Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/MugWfSQQBXPrlOYyS9nQjyUrNhs.roa
File: MugWfSQQBXPrlOYyS9nQjyUrNhs.roa (raw, json)
Hash identifier: seyg0cwBcnPUZJUNtLH3n70KGALLVUilzXiSTIeoVKU=
Subject key identifier: 32:E8:16:7D:24:10:05:73:EB:94:E6:32:4B:D9:D0:8F:25:2B:36:1B
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 13114ED5
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/MugWfSQQBXPrlOYyS9nQjyUrNhs.roa
Signing time: Fri 28 Jan 2022 20:53:26 +0000
ROA not before: Fri 28 Jan 2022 20:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44574
IP address blocks: 193.150.34.0/24 maxlen: 24
91.230.181.0/24 maxlen: 24
193.104.113.0/24 maxlen: 24
95.215.174.0/24 maxlen: 24
95.215.175.0/24 maxlen: 24
2001:678:498::/48 maxlen: 48
2001:678:4a0::/48 maxlen: 48
2001:67c:16d1::/48 maxlen: 48
2001:67c:1954::/48 maxlen: 48
2001:678:4a4::/48 maxlen: 48
2001:678:49c::/48 maxlen: 48
2001:67c:16d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319901397 (0x13114ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 28 20:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32e8167d24100573eb94e6324bd9d08f252b361b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:28:9d:d2:07:17:f6:88:a1:30:b7:e3:bf:
c0:c8:94:34:6e:26:11:83:11:64:e1:bd:20:0d:41:
50:2e:74:e5:22:a4:28:a0:ca:c9:91:04:82:9e:b4:
7d:15:cd:89:e3:9c:72:ff:dd:e9:06:82:92:50:64:
0c:55:6b:b4:26:a5:01:2d:49:d6:ec:6e:b8:49:a2:
9a:89:e0:4e:72:a7:52:0a:76:40:ff:8c:95:4d:af:
77:5a:e8:12:b5:3a:99:f3:fb:48:27:1d:9a:b1:bf:
f3:cf:bc:7e:10:1d:a4:46:84:06:7b:eb:01:ee:1d:
c5:3a:c1:de:96:8d:79:28:5a:a5:93:71:d2:56:56:
97:a6:ac:43:83:c9:ce:0b:cc:bd:39:17:1c:a0:eb:
d5:e0:b8:b1:59:5d:f7:99:e9:0e:16:23:75:f7:d6:
bc:08:27:55:c1:69:2c:f1:15:74:35:6e:e6:54:9a:
be:02:de:97:9d:66:da:d1:a0:ac:e5:cc:e3:d1:51:
7c:2a:29:9b:cc:f5:3f:1c:a6:0c:53:aa:a0:e0:36:
51:17:2b:67:c2:ef:a4:f2:84:11:2d:0a:59:37:47:
b3:54:9a:5a:7a:13:aa:96:52:39:9f:8f:c3:02:d1:
70:c2:8f:e4:14:9b:3b:d7:4c:30:05:0a:8a:03:13:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:16:7D:24:10:05:73:EB:94:E6:32:4B:D9:D0:8F:25:2B:36:1B
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/MugWfSQQBXPrlOYyS9nQjyUrNhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.181.0/24
95.215.174.0/23
193.104.113.0/24
193.150.34.0/24
IPv6:
2001:678:498::/48
2001:678:49c::/48
2001:678:4a0::/48
2001:678:4a4::/48
2001:67c:16d0::/47
2001:67c:1954::/48
Signature Algorithm: sha256WithRSAEncryption
ba:d7:44:6c:c8:79:44:c0:63:67:39:b5:9b:35:36:2e:2a:1a:
5b:c6:20:17:44:56:d5:0e:58:20:1b:48:36:d4:1b:f9:8d:dc:
