Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/MJeUMVXPj9ZEe97WihFaJOyAMs4.roa
File: MJeUMVXPj9ZEe97WihFaJOyAMs4.roa (raw, json)
Hash identifier: L838Y2lA5B8WRFeKvz1XyzJWt+PyNea+ovaisaLHhzQ=
Subject key identifier: 30:97:94:31:55:CF:8F:D6:44:7B:DE:D6:8A:11:5A:24:EC:80:32:CE
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 0185704BCEDB153646DBDF234DC6268A4625
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/MJeUMVXPj9ZEe97WihFaJOyAMs4.roa
Signing time: Mon 02 Jan 2023 02:24:54 +0000
ROA not before: Mon 02 Jan 2023 02:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13189
IP address blocks: 195.35.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ce:db:15:36:46:db:df:23:4d:c6:26:8a:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Jan 2 02:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3097943155cf8fd6447bded68a115a24ec8032ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:4d:ac:13:7a:34:54:27:3c:d9:a8:fb:2f:
6d:57:91:bf:57:95:07:30:32:7a:f7:d2:af:4f:16:
9e:ff:46:0e:ef:9e:b4:c6:50:a1:2a:2a:f5:c0:e6:
18:4f:f1:c2:f4:93:18:78:44:f1:81:87:0d:2e:f7:
bf:42:08:1f:e0:aa:16:cf:84:72:19:7c:83:d7:a2:
ae:42:ce:21:b5:90:ef:69:d4:7a:46:90:8e:18:fa:
62:3c:fb:da:8a:b9:ff:60:77:22:7c:13:d0:88:d6:
f2:3f:25:5f:31:85:4c:8b:c8:b5:f0:35:98:4b:0c:
e4:66:27:cc:d4:e7:93:ca:64:4a:bb:da:b9:48:9b:
e6:f3:54:dd:60:7c:10:4d:d6:b8:a2:1b:49:3d:b8:
28:83:7d:fb:7d:ec:d0:f1:67:e3:11:1e:94:99:b3:
c8:e6:99:a9:03:8c:02:d0:0c:59:af:a3:2e:16:0a:
e2:9e:28:be:48:8b:3d:7e:90:30:72:b4:0a:9e:5f:
f7:db:7e:37:ed:b1:a1:bb:b0:99:66:95:75:6e:4b:
c1:b4:90:d2:15:32:33:4c:09:e0:ce:5f:04:65:c0:
16:c3:dd:2b:38:dd:83:b6:fa:26:86:cc:82:4c:df:
f7:a6:77:fb:c9:df:14:83:7b:79:c1:94:7d:f2:d0:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:97:94:31:55:CF:8F:D6:44:7B:DE:D6:8A:11:5A:24:EC:80:32:CE
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/MJeUMVXPj9ZEe97WihFaJOyAMs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.101.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0a:6d:42:54:9f:ba:ba:14:a0:03:59:c4:78:b4:2b:a7:ce:
fa:d7:14:98:87:6b:07:2c:88:f0:cc:c1:5b:b4:38:bb:88:ab:
97:94:20:a7:18:d7:f3:aa:eb:38:f4:d1:8f:af:4e:85:ca:03:
fc:3a:e9:9b:42:ce:6d:82:1e:ae:7c:7b:18:be:9f:cb:01:e8:
2d:8a:90:3f:21:fd:d5:d9:96:06:29:1c:48:84:84:26:99:04:
6d:02:3c:1f:ed:5e:3f:63:69:71:d9:72:9a:bb:62:cc:80:4f:
b3:fa:d4:fc:ff:8f:36:78:6f:50:c2:8c:09:45:24:88:ae:83:
bc:27:7b:00:21:33:2a:71:5c:53:ef:16:df:3c:c0:1e:86:63:
9f:f7:90:30:4d:bc:8f:81:e0:3e:a0:10:15:37:e6:b0:e3:46:
eb:0e:f2:87:2a:aa:d0:78:7c:38:70:2e:c6:00:74:42:b4:6e:
f8:03:b7:31:0b:a3:84:0e:1d:ba:57:ce:fc:af:9d:60:2a:5c:
aa:00:1a:8f:f6:4f:62:82:ef:41:04:21:33:7c:7b:76:82:2c:
8d:e6:f6:ce:20:9f:9c:47:d7:fb:d3:c2:0f:1c:2d:6f:ca:dd:
3a:0e:c9:24:9a:11:5c:87:84:e0:fd:3c:c6:cb:c2:c0:bf:bc:
14:6d:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:36 2025 by rpki-client