Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/MuSnYp2XCLtUaeoHmycQ4MglPnA.roa
File: MuSnYp2XCLtUaeoHmycQ4MglPnA.roa (raw, json)
Hash identifier: xmW/3ijl0f+wZFV0oZTzOQWlGK7iHT73BZd5HxaQBgA=
Subject key identifier: 32:E4:A7:62:9D:97:08:BB:54:69:EA:07:9B:27:10:E0:C8:25:3E:70
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 10D88CA7
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/MuSnYp2XCLtUaeoHmycQ4MglPnA.roa
Signing time: Sat 01 Jan 2022 05:00:00 +0000
ROA not before: Sat 01 Jan 2022 05:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205721
IP address blocks: 185.208.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282627239 (0x10d88ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 05:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32e4a7629d9708bb5469ea079b2710e0c8253e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:ba:e2:dc:8c:fb:b7:c4:f9:6e:7d:23:62:
78:f4:c0:bb:4b:ff:e0:3e:55:97:ab:92:51:47:96:
cd:40:3a:6c:d5:25:2c:22:80:85:fa:21:7f:8f:bd:
f0:9f:e7:58:91:e8:e2:0e:a7:a2:5c:db:6b:5a:cc:
01:48:cf:e4:41:62:96:73:74:f5:14:55:ad:0a:bd:
87:eb:78:7e:50:c5:43:d0:7e:50:5e:a9:56:4a:ff:
0a:15:91:59:50:5f:ae:1b:34:99:bf:69:07:3c:50:
d9:81:a9:60:14:97:6b:dd:c1:f0:91:1d:0c:17:d6:
6b:54:43:43:7c:57:e1:80:0c:a6:32:2d:af:01:63:
e4:3b:9f:d8:3c:12:75:a1:54:19:fd:c4:bc:ef:f9:
c5:c7:8a:40:b6:f7:66:50:9f:37:e8:0b:1f:d7:51:
7c:45:00:05:b6:c8:6b:a9:6d:07:f6:5c:60:c4:1c:
64:74:ad:8f:25:22:c3:e2:d0:e1:4b:42:f0:62:14:
11:21:b7:b6:31:4d:17:1e:3d:c0:1e:86:09:14:db:
9d:64:a2:ef:63:86:3a:15:e7:84:8e:6b:c2:0e:f2:
40:0e:c3:e9:ef:87:80:ea:10:5b:a3:b8:c4:86:9f:
37:a5:b6:65:f9:63:9b:18:44:b7:86:bf:01:12:2a:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:A7:62:9D:97:08:BB:54:69:EA:07:9B:27:10:E0:C8:25:3E:70
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/MuSnYp2XCLtUaeoHmycQ4MglPnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.80.0/22
Signature Algorithm: sha256WithRSAEncryption
16:d2:bc:88:f6:fa:de:59:7c:d2:44:1e:37:1d:59:1b:06:06:
97:15:8a:19:9e:6d:8a:52:c2:04:28:60:25:47:d3:23:b3:3c:
d3:7d:7b:b3:df:0b:1a:be:b1:5f:4e:8a:0e:09:9b:8a:52:9e:
f2:8f:5d:e9:74:a3:7b:ab:ad:77:b4:44:41:e6:8e:09:4d:07:
8c:ec:07:89:4e:3f:f2:99:fc:08:6f:68:97:f8:b6:e0:6a:35:
b8:86:d8:03:57:41:c1:0f:b0:84:9c:ff:b6:d7:2a:a8:9a:65:
c3:c2:9e:05:8b:67:78:cd:ca:26:b0:90:72:5f:49:46:0c:fb:
cb:ca:77:df:27:2b:78:02:ff:3e:ef:47:40:38:c6:9e:f2:1f:
27:01:76:50:e8:8f:45:b7:81:ea:c5:a7:dd:c4:9b:70:31:e4:
b1:c4:bd:ec:d0:4e:f8:0c:1c:4b:6c:0c:d3:b7:b2:f3:b5:11:
ee:d0:3b:ab:39:fe:5f:5c:bd:24:f2:68:07:6e:2b:31:af:39:
d3:22:93:53:10:31:27:c5:e0:12:c9:2d:ff:ca:40:a5:fa:83:
5a:e2:c5:65:2c:e3:68:7f:92:de:dc:df:d1:27:11:af:79:ed:
e1:80:7a:38:8e:08:3e:5e:86:8d:cc:07:08:c4:fc:bc:5d:ec:
ea:ff:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:36 2025 by rpki-client