Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/MdqTSfBNRKRNmNmbYIIgsmebEOQ.roa
File: MdqTSfBNRKRNmNmbYIIgsmebEOQ.roa (raw, json)
Hash identifier: k8AVPTe6LbIusIrNBoRVC100F20x/4cMQxw9pepNuZQ=
Subject key identifier: 31:DA:93:49:F0:4D:44:A4:4D:98:D9:9B:60:82:20:B2:67:9B:10:E4
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 05755F20
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/MdqTSfBNRKRNmNmbYIIgsmebEOQ.roa
Signing time: Sat 01 Jan 2022 06:00:53 +0000
ROA not before: Sat 01 Jan 2022 06:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208045
IP address blocks: 151.249.126.0/24 maxlen: 24
2a01:5b40:ac3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91578144 (0x5755f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jan 1 06:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31da9349f04d44a44d98d99b608220b2679b10e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:07:44:03:f3:54:86:f6:f0:ad:41:d1:90:
a4:0d:08:af:c4:f6:a0:9c:fa:b7:13:1f:3b:d3:dc:
14:39:87:7e:58:9a:fc:8f:1b:d9:b4:77:3f:dd:cd:
e7:10:61:de:c1:af:80:3e:0e:02:0f:16:91:d1:e6:
69:4e:d5:f4:89:16:c2:54:72:30:df:12:2b:c4:40:
24:e4:62:cc:28:5f:fd:28:b5:5d:12:38:1b:f6:64:
e9:74:1e:68:8f:72:8e:2d:12:23:62:97:59:25:4b:
b5:7d:f4:a0:f9:80:6d:af:dc:48:68:bd:4c:e6:d0:
c8:71:ef:0d:f9:b0:bb:34:bb:ed:8c:b7:c1:3b:1a:
92:47:be:12:4d:fe:d8:13:86:75:87:20:78:1d:d9:
30:80:74:7d:70:21:5e:f9:04:9e:3b:12:1d:99:c6:
67:0d:1a:0d:fd:f9:a8:a7:59:5a:43:f1:26:87:36:
43:cd:30:4f:b2:c5:48:86:bb:6a:ab:74:2d:6a:68:
e7:43:b4:da:53:4f:fa:cb:81:91:e3:85:a5:9e:32:
48:ae:dd:54:28:dd:f7:b3:91:12:5c:ee:b6:b5:f6:
ca:b1:11:db:b1:98:34:ca:c5:c8:01:9c:74:2f:4e:
c2:69:0d:76:a4:ea:35:d2:1c:16:57:35:69:8b:22:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:93:49:F0:4D:44:A4:4D:98:D9:9B:60:82:20:B2:67:9B:10:E4
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/MdqTSfBNRKRNmNmbYIIgsmebEOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.126.0/24
IPv6:
2a01:5b40:ac3::/48
Signature Algorithm: sha256WithRSAEncryption
9c:06:33:0c:ee:94:9a:51:9f:c3:28:d4:57:af:83:bd:68:8e:
28:8a:43:d0:1d:d5:2d:b5:45:e7:9e:0d:8e:c1:b5:73:2b:07:
6c:c8:87:17:c5:62:71:11:e9:17:92:8e:25:8d:76:08:2f:0c:
33:e6:c1:b2:40:75:6e:01:6b:b9:ac:4f:23:92:87:8a:82:81:
c2:47:e5:9f:5f:e9:b8:90:e3:1a:49:93:a8:8e:26:f3:d7:ef:
14:bf:98:12:35:4a:2e:c9:21:00:44:b8:8d:3b:69:e9:c0:30:
be:ba:01:09:39:53:51:0b:c4:fe:fa:27:48:38:c2:c7:0d:7e:
51:43:d6:87:3c:2c:d8:45:7b:7f:69:dd:0b:d5:59:c2:8a:42:
db:e7:dc:49:8c:22:60:58:b4:fa:8b:58:cf:26:b6:f1:2f:93:
5a:44:90:e7:42:96:15:38:60:bb:69:db:eb:09:27:a7:56:c9:
26:d1:56:0d:da:b4:68:75:53:99:ee:48:ec:8b:6b:32:6c:5b:
dc:f7:19:f0:8e:14:d7:99:82:d4:5f:f3:78:6e:57:e0:11:d6:
e5:3e:77:86:58:22:52:a4:d2:dd:06:23:b9:c3:65:b3:e6:5a:
77:39:2c:9b:f8:64:46:08:87:a6:75:96:aa:c6:50:62:ef:5b:
b0:eb:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:26:45 2025 by rpki-client