12:79:bf:4d:da:9b:a9:d7:36:93:28:8d:ac:0f:d6:31:d3:09:
36:a6:43:72:dc:b1:c0:07:e9:5e:38:f8:5d:e5:71:fd:bf:1a:
f4:67:50:e4:ed:a2:51:10:d2:b4:b8:b5:1e:42:25:b3:12:56:
49:49:bd:f6:f2:0b:08:d8:90:ca:8d:34:f2:e4:f0:c8:27:f1:
99:f8:83:fc:f1:8e:48:4e:ca:8d:d6:7c:6e:57:2d:9e:26:86:
4e:09:76:25:04:9e:75:a6:e8:ff:e8:6c:a5:b6:ba:bd:22:53:
b9:b3:31:7c:9e:c5:20:f5:81:b7:3f:39:33:52:e7:9e:1c:37:
7e:3c:27:9a:f3:af:c5:c9:8d:17:74:e6:cc:c5:7b:91:3f:74:
68:fe:5f:64:23:f4:48:bd:54:17:51:78:7a:fc:ae:50:62:16:
4f:e1:1d:20:ca:a5:35:b0:49:4e:5a:ec:99:80:36:46:65:a3:
22:cb:2c:c5:de:5e:2b:dd:a3:aa:5d:e3:88:5b:d4:b7:c2:8d:
89:cf:45:b4:fa:7d:e8:f5:96:72:62:41:ef:19:41:2a:11:0a:
be:15:4b:53
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIEExFO1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTJlNGZkMjE5ZjViNzdjZTgwY2RmYWY5ZTNhNjQ0MWRlYzUwMDQyMB4XDTIyMDEy
ODIwNTMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJlODE2N2QyNDEw
MDU3M2ViOTRlNjMyNGJkOWQwOGYyNTJiMzYxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJ/KJ3SBxf2iKEwt+O/wMiUNG4mEYMRZOG9IA1BUC505SKk
KKDKyZEEgp60fRXNieOccv/d6QaCklBkDFVrtCalAS1J1uxuuEmimongTnKnUgp2
QP+MlU2vd1roErU6mfP7SCcdmrG/88+8fhAdpEaEBnvrAe4dxTrB3paNeShapZNx
0lZWl6asQ4PJzgvMvTkXHKDr1eC4sVld95npDhYjdffWvAgnVcFpLPEVdDVu5lSa
vgLel51m2tGgrOXM49FRfCopm8z1PxymDFOqoOA2URcrZ8LvpPKEES0KWTdHs1Sa
WnoTqpZSOZ+PwwLRcMKP5BSbO9dMMAUKigMTAiECAwEAAaOCAlkwggJVMB0GA1Ud
DgQWBBQy6BZ9JBAFc+uU5jJL2dCPJSs2GzAfBgNVHSMEGDAWgBQOLk/SGfW3fOgM
36+eOmRB3sUAQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RpNVAwaG4xdDN6b0ROLXZuanBrUWQ3RkFFSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvZTExMjI0LTYxYzctNDc4Ni04NmU5LTIzOGZlZTY5MjQzMC8x
L011Z1dmU1FRQlhQcmxPWXlTOW5RanlVck5ocy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
ZTExMjI0LTYxYzctNDc4Ni04NmU5LTIzOGZlZTY5MjQzMC8xL0RpNVAwaG4xdDN6
b0ROLXZuanBrUWQ3RkFFSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBv
BggrBgEFBQcBBwEB/wRgMF4wHgQCAAEwGAMEAFvmtQMEAV/XrgMEAMFocQMEAMGW
IjA8BAIAAjA2AwcAIAEGeASYAwcAIAEGeAScAwcAIAEGeASgAwcAIAEGeASkAwcB
IAEGfBbQAwcAIAEGfBlUMA0GCSqGSIb3DQEBCwUAA4IBAQC610RsyHlEwGNnObWb
NTYuKhpbxiAXRFbVDlggG0g21Bv5jdwSeb9N2pup1zaTKI2sD9Yx0wk2pkNy3LHA
B+leOPhd5XH9vxr0Z1Dk7aJRENK0uLUeQiWzElZJSb328gsI2JDKjTTy5PDIJ/GZ
+IP88Y5ITsqN1nxuVy2eJoZOCXYlBJ51puj/6Gyltrq9IlO5szF8nsUg9YG3Pzkz
UueeHDd+PCea86/FyY0XdObMxXuRP3Ro/l9kI/RIvVQXUXh6/K5QYhZP4R0gyqU1
sElOWuyZgDZGZaMiyyzF3l4r3aOqXeOIW9S3wo2Jz0W0+n3o9ZZyYkHvGUEqEQq+
FUtT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-fra.rpki-client.org