Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/MCW1CHsp_3DvLqKvdJBTnhScq4Y.roa
File: MCW1CHsp_3DvLqKvdJBTnhScq4Y.roa (raw, json)
Hash identifier: 0wtIX58LB69gtUWogc4Hso+4BkwEGekSStcID+anwsA=
Subject key identifier: 30:25:B5:08:7B:29:FF:70:EF:2E:A2:AF:74:90:53:9E:14:9C:AB:86
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01856E01F15E1563DAD71485557301CD5DF9
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/MCW1CHsp_3DvLqKvdJBTnhScq4Y.roa
Signing time: Sun 01 Jan 2023 15:44:59 +0000
ROA not before: Sun 01 Jan 2023 15:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209154
IP address blocks: 194.61.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f1:5e:15:63:da:d7:14:85:55:73:01:cd:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jan 1 15:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3025b5087b29ff70ef2ea2af7490539e149cab86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:78:dd:8d:08:ef:d9:82:d7:a6:e3:d4:56:
b3:e6:82:25:58:7b:1e:bf:48:da:4e:dc:d6:37:e7:
f3:ca:0d:3d:75:a1:df:db:cb:bb:d2:93:70:8e:ec:
93:db:a0:55:91:8c:75:87:54:e5:3a:39:d6:e4:30:
ce:a0:59:4b:ce:7a:66:be:bd:a5:e5:97:b4:12:4e:
0f:f8:af:b1:26:17:9d:63:0f:67:32:25:37:a1:8a:
dd:00:38:22:d7:e8:b1:6f:ec:4f:59:8f:0f:3d:8f:
96:4b:67:0b:93:6e:4f:b9:04:bd:0d:43:a8:01:56:
96:e4:bc:2f:29:b3:87:fe:7d:eb:48:c9:1f:d3:56:
6a:17:34:0a:d9:16:19:dd:93:88:25:49:5e:01:ff:
89:9c:41:21:30:49:1a:5c:55:05:35:be:de:71:b2:
9a:91:25:08:70:d9:20:18:ff:8d:5b:65:94:b5:53:
f9:06:02:a2:73:7a:00:b4:6a:06:fb:44:0f:d3:5d:
2c:45:da:3f:1f:2d:81:79:4f:31:02:88:38:a9:ac:
76:ec:f1:90:a0:b2:44:a4:e1:d8:07:fa:c4:5f:2c:
99:55:95:66:8d:45:77:0b:38:69:da:65:9f:42:41:
c3:eb:9f:17:37:af:0f:4e:c3:8c:e9:69:55:19:48:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:B5:08:7B:29:FF:70:EF:2E:A2:AF:74:90:53:9E:14:9C:AB:86
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/MCW1CHsp_3DvLqKvdJBTnhScq4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.224.0/22
Signature Algorithm: sha256WithRSAEncryption
20:a8:fc:91:8a:c8:2b:24:4d:c5:05:1b:cd:4c:42:bd:56:7c:
64:18:72:e1:be:54:ea:f4:e6:3e:1e:50:72:bd:dd:19:e6:91:
52:77:a9:a9:61:75:c1:48:96:c7:30:6c:de:05:6a:c7:27:44:
5e:9a:60:65:ac:42:b9:8d:91:1e:8b:c8:09:c7:cc:f9:b2:af:
b1:07:d8:2d:46:23:c0:97:82:3c:8c:e0:fe:cc:81:9d:56:5a:
8f:74:86:ad:6c:7c:55:4b:da:8b:90:c0:40:99:ea:08:75:74:
0f:bc:87:5d:4b:e3:e3:42:30:3a:f6:17:17:cd:f1:c6:bb:3a:
11:c9:ed:e3:ea:f0:2d:81:6c:61:1b:b1:bb:3d:0a:3d:52:b3:
10:e5:09:7b:20:fc:0b:2f:5c:39:d1:07:fb:d5:c1:37:21:1b:
58:42:57:36:8e:42:8a:5c:5f:cb:2c:1d:36:f4:7e:7c:3c:9d:
85:1f:9c:96:59:bc:6c:4b:13:cb:71:c7:d4:30:a4:db:41:cb:
7d:7d:fa:db:68:b7:8a:4d:e8:46:83:89:99:6e:91:c2:e5:42:
73:50:23:0a:e4:70:01:d1:8e:66:07:d0:10:15:ce:2f:4f:3a:
6a:c2:68:de:f7:07:d2:d4:a3:9c:88:c6:9a:42:ac:80:06:87:
1c:77:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:57:09 2025 by rpki-client