Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/MQvft_qAfLQ8pZcHXwsCHBKzwn0.roa
File: MQvft_qAfLQ8pZcHXwsCHBKzwn0.roa (raw, json)
Hash identifier: NKNokkZ31tpd52lDSeXUShon0+HEyB0RFALduXT5dIU=
Subject key identifier: 31:0B:DF:B7:FA:80:7C:B4:3C:A5:97:07:5F:0B:02:1C:12:B3:C2:7D
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 0575A06C
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/MQvft_qAfLQ8pZcHXwsCHBKzwn0.roa
Signing time: Sat 01 Jan 2022 09:03:25 +0000
ROA not before: Sat 01 Jan 2022 09:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 194.147.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91594860 (0x575a06c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Jan 1 09:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=310bdfb7fa807cb43ca597075f0b021c12b3c27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:a7:6b:0f:5a:1b:7f:26:fa:c4:06:c4:d0:
85:d3:5a:5e:30:b4:7f:ed:f6:ea:66:20:3c:a9:aa:
d7:f5:7d:c8:ef:0c:a1:24:5c:0c:34:82:0f:a8:aa:
50:48:ed:56:78:ff:7f:f9:72:98:20:d0:54:89:2e:
42:21:37:b4:97:e0:d2:43:ef:3f:e0:11:a8:fe:1e:
cf:8b:a6:f2:ac:79:3e:4b:ae:e8:ae:1e:73:2f:aa:
71:94:29:32:86:75:8b:bf:35:a0:55:2e:82:30:3b:
de:72:62:7c:ca:8a:60:46:38:b2:8b:90:73:07:d8:
11:2f:9a:22:e7:7b:02:8f:8a:d3:91:8a:53:2a:6f:
f0:37:d7:66:43:12:96:82:6e:c8:ef:12:c3:7b:85:
d2:3e:34:2d:ed:83:ce:90:72:43:0f:e9:7f:a0:45:
90:59:58:33:6c:05:e9:eb:75:71:35:ed:70:62:19:
46:c8:ce:48:86:e9:ca:48:40:d0:cf:c2:9d:98:69:
fe:c6:e6:69:a4:20:6d:d2:01:15:e6:b9:d1:c4:b6:
9a:c8:e2:db:ad:b4:ca:d3:6f:cd:84:29:b3:4c:f1:
c1:5a:f1:61:b0:d1:47:9e:20:28:ce:40:40:c2:64:
9d:b2:c8:85:92:28:d0:cb:5a:2e:47:28:90:f7:f7:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:DF:B7:FA:80:7C:B4:3C:A5:97:07:5F:0B:02:1C:12:B3:C2:7D
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/MQvft_qAfLQ8pZcHXwsCHBKzwn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.164.0/22
Signature Algorithm: sha256WithRSAEncryption
81:4a:d9:21:55:09:1f:8a:3a:35:26:91:32:90:b7:66:f3:8e:
87:de:6c:76:3b:fd:4c:f4:a1:94:e9:04:41:05:c4:e2:5c:10:
e7:85:59:24:9e:eb:0b:cc:8b:95:f8:f4:70:af:27:05:f1:99:
7f:5e:45:95:03:17:d4:e3:e4:bf:54:3e:15:73:0f:51:e9:87:
b1:a6:48:fc:1a:ab:4c:1d:49:97:2c:5d:66:12:cf:32:39:3a:
8b:a0:e2:30:46:96:b3:06:b4:15:42:a6:f7:ac:9b:db:f4:62:
82:29:dd:ce:21:0b:42:27:22:6e:4b:79:b6:b8:8a:62:2b:b7:
6e:e3:29:24:af:a8:23:0b:dd:c2:01:d1:31:2c:fe:35:40:7d:
c9:9f:05:0a:07:30:f7:26:72:e0:2b:93:58:79:14:aa:59:1f:
52:27:57:d9:f5:8a:0e:b0:bf:03:16:9d:b0:b3:dc:14:2d:b5:
f4:ef:22:90:20:6b:5c:fe:85:b6:9e:b6:37:f9:56:42:ee:36:
05:81:bd:d7:a1:09:0c:ca:ac:33:fc:a9:0b:a3:13:04:17:b9:
69:b4:26:56:3d:1f:40:7a:0e:6a:5c:78:34:a5:a3:e4:6f:a5:
b6:1f:c9:f2:7d:da:be:49:d0:11:00:98:cc:08:40:43:7d:22:
3e:42:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:57 2025 by rpki-client