Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/MoRJKMSJbwu_-AvfhQCUmrHyH2E.roa
File: MoRJKMSJbwu_-AvfhQCUmrHyH2E.roa (raw, json)
Hash identifier: OzL+bEdSLi6VQ1be9yo8o7XbpBYRIyDvaXlxv7gS9gs=
Subject key identifier: 32:84:49:28:C4:89:6F:0B:BF:F8:0B:DF:85:00:94:9A:B1:F2:1F:61
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01856EA6AF75A90723FB9886A22604DC38FC
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/MoRJKMSJbwu_-AvfhQCUmrHyH2E.roa
Signing time: Sun 01 Jan 2023 18:44:55 +0000
ROA not before: Sun 01 Jan 2023 18:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51269
IP address blocks: 185.149.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:af:75:a9:07:23:fb:98:86:a2:26:04:dc:38:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jan 1 18:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32844928c4896f0bbff80bdf8500949ab1f21f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:1b:18:d3:e8:d8:52:db:29:5c:b1:ca:51:
5d:af:a0:48:b0:27:49:de:44:f9:39:e6:d2:85:3c:
f7:f4:79:b9:69:07:82:dd:94:08:f4:1a:bf:a5:0a:
04:60:d8:87:f7:36:c3:55:8a:c9:91:35:7e:57:a3:
43:06:c6:f5:98:ad:b9:7d:37:84:ab:7b:8b:af:4c:
77:a3:d7:af:c4:01:91:fe:15:91:78:0f:56:42:29:
2c:33:a3:07:37:2b:35:e9:6c:50:d1:d6:6f:cf:58:
ad:f5:17:c2:fc:1a:e2:e6:af:d7:30:ba:42:40:fc:
24:c8:f1:61:4d:9c:5f:ac:4d:47:32:66:78:e9:ca:
9b:9a:29:f2:c9:ae:6a:97:f0:19:b5:58:25:fd:2c:
41:b8:25:6f:42:df:13:07:21:df:73:e1:e4:df:d5:
23:29:a3:3a:a0:08:4e:4c:b1:ac:0f:6e:56:75:a1:
11:e8:d3:c6:5f:9a:ac:f7:ad:bc:28:e1:f5:98:ac:
a0:6c:73:0e:5b:8a:2b:44:36:1e:88:93:ee:6f:3a:
11:7b:32:a9:9f:7a:39:55:78:44:15:75:3c:3f:cf:
98:f7:5f:c5:ef:93:be:d0:3f:8d:c4:89:b1:f8:31:
06:4c:a1:0e:85:c5:58:1a:bf:fe:66:c4:89:cb:e7:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:49:28:C4:89:6F:0B:BF:F8:0B:DF:85:00:94:9A:B1:F2:1F:61
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/MoRJKMSJbwu_-AvfhQCUmrHyH2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.68.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9a:44:d1:dc:47:28:15:88:50:80:61:0a:f2:84:26:4b:41:
31:5c:a7:f1:37:11:9f:4d:4c:61:6a:7f:40:62:6d:cc:54:08:
a0:7a:2f:ee:5b:7f:17:bd:35:39:5c:d6:89:63:3f:e8:22:27:
01:11:dc:75:d2:f7:8a:ec:e3:0a:bd:0a:54:5a:7f:60:6a:52:
7f:02:38:4c:b2:66:02:92:56:c6:1a:b5:60:82:9c:98:0f:c6:
6a:7d:2a:d6:ab:df:99:8e:4b:90:db:79:6f:9a:b4:96:96:b8:
bd:59:e2:10:4b:66:6d:dc:b2:3d:dd:65:07:78:bd:14:e8:d5:
f5:03:07:9a:fd:f9:51:01:52:3f:f7:dc:a1:71:8d:73:f6:54:
b7:8a:bb:7e:81:af:13:8d:9f:7b:ab:f7:52:54:ed:e0:b1:8d:
a6:30:09:b2:c7:e1:42:52:6c:b9:f3:a1:8d:ac:37:63:85:07:
6e:86:9d:4b:bd:a3:10:0e:17:87:4a:d0:4b:58:99:48:38:3e:
3b:8a:60:2f:e4:31:b7:93:d9:12:a6:d2:cc:2e:87:4e:ab:ca:
c2:72:18:c5:aa:2f:cb:70:f5:15:c4:60:39:db:2f:52:a1:09:
97:0a:44:88:76:84:b4:37:b9:79:4b:41:b2:70:3e:ff:8c:f3:
2d:da:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:57:43 2025 by rpki-client