Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/mT7Ndb-A6O6Fy6FIWyi023SC7Rc.roa
File: mT7Ndb-A6O6Fy6FIWyi023SC7Rc.roa (raw, json)
Hash identifier: kgPRksxw5Q3CVmG+DFXlARswKTd2kvLNUQ8T+fT688o=
Subject key identifier: 99:3E:CD:75:BF:80:E8:EE:85:CB:A1:48:5B:28:B4:DB:74:82:ED:17
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 09D90FD9
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/mT7Ndb-A6O6Fy6FIWyi023SC7Rc.roa
Signing time: Sat 01 Jan 2022 08:54:33 +0000
ROA not before: Sat 01 Jan 2022 08:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28929
IP address blocks: 94.73.127.0/24 maxlen: 24
188.228.128.0/17 maxlen: 17
78.26.111.0/24 maxlen: 24
37.77.208.0/20 maxlen: 20
185.29.104.0/22 maxlen: 22
94.73.64.0/18 maxlen: 18
193.25.178.0/23 maxlen: 23
78.26.64.0/18 maxlen: 18
195.47.199.0/24 maxlen: 24
2a02:f8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165220313 (0x9d90fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 08:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=993ecd75bf80e8ee85cba1485b28b4db7482ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:27:f3:82:2e:dc:76:22:ed:b8:03:76:5d:
35:cb:6b:ce:51:78:a4:e7:77:be:20:4a:9e:0b:29:
47:b9:d6:0e:29:9a:59:fa:46:35:e0:3e:e9:09:a5:
c9:d6:4a:69:c7:8f:fa:05:74:d2:85:d2:c7:20:6f:
67:7a:65:37:a2:ad:12:be:e6:e0:fb:a9:1e:cb:af:
9a:f3:a8:30:16:fc:09:88:9a:3f:06:3c:00:d2:f8:
96:17:0d:13:e6:d3:0c:35:12:5e:2d:68:0c:8b:d3:
3e:59:c2:81:fc:27:57:90:02:c3:87:ae:d1:f6:d8:
dd:bb:5a:fc:93:63:e7:e8:39:4e:f7:db:1b:25:ba:
5a:7c:1f:00:4d:3a:4a:6b:d7:e5:3f:1d:23:ad:c2:
71:eb:3f:3d:e1:b8:96:c8:86:f0:c4:67:5b:d0:99:
fc:2d:a4:dd:ab:2f:3d:2e:66:72:33:8d:cc:67:cd:
49:91:74:b5:eb:77:45:65:5b:d8:7b:79:1d:51:61:
a2:28:d3:59:cb:10:8d:25:47:6f:1c:bf:fe:0b:e1:
69:c9:7f:97:db:28:46:75:eb:bc:99:88:05:27:bf:
36:51:ab:f1:7c:b0:13:2a:cc:30:98:c2:25:98:a4:
ff:13:cc:40:69:04:f2:84:fc:c6:9b:e5:7f:90:3c:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:CD:75:BF:80:E8:EE:85:CB:A1:48:5B:28:B4:DB:74:82:ED:17
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/mT7Ndb-A6O6Fy6FIWyi023SC7Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.208.0/20
78.26.64.0/18
94.73.64.0/18
185.29.104.0/22
188.228.128.0/17
193.25.178.0/23
195.47.199.0/24
IPv6:
2a02:f8::/32
Signature Algorithm: sha256WithRSAEncryption
17:6e:1d:fd:59:ce:7d:79:96:b8:6e:49:6f:56:da:79:03:4f:
d9:08:3d:4c:a9:46:d5:d3:ca:26:bf:66:b2:ec:07:5b:ed:9e:
