Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/mv8LGsectoZh3yde0CiS19AUTz0.roa
File: mv8LGsectoZh3yde0CiS19AUTz0.roa (raw, json)
Hash identifier: oki4XpuS5w+IygV/yhbzKfFJYZVKpBThHengNX8/YNc=
Subject key identifier: 9A:FF:0B:1A:C7:9C:B6:86:61:DF:27:5E:D0:28:92:D7:D0:14:4F:3D
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 03D6B896
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/mv8LGsectoZh3yde0CiS19AUTz0.roa
Signing time: Wed 20 Apr 2022 06:14:24 +0000
ROA not before: Wed 20 Apr 2022 06:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59497
IP address blocks: 194.8.144.0/24 maxlen: 24
194.8.145.0/24 maxlen: 24
194.8.144.0/22 maxlen: 22
194.8.147.0/24 maxlen: 24
194.8.146.0/24 maxlen: 24
188.191.233.0/24 maxlen: 24
188.191.232.0/21 maxlen: 21
188.191.232.0/24 maxlen: 24
188.191.237.0/24 maxlen: 24
188.191.235.0/24 maxlen: 24
188.191.236.0/24 maxlen: 24
188.191.234.0/24 maxlen: 24
188.191.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64403606 (0x3d6b896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Apr 20 06:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aff0b1ac79cb68661df275ed02892d7d0144f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:5b:e3:fa:da:10:c7:78:38:59:b1:97:31:
ca:0f:4c:15:bf:18:32:ed:ae:b9:25:13:b7:17:87:
44:5e:83:a8:37:42:e1:b2:dd:5a:05:07:60:f8:56:
c6:72:0e:46:81:b5:dd:e7:a2:41:6a:e2:7e:ec:4f:
d3:b3:89:a8:ac:3f:36:97:61:e5:32:39:6d:cd:13:
5a:30:a4:e0:a0:6b:a6:07:4e:01:52:11:90:5a:5b:
43:83:6c:d9:b7:55:d9:fe:5e:e1:60:21:a7:a0:0c:
d1:f2:bb:e1:69:ec:fb:8b:b6:a6:87:63:a4:9a:15:
84:40:81:23:49:e9:37:da:fa:f3:f4:3f:56:74:ab:
fe:a6:28:7a:54:31:01:cd:d0:6b:2a:08:fc:cc:ba:
2f:7e:99:9a:cb:69:db:b9:29:9e:17:8b:23:da:0f:
28:05:32:1d:08:41:4f:7a:c9:e1:ac:31:c1:ab:17:
3f:95:9a:c6:03:b6:8e:c2:1c:b3:d2:4a:f6:cd:88:
3f:31:ec:a9:cd:3e:27:2b:92:c4:5f:a8:a1:7a:5d:
42:c3:47:0c:d8:11:b8:a3:f7:f0:b3:25:c8:2c:67:
25:af:83:8f:67:db:ac:87:d6:88:2e:26:4f:f4:4f:
a2:0b:ce:41:d9:b5:f2:2f:64:03:53:d1:d2:13:7b:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:0B:1A:C7:9C:B6:86:61:DF:27:5E:D0:28:92:D7:D0:14:4F:3D
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/mv8LGsectoZh3yde0CiS19AUTz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.232.0/21
194.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:de:fd:88:9c:31:77:d6:b6:dd:9d:13:bd:4a:20:c1:5e:53:
0f:19:5a:da:93:d3:3b:b5:ca:da:99:d2:c1:98:0e:dc:8d:21:
