Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/Mf1fv0knCn-iixhhTxhzpGOut08.roa
File: Mf1fv0knCn-iixhhTxhzpGOut08.roa (raw, json)
Hash identifier: 462dnbrhj4K1GvP5O7k7n0Utdm0EhIq3KSX0OrZOgvA=
Subject key identifier: 31:FD:5F:BF:49:27:0A:7F:A2:8B:18:61:4F:18:73:A4:63:AE:B7:4F
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 018BF27341B154888ECBC10A0CFE32FF5BC5
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/Mf1fv0knCn-iixhhTxhzpGOut08.roa
Signing time: Tue 21 Nov 2023 15:15:21 +0000
ROA not before: Tue 21 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 94.26.97.0/24 maxlen: 24
185.94.78.0/23 maxlen: 24
45.94.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:73:41:b1:54:88:8e:cb:c1:0a:0c:fe:32:ff:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Nov 21 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31fd5fbf49270a7fa28b18614f1873a463aeb74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:b4:45:7c:ab:c3:03:43:e8:a9:53:be:f8:
05:16:37:e9:db:53:80:87:df:29:19:d1:55:7c:e8:
98:71:14:13:9b:5d:e5:82:a0:6b:25:f2:71:66:5a:
55:66:eb:bc:76:cd:15:9d:a4:6d:77:8a:63:26:37:
d4:71:f5:7a:1f:88:42:d4:72:47:40:1e:4b:eb:7f:
5c:46:6c:a7:49:18:78:4f:d2:be:d1:49:3c:94:97:
85:f2:97:bb:1e:62:8a:9f:2e:66:22:c2:cb:bf:0b:
eb:61:2c:6a:fc:a2:d4:4e:e7:80:a0:b6:10:29:d9:
47:f3:4d:57:4c:d2:dd:bb:b4:a2:e9:e2:4b:e3:b1:
c2:2a:d5:ea:47:9f:1c:15:d9:cc:d3:4e:32:10:21:
cd:09:68:db:8c:25:89:ce:ac:a6:88:a8:d9:b7:17:
16:90:24:f0:d0:f7:b6:d4:e2:aa:17:0a:7a:cc:34:
8f:38:9a:f8:2f:02:32:38:60:95:02:65:60:42:dd:
55:c1:b8:72:31:a1:9d:76:7c:96:ba:65:66:6d:18:
aa:34:45:55:fa:f6:42:ea:63:62:a4:a4:80:c4:b6:
1f:0a:17:5d:96:97:53:34:25:66:7f:6a:e1:da:71:
a0:3e:8d:d1:a9:18:00:3e:17:5d:c1:3e:cb:64:0b:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:5F:BF:49:27:0A:7F:A2:8B:18:61:4F:18:73:A4:63:AE:B7:4F
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/Mf1fv0knCn-iixhhTxhzpGOut08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.10.0/24
94.26.97.0/24
185.94.78.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:25:11:78:55:8d:f2:b7:80:82:a4:be:c3:8e:7a:7f:2d:03:
44:5e:f2:a9:54:6e:3d:3d:ce:29:22:b0:92:76:a9:86:88:5e:
7b:a9:49:e9:79:c3:e6:8e:4a:b1:50:39:2a:da:fa:df:10:12:
88:1a:7d:90:00:32:86:4f:6f:2c:ea:d6:86:be:17:fa:27:cb:
ce:6f:33:69:5a:bb:33:50:74:58:6c:0e:13:df:95:9d:bf:ec:
18:28:f8:6f:6f:69:08:92:db:dd:25:0d:f2:3d:7d:3f:73:46:
a0:14:36:53:9a:72:3f:1c:e9:6a:c0:05:6d:f2:89:b7:fa:9f:
a2:ad:4d:36:9c:3c:e3:97:fa:44:7e:e9:4a:32:94:a4:7d:08:
0a:49:9f:d8:80:ed:93:4b:dc:35:3a:fd:38:d7:d5:fe:c2:94:
20:3e:24:79:f3:d8:1f:63:d5:09:ef:a2:b8:f7:e6:db:8e:4c:
f1:84:37:be:25:6d:70:5d:33:fe:b2:24:53:16:52:b6:f6:fb:
94:15:d9:a2:ab:25:2f:a9:e1:01:32:26:03:a7:b8:67:93:5c:
79:f6:7e:39:a9:9b:c5:4f:96:4d:a0:cf:b6:d4:25:9c:4b:60:
e3:09:34:5d:71:24:fb:15:02:61:05:b4:e9:8b:4d:eb:f1:a0:
5c:04:1a:0a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvyc0GxVIiOy8EKDP4y/1vFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjMxMTIxMTUxNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWZkNWZiZjQ5MjcwYTdmYTI4YjE4NjE0ZjE4NzNhNDYzYWViNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9y0RXyrwwND6KlTvvgFFjfp21OA
h98pGdFVfOiYcRQTm13lgqBrJfJxZlpVZuu8ds0VnaRtd4pjJjfUcfV6H4hC1HJH
QB5L639cRmynSRh4T9K+0Uk8lJeF8pe7HmKKny5mIsLLvwvrYSxq/KLUTueAoLYQ
KdlH801XTNLdu7Si6eJL47HCKtXqR58cFdnM004yECHNCWjbjCWJzqymiKjZtxcW
kCTw0Pe21OKqFwp6zDSPOJr4LwIyOGCVAmVgQt1VwbhyMaGddnyWumVmbRiqNEVV
+vZC6mNipKSAxLYfChddlpdTNCVmf2rh2nGgPo3RqRgAPhddwT7LZAv7awIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDH9X79JJwp/oosYYU8Yc6RjrrdPMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvTWYxZnYwa25Dbi1paXhoaFR4aHpwR091dDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV4KAwQA
XhphAwQBuV5OMA0GCSqGSIb3DQEBCwUAA4IBAQA+JRF4VY3yt4CCpL7Djnp/LQNE
XvKpVG49Pc4pIrCSdqmGiF57qUnpecPmjkqxUDkq2vrfEBKIGn2QADKGT28s6taG
vhf6J8vObzNpWrszUHRYbA4T35Wdv+wYKPhvb2kIktvdJQ3yPX0/c0agFDZTmnI/
HOlqwAVt8om3+p+irU02nDzjl/pEfulKMpSkfQgKSZ/YgO2TS9w1Ov0419X+wpQg
PiR589gfY9UJ76K49+bbjkzxhDe+JW1wXTP+siRTFlK29vuUFdmiqyUvqeEBMiYD
p7hnk1x59n45qZvFT5ZNoM+21CWcS2DjCTRdcST7FQJhBbTpi03r8aBcBBoK
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:31:11 2025 by rpki-client