Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/MWuqAuNERw-26iybqwtLrzS9aXI.roa
File: MWuqAuNERw-26iybqwtLrzS9aXI.roa (raw, json)
Hash identifier: uRnwyU8rBimFp0yGuknnqGxma6fkF1bwiv2DGiikUOk=
Subject key identifier: 31:6B:AA:02:E3:44:47:0F:B6:EA:2C:9B:AB:0B:4B:AF:34:BD:69:72
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 01856BC105B036FE4A1604E7B55B0A984BF1
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/MWuqAuNERw-26iybqwtLrzS9aXI.roa
Signing time: Sun 01 Jan 2023 05:14:50 +0000
ROA not before: Sun 01 Jan 2023 05:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213113
IP address blocks: 93.177.80.0/24 maxlen: 24
2a0a:d981::/32 maxlen: 32
2a0a:d980::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:05:b0:36:fe:4a:16:04:e7:b5:5b:0a:98:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jan 1 05:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=316baa02e344470fb6ea2c9bab0b4baf34bd6972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:f8:f7:1a:2c:35:d3:dc:ba:01:a8:ce:57:
15:65:4d:ac:9a:3d:d0:a4:dc:9a:6b:7d:99:f9:e6:
df:22:0f:da:07:4c:2c:47:42:35:ab:b4:49:9c:96:
87:6d:40:7e:86:62:c8:d8:2e:26:55:4d:32:1e:ef:
46:9a:fd:f2:54:45:84:5c:17:95:a4:4a:53:94:67:
e9:a9:9a:74:4a:e3:59:d1:d8:a4:ff:b1:3c:26:54:
ca:76:6c:49:84:2f:62:49:76:08:64:7b:98:05:8b:
3c:91:c0:fe:bc:0f:e2:bb:3d:70:a6:89:e1:ae:f7:
71:46:cd:2e:ed:b0:6e:23:0f:19:d2:4d:f9:51:67:
2c:1d:07:99:f9:48:84:8c:4d:e2:55:44:43:a9:e0:
75:6a:72:5f:92:15:09:79:b8:99:52:a9:39:43:5d:
43:e8:c8:ec:88:3f:54:c8:de:25:31:4a:f6:b3:30:
1a:b6:7c:bb:2a:1d:60:ca:43:d1:3a:a6:51:c6:31:
a6:88:fb:fa:ec:7d:e5:ec:73:ed:33:6b:28:d1:73:
70:1d:35:c1:6a:b3:12:ee:2a:63:54:83:d9:c2:dc:
99:f1:f4:5a:fd:de:0d:42:03:89:29:81:fe:71:36:
b7:89:b4:3d:be:22:52:52:8f:8b:cd:af:53:72:ee:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6B:AA:02:E3:44:47:0F:B6:EA:2C:9B:AB:0B:4B:AF:34:BD:69:72
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/MWuqAuNERw-26iybqwtLrzS9aXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.80.0/24
IPv6:
2a0a:d980::/31
Signature Algorithm: sha256WithRSAEncryption
3d:38:29:2e:bb:05:4e:27:60:5f:d8:4b:5c:0e:e9:81:e3:cb:
0a:d0:75:9c:4b:da:7e:f9:51:87:8e:dc:0c:d0:e6:b5:c6:43:
ea:12:41:67:24:fc:c4:02:62:51:27:ba:38:9b:b7:82:75:c4:
95:2e:2e:00:b4:31:ae:c5:ac:fe:78:df:b3:b9:48:51:00:da:
3e:0c:f0:ae:fb:5f:e1:65:30:c5:7f:ce:55:20:10:e9:c3:de:
b0:a5:ac:8d:a7:bb:cd:39:cb:bd:1d:91:c8:47:20:75:22:6f:
00:e7:5c:ee:43:45:f7:a8:7e:b2:2f:19:32:10:14:fe:57:25:
07:bc:1b:bd:92:2a:70:cb:28:c1:a8:c0:ff:2d:89:5a:1d:6e:
0d:f1:3e:87:3b:6f:89:a9:d9:b1:c3:1e:c4:5f:38:8c:f1:87:
4e:40:2d:fc:44:38:ea:28:89:7b:56:c2:d8:7f:1c:40:87:e4:
99:35:2e:b7:01:78:9b:43:fa:78:8c:e4:81:4c:e7:8d:39:07:
44:f7:e6:56:ce:00:15:36:e6:24:a7:31:c9:da:dd:0b:1a:fa:
8c:85:40:5e:59:16:7f:9f:38:a2:0a:24:c2:ef:75:1c:fe:71:
e3:12:f7:19:b7:19:8f:91:ed:63:4d:67:17:98:89:83:cc:49:
f2:b8:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:06 2025 by rpki-client