Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/MifQwIhAJnePAitj4sivO25eecM.roa
File: MifQwIhAJnePAitj4sivO25eecM.roa (raw, json)
Hash identifier: 7xodQQAf9bDC8uQKw/T5pICf0DchzZqfQsEGA7aICQE=
Subject key identifier: 32:27:D0:C0:88:40:26:77:8F:02:2B:63:E2:C8:AF:3B:6E:5E:79:C3
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 018573561C98DA2D56D88568D92BB5DD8A57
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/MifQwIhAJnePAitj4sivO25eecM.roa
Signing time: Mon 02 Jan 2023 16:35:01 +0000
ROA not before: Mon 02 Jan 2023 16:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31126
IP address blocks: 185.91.96.0/24 maxlen: 24
185.91.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:1c:98:da:2d:56:d8:85:68:d9:2b:b5:dd:8a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jan 2 16:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3227d0c0884026778f022b63e2c8af3b6e5e79c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0a:ac:ec:b5:ef:2c:8e:1e:2b:6c:15:83:84:
0d:61:ad:eb:54:03:c3:eb:b2:1d:32:df:4d:c6:32:
71:09:a6:9b:cc:42:e6:ee:c8:0a:0f:4d:16:5d:12:
35:8e:6d:1a:db:2e:9d:6e:2e:9d:53:92:46:21:7a:
7d:29:03:5c:8e:0d:d1:55:6e:5f:51:d8:b4:8b:2a:
c6:f7:6c:b7:49:bb:06:43:ba:7c:98:0d:83:61:57:
77:d6:4e:cf:61:72:6c:64:2b:ae:fd:c5:8e:a0:ae:
98:54:5c:b9:9f:98:62:fa:e3:77:ea:26:7b:a2:64:
83:f2:19:55:b1:0c:69:08:07:04:bd:ca:36:e2:26:
cb:00:f2:a8:d3:64:4c:24:c0:fb:42:ea:f3:c6:51:
ad:95:0d:5b:67:eb:26:fb:fc:04:1e:5f:d7:b5:25:
b2:6b:9c:9b:4e:75:ca:e8:75:25:c7:11:2e:89:6b:
ac:f0:db:57:41:97:ff:5e:49:8a:6c:05:33:36:9f:
8a:09:87:cd:16:39:29:df:19:24:d5:bf:da:58:e6:
af:c7:51:bf:90:f3:72:6a:07:d2:06:06:36:7c:06:
5a:a9:9b:12:92:df:51:43:5f:00:82:f6:aa:1e:36:
25:e3:ba:02:d4:79:52:12:66:3b:6e:60:32:7d:29:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:D0:C0:88:40:26:77:8F:02:2B:63:E2:C8:AF:3B:6E:5E:79:C3
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/MifQwIhAJnePAitj4sivO25eecM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.96.0/24
185.91.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8d:21:d2:57:a3:cc:04:b5:25:c9:d0:0e:19:33:99:5f:73:
1f:76:6d:4f:ef:61:bd:e2:a2:16:e9:88:56:b4:17:5d:25:dd:
b5:3e:0d:48:b5:e2:05:bd:3c:83:84:74:4e:ec:80:ac:bb:c6:
65:5b:7d:5e:9f:d8:c6:86:e8:91:ad:ca:09:40:6d:6b:c5:07:
45:5a:20:d4:a2:98:19:cb:fb:a3:f6:5d:ef:47:f2:8d:f6:c0:
ce:0a:c4:e5:c5:b4:53:b3:39:03:1a:3a:40:7d:94:17:72:1e:
c2:f9:b3:c5:29:ae:cb:15:c1:94:40:e5:e6:d3:bb:5c:e8:d2:
df:65:6e:32:d0:c5:c1:80:c1:f4:fc:c8:fc:c7:d5:04:51:5a:
3d:f2:2f:3f:dd:8b:81:b9:0a:5c:87:2b:4f:95:90:2a:6d:c5:
de:ac:f8:23:6c:3a:c9:29:ae:3b:b8:08:59:4b:7c:be:95:f0:
5a:e3:92:9c:72:c0:1f:26:c5:ff:78:68:27:ad:a0:5d:08:b4:
8c:19:44:e8:fd:28:0d:98:da:66:a5:a6:26:a4:56:23:68:5b:
d3:a0:9b:54:3b:39:12:e9:58:50:75:06:ec:61:78:1c:fa:dc:
36:78:9d:28:25:72:cc:68:2e:55:64:29:d8:60:13:3f:c4:d2:
f1:fe:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:35:41 2025 by rpki-client