Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MtOcHACSScETXY56qzlK19iWDx0.roa
File: MtOcHACSScETXY56qzlK19iWDx0.roa (raw, json)
Hash identifier: dRayThprZtP7NCDbRkQVcEbfMfbq7s+tVzkcUr2nBAo=
Subject key identifier: 32:D3:9C:1C:00:92:49:C1:13:5D:8E:7A:AB:39:4A:D7:D8:96:0F:1D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27965850
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MtOcHACSScETXY56qzlK19iWDx0.roa
Signing time: Sat 01 Jan 2022 16:08:22 +0000
ROA not before: Sat 01 Jan 2022 16:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44835
IP address blocks: 146.120.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664164432 (0x27965850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32d39c1c009249c1135d8e7aab394ad7d8960f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:5f:17:2d:0f:a1:96:d9:e4:e5:f0:3c:57:
eb:97:f2:b7:02:96:e7:62:00:73:83:33:cb:82:a9:
e6:e0:e5:29:53:d7:1a:fc:e0:ad:22:52:5a:1c:a7:
b2:8b:b8:46:1f:1e:d1:c5:55:99:83:a5:51:35:36:
8a:f3:ef:d0:72:b9:99:ea:ee:11:c3:2e:5e:96:ed:
37:58:b3:f9:d3:62:2e:7b:46:ca:c3:78:03:e1:c4:
4a:59:32:f9:41:fb:5c:de:04:c8:56:6b:35:06:59:
f8:b6:9b:4f:ab:33:db:71:45:f9:35:f8:51:47:eb:
1f:11:cc:79:5c:b8:63:50:37:29:26:87:c7:1e:96:
6d:f7:7f:90:1a:23:fa:3d:af:3c:68:23:9a:3d:6c:
f7:c4:57:c9:60:02:cb:72:b7:54:e5:80:8d:c9:6c:
ff:ba:d8:2c:1e:7a:09:3f:4b:b7:2b:6e:20:4e:70:
d5:a6:eb:8f:71:8b:11:dc:1e:0f:ef:62:8d:e5:b2:
e9:89:48:ad:b5:c9:d7:6b:ea:a8:ca:55:91:be:05:
6d:0d:36:85:6a:8d:39:57:03:a8:59:8b:36:e8:52:
59:55:1f:96:12:2f:77:02:7a:82:d8:4f:8c:d1:a4:
20:1f:ac:4a:6d:0f:72:17:4b:e5:f0:75:ee:d2:81:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:9C:1C:00:92:49:C1:13:5D:8E:7A:AB:39:4A:D7:D8:96:0F:1D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MtOcHACSScETXY56qzlK19iWDx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.224.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9c:d4:b9:57:ff:23:74:d1:da:58:9f:3c:ce:5c:fe:5f:c9:
ac:c0:43:cf:fe:6c:f3:04:75:37:ec:73:ab:3e:b6:27:95:67:
ce:08:bf:63:50:6b:c0:ae:5f:1e:88:07:e1:43:b3:cb:60:35:
d4:07:a5:93:ff:96:16:42:fc:d1:9a:94:cb:47:b2:ad:e3:90:
2a:5d:93:5a:91:08:e7:26:27:9f:3e:62:38:a7:b3:a7:2f:62:
fd:29:ea:a5:14:fe:10:2f:dd:6c:24:ed:69:e7:a1:08:6d:5e:
18:9e:20:56:74:d6:cc:73:50:41:90:af:0c:f2:65:24:3e:5c:
f1:af:43:8f:96:2f:1c:18:51:20:5c:77:77:6d:3f:9e:83:0a:
53:8e:c6:ed:90:9f:4b:41:24:e4:cd:25:b6:52:2c:5f:41:96:
bc:32:88:ac:f7:45:ed:52:89:b8:c1:b1:51:c5:90:1a:f6:5f:
de:da:ac:1b:a1:df:b2:0c:c3:1d:6c:7e:a9:a8:2d:06:eb:64:
08:06:a2:e1:b0:34:7f:9d:0b:35:93:53:58:c3:87:bf:3a:d0:
ae:a1:05:e6:21:bc:20:8e:37:56:fe:b4:8d:3f:4e:d3:95:6d:
6e:fe:0c:54:88:77:74:88:0e:3f:b1:06:2b:ce:28:91:82:b2:
27:ad:44:96
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ5ZYUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJkMzljMWMwMDky
NDljMTEzNWQ4ZTdhYWIzOTRhZDdkODk2MGYxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOMPXxctD6GW2eTl8DxX65fytwKW52IAc4Mzy4Kp5uDlKVPX
GvzgrSJSWhynsou4Rh8e0cVVmYOlUTU2ivPv0HK5meruEcMuXpbtN1iz+dNiLntG
ysN4A+HESlky+UH7XN4EyFZrNQZZ+LabT6sz23FF+TX4UUfrHxHMeVy4Y1A3KSaH
xx6Wbfd/kBoj+j2vPGgjmj1s98RXyWACy3K3VOWAjcls/7rYLB56CT9LtytuIE5w
1abrj3GLEdweD+9ijeWy6YlIrbXJ12vqqMpVkb4FbQ02hWqNOVcDqFmLNuhSWVUf
lhIvdwJ6gthPjNGkIB+sSm0PchdL5fB17tKBgRMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQy05wcAJJJwRNdjnqrOUrX2JYPHTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L010T2NIQUNTU2NFVFhZNTZxemxLMTlpV0R4MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJJ44DANBgkqhkiG9w0BAQsFAAOC
AQEAgJzUuVf/I3TR2lifPM5c/l/JrMBDz/5s8wR1N+xzqz62J5Vnzgi/Y1BrwK5f
HogH4UOzy2A11Aelk/+WFkL80ZqUy0eyreOQKl2TWpEI5yYnnz5iOKezpy9i/Snq
pRT+EC/dbCTtaeehCG1eGJ4gVnTWzHNQQZCvDPJlJD5c8a9Dj5YvHBhRIFx3d20/
noMKU47G7ZCfS0Ek5M0ltlIsX0GWvDKIrPdF7VKJuMGxUcWQGvZf3tqsG6HfsgzD
HWx+qagtButkCAai4bA0f50LNZNTWMOHvzrQrqEF5iG8II43Vv60jT9O05Vtbv4M
VIh3dIgOP7EGK84okYKyJ61Elg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:18 2025 by rpki-client