c7:af:1a:87:58:4d:23:a3:58:58:35:47:d2:b9:27:c6:f5:12:
46:41:96:0a:44:a3:da:21:84:72:87:cc:a9:a7:62:fb:4d:90:
48:57:f4:8f:d4:c1:05:6f:e4:53:32:79:e0:01:90:87:a4:3d:
e8:14:61:c6:ad:1e:45:80:9c:f3:ec:c7:9c:9f:39:fb:98:0f:
55:7c:ab:cf:bd:b6:ed:aa:10:f5:b4:a7:de:23:23:1a:e0:42:
3f:38:d9:35:01:6f:0d:2e:c1:85:95:70:03:b8:04:ae:ce:8e:
bd:d5:c8:47:e9:a3:02:38:64:7a:d3:1f:07:c5:1d:80:87:84:
8a:a2:d5:2d:db:35:80:7c:6f:48:a8:49:59:0b:58:4b:c2:1b:
f9:0d:8a:8d:2a:90:79:e1:e2:59:d8:72:21:df:e5:7a:a0:47:
80:64:13:ce:7a:d3:cf:7d:02:65:c3:8f:40:61:2e:e6:02:d3:
c0:71:ec:27:9e:7d:3f:40:3e:e3:c2:e3:45:c5:cc:d5:98:20:
c5:d1:e3:dd:f8:13:9c:ab:8c:e8:85:8f:cb:82:49:e1:fe:68:
66:72:85:ba
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA9a4ljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjU1YTY0MjM3OWNlNTc4ZjM5ZWMwZDEwNjAzZGNmYTgzZjZlMzRlMB4XDTIyMDQy
MDA2MTQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFmZjBiMWFjNzlj
YjY4NjYxZGYyNzVlZDAyODkyZDdkMDE0NGYzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANF3W+P62hDHeDhZsZcxyg9MFb8YMu2uuSUTtxeHRF6DqDdC
4bLdWgUHYPhWxnIORoG13eeiQWrifuxP07OJqKw/Npdh5TI5bc0TWjCk4KBrpgdO
AVIRkFpbQ4Ns2bdV2f5e4WAhp6AM0fK74Wns+4u2podjpJoVhECBI0npN9r68/Q/
VnSr/qYoelQxAc3QayoI/My6L36Zmstp27kpnheLI9oPKAUyHQhBT3rJ4awxwasX
P5WaxgO2jsIcs9JK9s2IPzHsqc0+JyuSxF+ooXpdQsNHDNgRuKP38LMlyCxnJa+D
j2fbrIfWiC4mT/RPogvOQdm18i9kA1PR0hN7YvECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSa/wsax5y2hmHfJ17QKJLX0BRPPTAfBgNVHSMEGDAWgBSbVaZCN5zlePOe
wNEGA9z6g/bjTjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L20xV21RamVjNVhqem5zRFJCZ1BjLW9QMjQwNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvYmU5MmI1LTU3MTctNDA0Ni1hYzFjLTgyMjJlMjUxYTkxYi8x
L212OExHc2VjdG9aaDN5ZGUwQ2lTMTlBVVR6MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
YmU5MmI1LTU3MTctNDA0Ni1hYzFjLTgyMjJlMjUxYTkxYi8xL20xV21RamVjNVhq
em5zRFJCZ1BjLW9QMjQwNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA7y/6AMEAsIIkDANBgkqhkiG9w0B
AQsFAAOCAQEASt79iJwxd9a23Z0TvUogwV5TDxla2pPTO7XK2pnSwZgO3I0hx68a
h1hNI6NYWDVH0rknxvUSRkGWCkSj2iGEcofMqadi+02QSFf0j9TBBW/kUzJ54AGQ
h6Q96BRhxq0eRYCc8+zHnJ85+5gPVXyrz7227aoQ9bSn3iMjGuBCPzjZNQFvDS7B
hZVwA7gErs6OvdXIR+mjAjhketMfB8UdgIeEiqLVLds1gHxvSKhJWQtYS8Ib+Q2K
jSqQeeHiWdhyId/leqBHgGQTznrTz30CZcOPQGEu5gLTwHHsJ559P0A+48LjRcXM
1ZggxdHj3fgTnKuM6IWPy4JJ4f5oZnKFug==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net