Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/mchp8vIHiWWMM_SuPXwyCJfShuY.roa
File: mchp8vIHiWWMM_SuPXwyCJfShuY.roa (raw, json)
Hash identifier: JHnzt1uh/UlbmFtIdRyu8EtiHPSug881jFueKuIzTd0=
Subject key identifier: 99:C8:69:F2:F2:07:89:65:8C:33:F4:AE:3D:7C:32:08:97:D2:86:E6
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C67C5DBF25B98E09215E9FBBFE91DF016
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/mchp8vIHiWWMM_SuPXwyCJfShuY.roa
Signing time: Thu 14 Dec 2023 10:01:09 +0000
ROA not before: Thu 14 Dec 2023 10:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.100.170.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:c5:db:f2:5b:98:e0:92:15:e9:fb:bf:e9:1d:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 14 10:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99c869f2f20789658c33f4ae3d7c320897d286e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:13:c3:12:16:ad:1d:7b:22:a9:52:4e:32:
de:0c:20:91:b6:1e:de:31:6f:af:14:61:92:f4:49:
b5:f8:ac:8d:1a:33:ee:cd:d3:8d:4c:e4:62:06:7a:
30:f7:fc:5a:2e:a4:61:89:0e:0f:4e:20:b6:98:e4:
7b:16:9a:27:8e:80:89:10:e4:85:23:b3:ab:6c:8b:
b4:d0:39:fe:e0:f1:12:0a:ff:c2:ad:63:fb:ea:26:
a5:af:cd:6b:7e:1f:88:ec:09:d0:0e:1a:fc:10:17:
dd:c1:10:76:84:d9:a4:84:4c:47:8c:1a:99:42:b2:
45:7c:ba:95:aa:08:f8:81:e7:58:a5:10:9b:a9:02:
b0:09:d3:24:52:23:0c:58:da:b5:1b:9e:15:29:6b:
7b:b0:a1:e6:62:1c:23:ec:3b:8a:6f:13:47:3f:7e:
4a:d2:30:73:eb:08:c6:91:e2:50:d3:8b:1e:91:ed:
e0:b2:11:43:98:06:6b:c6:e2:87:d0:1b:e3:cb:e0:
54:a1:72:a5:89:02:a8:ae:3a:bc:bb:46:78:28:1e:
1d:37:7a:c4:c1:bf:e1:a8:95:d8:28:5a:ac:b8:3d:
cb:08:c1:f4:6c:6a:5f:fe:81:50:44:78:e3:0f:2d:
ea:34:f6:9f:8c:3b:93:29:df:b2:bd:aa:80:64:84:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:69:F2:F2:07:89:65:8C:33:F4:AE:3D:7C:32:08:97:D2:86:E6
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/mchp8vIHiWWMM_SuPXwyCJfShuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.169.0-185.100.170.255
Signature Algorithm: sha256WithRSAEncryption
64:9c:81:d2:4a:51:ee:de:6a:71:77:ed:8d:14:0c:65:ff:72:
e2:7a:64:7d:98:9c:f9:cc:5d:b4:8f:a0:4d:96:5c:90:e9:ce:
1f:25:be:74:18:24:58:6d:e0:7b:d4:d8:b2:51:52:ce:79:da:
e1:dd:3a:a6:11:ae:a2:c4:cc:c3:9b:71:b8:28:94:7f:50:d9:
36:f9:62:75:aa:b9:7f:f4:e5:7b:22:99:35:05:12:1e:b5:66:
1d:a6:1c:f6:d1:62:49:32:79:49:37:97:51:77:d3:3a:f7:c6:
54:14:d0:52:76:47:89:9a:25:43:d6:70:8f:c9:4a:b0:21:b7:
55:b6:3a:5e:67:0b:be:a3:b9:f7:8b:4e:61:d4:78:e5:44:d1:
5c:43:94:bf:d3:d4:bd:76:12:f1:24:b7:db:45:8e:e4:61:9e:
41:20:76:32:b6:50:46:c1:66:95:47:b2:09:f7:ec:68:02:ca:
e7:de:e4:5a:ad:9d:96:a5:3e:de:36:ac:0c:85:4b:10:60:7a:
20:13:67:5f:21:58:a4:8a:ac:ba:f2:c2:24:6e:65:f8:7d:f4:
ae:d8:77:a4:02:71:26:33:2f:7d:66:57:36:20:62:39:c5:7d:
98:e0:30:ad:19:57:c0:08:1e:cc:3c:e3:60:4b:63:11:cb:3b:
54:c7:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:23 2025 by rpki-client