Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/MONZMA9AEZNtjpvNYLWb2dpJy30.roa
File: MONZMA9AEZNtjpvNYLWb2dpJy30.roa (raw, json)
Hash identifier: 0l7HIqSSeHTWnbZrxQo7AdYw1FKqyZOb6vhMRaWYyeI=
Subject key identifier: 30:E3:59:30:0F:40:11:93:6D:8E:9B:CD:60:B5:9B:D9:DA:49:CB:7D
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 018607915DFB532E3087B91846FB34B77769
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/MONZMA9AEZNtjpvNYLWb2dpJy30.roa
Signing time: Tue 31 Jan 2023 11:23:32 +0000
ROA not before: Tue 31 Jan 2023 11:23:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40975
IP address blocks: 185.165.184.0/22 maxlen: 22
2a0a:2e00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:91:5d:fb:53:2e:30:87:b9:18:46:fb:34:b7:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 31 11:23:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30e359300f4011936d8e9bcd60b59bd9da49cb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:24:22:e9:d8:b1:8c:c1:45:86:07:df:53:
2a:08:4d:00:95:1f:0d:31:29:b9:7e:53:b1:29:39:
15:31:2d:29:e1:bd:2b:1d:be:38:e5:05:91:54:9d:
99:32:80:aa:d4:d1:91:a2:90:a3:9a:bb:7d:bf:04:
bf:15:72:b8:d6:07:9b:56:69:c8:43:14:c4:8c:e8:
63:fc:82:ae:76:c0:1c:6b:23:56:9b:8c:74:1a:12:
1c:a8:cc:96:43:ba:bd:5a:67:d5:23:15:f0:2a:63:
f1:04:f2:fd:1e:ee:9a:c2:72:95:ae:69:5b:a3:e3:
84:68:8f:2e:f3:f2:de:f6:d3:92:3f:f6:2e:e5:e4:
78:df:da:35:01:33:33:a7:6a:83:ba:75:b2:77:ca:
3c:e1:4e:7f:f3:e9:85:2e:c3:84:45:3a:45:7e:f7:
02:d9:12:6f:96:f5:03:26:4e:7d:d6:5f:c7:4d:22:
4d:6a:1e:19:50:34:93:78:7b:2a:2a:b7:ed:67:fc:
e8:84:d0:df:bc:70:7c:8f:b9:d0:3c:cb:42:68:d5:
05:e8:48:09:13:7e:9b:63:ef:24:96:66:c3:b4:0e:
99:be:2b:d8:f9:a8:12:3c:7b:62:66:cb:3a:8e:3c:
db:9c:79:59:fc:ce:99:eb:c4:40:0e:b9:0c:e0:c5:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E3:59:30:0F:40:11:93:6D:8E:9B:CD:60:B5:9B:D9:DA:49:CB:7D
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/MONZMA9AEZNtjpvNYLWb2dpJy30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.184.0/22
IPv6:
2a0a:2e00::/48
Signature Algorithm: sha256WithRSAEncryption
6a:30:42:cc:78:88:db:27:83:2f:42:8b:fa:f6:24:10:89:77:
63:8f:1f:a6:69:a8:b2:df:d4:ce:6d:72:69:6b:db:35:92:a3:
0f:d0:8e:eb:49:17:a9:1b:04:40:81:ff:16:14:5d:4c:0b:d8:
a4:70:0a:9a:32:de:1f:3c:5f:61:aa:86:40:14:d2:22:12:84:
3b:bf:95:d3:aa:19:67:40:f9:c7:3b:65:ae:17:e3:e7:cc:d2:
52:84:92:ec:49:cf:ed:e3:43:c5:8b:65:0d:64:a3:66:dc:9b:
61:d6:4c:6e:5e:ca:71:56:8d:2a:2b:92:f2:80:ce:de:ca:a0:
33:b2:d8:4e:50:de:1e:b5:ac:a2:ef:66:4e:f9:0a:0a:57:c8:
b8:b4:9f:c2:a6:56:7d:e9:ad:98:27:43:d2:1a:a2:98:3e:0e:
e8:96:2e:28:db:df:44:5d:64:a3:ee:2a:28:ac:84:15:66:41:
e7:26:ba:20:9e:a4:ac:e7:bd:9d:6b:d7:cb:a7:f6:e9:e0:7a:
ec:7f:09:d0:5d:a0:aa:e2:70:d8:a9:63:b2:da:8f:d3:ff:b1:
6d:d6:8c:e6:e2:a4:8c:66:73:9e:16:09:cd:88:f7:e3:41:b8:
2c:de:3a:23:46:0d:98:9f:92:e3:3c:da:f1:c8:76:23:a4:51:
2e:bb:10:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYHkV37Uy4wh7kYRvs0t3dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjMwMTMxMTEyMzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGUzNTkzMDBmNDAxMTkzNmQ4ZTliY2Q2MGI1OWJkOWRhNDljYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdYkIunYsYzBRYYH31MqCE0AlR8N
MSm5flOxKTkVMS0p4b0rHb445QWRVJ2ZMoCq1NGRopCjmrt9vwS/FXK41gebVmnI
QxTEjOhj/IKudsAcayNWm4x0GhIcqMyWQ7q9WmfVIxXwKmPxBPL9Hu6awnKVrmlb
o+OEaI8u8/Le9tOSP/Yu5eR439o1ATMzp2qDunWyd8o84U5/8+mFLsOERTpFfvcC
2RJvlvUDJk591l/HTSJNah4ZUDSTeHsqKrftZ/zohNDfvHB8j7nQPMtCaNUF6EgJ
E36bY+8klmbDtA6ZvivY+agSPHtiZss6jjzbnHlZ/M6Z68RADrkM4MVHaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDDjWTAPQBGTbY6bzWC1m9naSct9MB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvTU9OWk1BOUFFWk50anB2TllMV2IyZHBKeTMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuaW4MA8E
AgACMAkDBwAqCi4AAAAwDQYJKoZIhvcNAQELBQADggEBAGowQsx4iNsngy9Ci/r2
JBCJd2OPH6ZpqLLf1M5tcmlr2zWSow/QjutJF6kbBECB/xYUXUwL2KRwCpoy3h88
X2GqhkAU0iIShDu/ldOqGWdA+cc7Za4X4+fM0lKEkuxJz+3jQ8WLZQ1ko2bcm2HW
TG5eynFWjSorkvKAzt7KoDOy2E5Q3h61rKLvZk75CgpXyLi0n8KmVn3prZgnQ9Ia
opg+DuiWLijb30RdZKPuKiishBVmQecmuiCepKznvZ1r18un9ungeux/CdBdoKri
cNipY7Laj9P/sW3WjObipIxmc54WCc2I9+NBuCzeOiNGDZifkuM82vHIdiOkUS67
EAI=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:32 2025 by rpki-client