJazI/yXy3H7T1Wyc+7I2h3dx3+DdQOAz
/wrV7Zyd9AV63NPq6zlfmdaV3W1mmkrW8HFeRDAcET6whoekpdu1R9AZHaPRN4vZ
3HuDClXtWG8HQa1EBkkRn6eOc9dASrf6DNqA/eeqPC/mroDl4dPV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org