Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/Ma9n8BMDqlxaNf208VNmwIgBdhU.roa
File: Ma9n8BMDqlxaNf208VNmwIgBdhU.roa (raw, json)
Hash identifier: v4AZZbMjQiym0yAhweeKtEUQ3vsioy1uJES7NaucTLU=
Subject key identifier: 31:AF:67:F0:13:03:AA:5C:5A:35:FD:B4:F1:53:66:C0:88:01:76:15
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 0211443A
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/Ma9n8BMDqlxaNf208VNmwIgBdhU.roa
Signing time: Sat 01 Jan 2022 05:06:17 +0000
ROA not before: Sat 01 Jan 2022 05:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52164
IP address blocks: 193.238.86.0/24 maxlen: 24
2a11:280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34686010 (0x211443a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Jan 1 05:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31af67f01303aa5c5a35fdb4f15366c088017615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:90:d3:96:93:6b:7f:1a:20:de:2f:5f:60:
dd:bb:e8:76:7e:19:08:d8:59:1f:5b:b5:fc:95:3a:
01:2e:ec:30:ff:eb:a8:7c:35:fe:b3:34:9a:11:25:
2e:09:bf:06:b6:0e:7d:e3:b0:b4:14:66:3d:0b:11:
92:54:f2:ef:71:f2:55:20:53:05:6c:3f:d5:7b:6e:
c7:51:ab:00:d4:28:e3:08:ff:ec:5f:6f:49:4c:86:
00:16:84:17:c2:bd:ef:e2:0f:e5:d5:8c:16:9a:9e:
01:85:4f:e9:fe:6c:ed:e0:79:80:63:58:65:45:ed:
ef:b7:b4:47:df:20:04:70:3a:23:db:81:bd:1f:12:
fc:3f:9b:43:00:d3:89:76:d1:f5:5b:84:64:b3:57:
5c:5d:2c:f7:b4:40:8c:0f:17:53:57:83:69:61:79:
72:8f:00:1a:de:4d:43:07:20:26:59:80:63:e0:12:
f3:9e:a3:a8:23:dd:5c:b9:99:47:05:84:8d:ce:3f:
32:70:b9:fa:ee:41:97:54:a3:17:f3:08:d5:c1:2c:
d1:b4:04:a0:d4:74:3a:fe:a2:51:40:40:7a:8d:18:
6e:c8:1e:09:65:81:5b:d5:99:f1:a9:9b:30:a0:cc:
0c:57:cf:e4:a8:1d:19:a9:aa:b5:2d:c1:ce:85:a1:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:67:F0:13:03:AA:5C:5A:35:FD:B4:F1:53:66:C0:88:01:76:15
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/Ma9n8BMDqlxaNf208VNmwIgBdhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.86.0/24
IPv6:
2a11:280::/29
Signature Algorithm: sha256WithRSAEncryption
50:66:ae:67:9d:62:15:0b:23:ae:1d:ad:e4:98:91:0b:19:cc:
f0:3a:59:70:f7:b6:4a:43:f5:7d:61:25:ff:48:8a:d7:1e:9b:
28:99:c8:29:84:4d:da:3b:31:c5:d5:6c:76:5e:0f:2f:79:db:
48:cd:c9:ac:33:c0:e3:1b:80:95:e3:48:ca:18:e7:c3:18:99:
26:ec:b1:9d:c9:20:69:89:51:1e:2e:9a:2b:af:ae:0b:68:51:
37:e4:0e:db:f4:3c:81:1e:91:d0:c4:3a:9d:07:39:e1:a8:0b:
76:a7:28:b8:02:24:5a:8d:6b:8f:5f:74:91:bb:17:8b:90:99:
e2:1f:9d:f7:98:3b:ac:6a:3c:fa:42:76:6d:3a:3a:7c:c3:92:
ac:26:bf:98:a3:19:91:da:c3:7c:97:d6:04:0a:20:50:83:3e:
61:01:ad:63:1b:ff:2e:23:95:60:34:ec:87:a2:42:68:a4:ed:
15:a1:67:a8:32:b1:e8:fb:3c:72:5f:2e:1e:20:72:81:9e:04:
4e:5b:2b:43:b8:0e:6c:ea:71:c6:fc:0f:b6:00:37:30:95:26:
76:bc:c1:a3:f8:80:15:10:4f:48:ec:49:1b:22:10:86:1a:f6:
47:0b:96:b2:e2:3a:cf:64:8b:c4:d1:04:ca:e7:da:1e:17:c9:
94:8e:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:24:29 2025 by rpki-client