35:3d:1f:b2:04:a2:28:53:c8:ab:e5:f3:1d:cc:a1:91:e5:b6:
8b:3e:78:91:58:82:20:5e:18:5a:3f:04:9e:bb:ce:da:a4:1b:
bc:d0:cd:a9:b3:1e:b6:2d:c7:26:e9:2c:cd:d3:a1:f4:bf:3c:
1d:0e:f6:3b:d3:fe:a9:56:b4:c9:dd:87:e1:5c:2e:ab:76:2d:
a2:72:d8:12:85:64:96:b2:dc:fd:0c:02:03:3e:23:9b:d0:64:
b7:a2:1f:77:c4:11:d7:ae:58:02:3a:ab:59:5c:d5:98:6c:d4:
1d:f2:e6:0c:6f:49:fd:a3:26:db:c7:9b:5d:c7:ad:c5:30:40:
d1:81:c9:79:cd:0d:c3:05:ec:fe:a5:01:08:83:57:1f:11:2b:
6a:42:61:af:3e:74:ff:19:75:d0:ed:2a:ed:25:df:58:0b:1f:
c6:a3:73:86:c3:af:21:c4:f7:42:25:0d:4d:56:6b:d9:6d:88:
88:e2:f0:ef:d1:2f:1c:76:d5:5c:a4:32:fd:7b:e5:61:50:43:
80:27:48:c2:96:af:cd:e9:d7:31:e4:18:6d:17:20:67:cb:82:
45:b2:bd:5e
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIECdkP2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
Y2M5NGZmNDc5Nzc4NjUxYTYwNTEyMWYxZmZlNjc4MTk2MzI4ZjM1MB4XDTIyMDEw
MTA4NTQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTkzZWNkNzViZjgw
ZThlZTg1Y2JhMTQ4NWIyOGI0ZGI3NDgyZWQxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjmJ/OCLtx2Iu24A3ZdNctrzlF4pOd3viBKngspR7nWDima
WfpGNeA+6QmlydZKaceP+gV00oXSxyBvZ3plN6KtEr7m4PupHsuvmvOoMBb8CYia
PwY8ANL4lhcNE+bTDDUSXi1oDIvTPlnCgfwnV5ACw4eu0fbY3bta/JNj5+g5Tvfb
GyW6WnwfAE06SmvX5T8dI63Cces/PeG4lsiG8MRnW9CZ/C2k3asvPS5mcjONzGfN
SZF0tet3RWVb2Ht5HVFhoijTWcsQjSVHbxy//gvhacl/l9soRnXrvJmIBSe/NlGr
8XywEyrMMJjCJZik/xPMQGkE8oT8xpvlf5A8nV8CAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBSZPs11v4Do7oXLoUhbKLTbdILtFzAfBgNVHSMEGDAWgBQ8yU/0eXeGUaYF
Eh8f/meBljKPNTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BNbFA5SGwzaGxHbUJSSWZIXzVuZ1pZeWp6VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvMWU2M2I2LTM5NTYtNGQxMi1iMTlmLTViZWY2NDIwYTAyOC8x
L21UN05kYi1BNk82Rnk2RklXeWkwMjNTQzdSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
MWU2M2I2LTM5NTYtNGQxMi1iMTlmLTViZWY2NDIwYTAyOC8xL1BNbFA5SGwzaGxH
bUJSSWZIXzVuZ1pZeWp6VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgMEBCVN0AMEBk4aQAMEBl5JQAMEArkd
aAMEB7zkgAMEAcEZsgMEAMMvxzANBAIAAjAHAwUAKgIA+DANBgkqhkiG9w0BAQsF
AAOCAQEAF24d/VnOfXmWuG5Jb1baeQNP2Qg9TKlG1dPKJr9msuwHW+2eNT0fsgSi
KFPIq+XzHcyhkeW2iz54kViCIF4YWj8EnrvO2qQbvNDNqbMeti3HJukszdOh9L88
HQ72O9P+qVa0yd2H4Vwuq3YtonLYEoVklrLc/QwCAz4jm9Bkt6Ifd8QR165YAjqr
WVzVmGzUHfLmDG9J/aMm28ebXcetxTBA0YHJec0NwwXs/qUBCINXHxErakJhrz50
/xl10O0q7SXfWAsfxqNzhsOvIcT3QiUNTVZr2W2IiOLw79EvHHbVXKQy/XvlYVBD
gCdIwpavzenXMeQYbRcgZ8uCRbK9Xg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net