Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/Mtb7mndfUyAEacU2Gsd3BQdbkxM.roa
File: Mtb7mndfUyAEacU2Gsd3BQdbkxM.roa (raw, json)
Hash identifier: YBcijRrw9SzA1HdsJVf8tf2AsfYnIOlyV9HkdX62i6M=
Subject key identifier: 32:D6:FB:9A:77:5F:53:20:04:69:C5:36:1A:C7:77:05:07:5B:93:13
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 18582768
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/Mtb7mndfUyAEacU2Gsd3BQdbkxM.roa
Signing time: Sat 01 Jan 2022 04:57:40 +0000
ROA not before: Sat 01 Jan 2022 04:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31081
IP address blocks: 193.28.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408430440 (0x18582768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Jan 1 04:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32d6fb9a775f53200469c5361ac77705075b9313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:95:c9:d5:fe:45:75:55:ac:08:52:8d:d9:
20:fb:ae:ee:5c:7a:ad:76:74:17:c3:29:ac:6b:c9:
a4:ea:e8:be:c9:c9:be:2f:a9:c2:60:ac:f7:8b:54:
06:50:ba:2d:8f:de:8b:7f:1a:db:c4:4c:90:d0:34:
03:74:55:e6:00:e5:56:ff:2f:c0:fa:9a:5d:0b:8c:
61:61:1a:c8:8e:c5:72:c2:77:5b:d5:f5:88:c8:6a:
29:bf:e2:ee:1e:7f:cf:df:94:b0:c6:1e:90:aa:9d:
9c:c6:3e:d0:ea:dd:fe:4e:94:c3:8e:ea:7f:0d:1e:
c8:b9:48:67:27:f7:f3:d0:fc:c1:af:ef:8b:2b:f0:
67:4a:65:13:87:d8:3c:d1:8a:a3:78:0d:e4:77:8b:
44:2d:40:b9:49:a2:e9:92:b5:67:f5:d9:49:75:a4:
e3:01:28:98:09:60:9f:f0:96:83:a2:14:3d:b2:74:
e8:31:46:dc:1e:90:f3:6b:e6:c1:33:49:2b:7e:d1:
41:f4:c4:52:c7:9a:ae:95:9c:34:a6:9a:10:4f:d0:
85:90:db:2e:ed:0b:42:be:37:5b:7b:c0:b7:6d:91:
bb:f7:77:4f:3c:37:9e:59:e5:af:6b:08:16:d6:82:
03:8c:cd:71:36:f9:13:85:2a:e6:dd:a8:c0:11:97:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:FB:9A:77:5F:53:20:04:69:C5:36:1A:C7:77:05:07:5B:93:13
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/Mtb7mndfUyAEacU2Gsd3BQdbkxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:af:81:7e:14:48:c5:e8:ee:08:c8:3e:5a:d9:73:ee:21:23:
05:eb:52:7d:5b:26:fc:10:8a:74:67:33:b4:d0:49:63:d5:2e:
7b:3a:ad:63:8d:89:dd:13:a5:08:5e:27:78:8f:56:82:80:99:
d7:a8:c3:84:2b:7c:e1:9b:ef:cd:af:16:a9:20:04:c4:a0:5b:
4b:55:b1:75:8f:7a:b0:93:95:e6:79:e5:41:29:6f:98:03:0f:
51:a9:f2:05:a3:e6:c1:72:9c:45:06:a0:c4:6f:c8:42:69:01:
7b:8d:42:59:47:86:99:ba:56:6a:dc:00:e1:e8:58:97:63:9b:
f1:b7:55:34:7a:49:03:ed:ae:dc:06:b0:c0:b2:5b:6b:fc:0a:
3f:88:91:96:92:f1:53:c5:dc:1d:a8:51:55:d5:2f:20:c7:2b:
93:55:ed:b8:96:25:11:0a:5a:ae:36:96:13:35:01:e7:a6:f4:
c9:cd:d8:f0:7f:4b:ac:dd:1c:61:29:18:c7:40:af:23:af:12:
b1:d7:12:de:93:b7:a0:97:48:29:45:3b:51:1d:ee:c6:4c:57:
3a:ef:a0:41:69:c5:d1:26:3d:14:5c:c3:f0:6b:11:90:e1:bc:
83:e1:5f:90:43:a0:b5:c5:31:0b:1d:8a:fe:d2:c2:ff:a4:b2:
f8:92:c6:96
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGFgnaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjE1MWE5YTE4YzhhOTJiNGI3Njc4ZGM5NjBjYzJhMWJiOTA4MDUxMB4XDTIyMDEw
MTA0NTc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJkNmZiOWE3NzVm
NTMyMDA0NjljNTM2MWFjNzc3MDUwNzViOTMxMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANE2lcnV/kV1VawIUo3ZIPuu7lx6rXZ0F8MprGvJpOrovsnJ
vi+pwmCs94tUBlC6LY/ei38a28RMkNA0A3RV5gDlVv8vwPqaXQuMYWEayI7FcsJ3
W9X1iMhqKb/i7h5/z9+UsMYekKqdnMY+0Ord/k6Uw47qfw0eyLlIZyf389D8wa/v
iyvwZ0plE4fYPNGKo3gN5HeLRC1AuUmi6ZK1Z/XZSXWk4wEomAlgn/CWg6IUPbJ0
6DFG3B6Q82vmwTNJK37RQfTEUsearpWcNKaaEE/QhZDbLu0LQr43W3vAt22Ru/d3
Tzw3nlnlr2sIFtaCA4zNcTb5E4Uq5t2owBGXoKECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQy1vuad19TIARpxTYax3cFB1uTEzAfBgNVHSMEGDAWgBRyFRqaGMipK0t2
eNyWDMKhu5CAUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NoVWFtaGpJcVN0TGRuamNsZ3pDb2J1UWdGRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvYzRmZGJjLTNjODgtNDBiNS04ZDc1LWNiZjk0YTAwY2M4My8x
L010YjdtbmRmVXlBRWFjVTJHc2QzQlFkYmt4TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
YzRmZGJjLTNjODgtNDBiNS04ZDc1LWNiZjk0YTAwY2M4My8xL2NoVWFtaGpJcVN0
TGRuamNsZ3pDb2J1UWdGRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEc/jANBgkqhkiG9w0BAQsFAAOC
AQEAua+BfhRIxejuCMg+Wtlz7iEjBetSfVsm/BCKdGcztNBJY9UuezqtY42J3ROl
CF4neI9WgoCZ16jDhCt84Zvvza8WqSAExKBbS1WxdY96sJOV5nnlQSlvmAMPUany
BaPmwXKcRQagxG/IQmkBe41CWUeGmbpWatwA4ehYl2Ob8bdVNHpJA+2u3AawwLJb
a/wKP4iRlpLxU8XcHahRVdUvIMcrk1XtuJYlEQparjaWEzUB56b0yc3Y8H9LrN0c
YSkYx0CvI68SsdcS3pO3oJdIKUU7UR3uxkxXOu+gQWnF0SY9FFzD8GsRkOG8g+Ff
kEOgtcUxCx2K/tLC/6Sy+JLGlg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:41:11 2025 by rpki-client