Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mLzWVLqPpfXWJ8wAPYg8n03AeJg.roa
File: mLzWVLqPpfXWJ8wAPYg8n03AeJg.roa (raw, json)
Hash identifier: WeOwS8Qv26gcMNdPB2l9SsvB/bFvGH/YBafeiyRkJyg=
Subject key identifier: 98:BC:D6:54:BA:8F:A5:F5:D6:27:CC:00:3D:88:3C:9F:4D:C0:78:98
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01856D9D0350EBB2B6D4F99B0DAD7FE7E668
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mLzWVLqPpfXWJ8wAPYg8n03AeJg.roa
Signing time: Sun 01 Jan 2023 13:54:44 +0000
ROA not before: Sun 01 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199483
IP address blocks: 185.167.0.0/22 maxlen: 24
185.221.88.0/22 maxlen: 24
185.15.24.0/22 maxlen: 24
31.14.0.0/22 maxlen: 24
91.209.103.0/24 maxlen: 24
2a02:f840::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:03:50:eb:b2:b6:d4:f9:9b:0d:ad:7f:e7:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jan 1 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98bcd654ba8fa5f5d627cc003d883c9f4dc07898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:86:61:0e:f3:bb:42:bc:a5:5b:03:3b:5e:
39:34:a7:69:09:b2:d0:d6:a3:a5:b3:c8:00:3c:57:
d4:30:ff:f8:d6:86:45:01:e9:c7:cc:af:c8:dc:4b:
74:30:f6:a9:22:62:15:00:ee:bf:cc:43:47:75:0d:
2c:e8:7d:72:ad:ce:20:03:ae:a6:ac:6c:6f:4d:6b:
91:81:81:62:24:00:82:d9:da:72:bb:77:b6:7e:24:
45:24:31:06:b6:43:26:db:91:09:92:91:8f:39:cf:
03:d5:b3:2a:9c:91:91:25:07:46:d4:01:97:cf:65:
57:8d:26:f7:6c:1c:7c:27:d0:94:af:e0:45:a2:a7:
b6:3a:94:5f:0c:4e:bc:0a:7f:ec:51:31:3a:c3:3d:
0e:9d:9a:50:7e:d4:de:5e:b1:50:a0:a5:00:e9:6d:
8d:bb:16:e6:19:c9:a0:7b:a9:f0:2a:3f:a5:1e:0c:
03:52:af:51:66:a4:b2:b9:75:1d:8c:b1:98:48:5c:
7d:2b:19:bc:08:99:ef:e5:85:76:26:41:9a:0c:c1:
2a:13:99:dd:23:ae:b6:23:6d:fc:d2:ea:29:7c:26:
bb:05:cb:26:72:0a:27:21:a6:16:ab:f7:8a:06:9a:
f1:4d:a9:9e:ff:d7:fe:fb:ad:10:23:63:13:8e:2a:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:D6:54:BA:8F:A5:F5:D6:27:CC:00:3D:88:3C:9F:4D:C0:78:98
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mLzWVLqPpfXWJ8wAPYg8n03AeJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.0.0/22
91.209.103.0/24
185.15.24.0/22
185.167.0.0/22
185.221.88.0/22
IPv6:
2a02:f840::/29
Signature Algorithm: sha256WithRSAEncryption
87:db:19:e2:28:46:dc:42:8e:63:d5:63:83:17:04:0f:ef:f2:
69:6f:43:e7:61:a7:75:71:65:29:f7:29:d1:dd:80:9d:76:93:
a0:03:77:28:da:1c:8b:72:6c:d2:88:0f:fb:75:ad:b6:7b:7c:
0a:98:5e:8f:2a:ed:6e:f7:70:13:b6:81:49:be:09:ec:f9:56:
a7:f3:8d:01:51:f0:13:19:27:65:0a:23:9b:78:66:52:fd:a1:
97:61:30:80:c8:4b:83:de:b5:53:bf:ab:92:47:a9:c3:cd:ec:
63:7c:ae:cd:e9:fd:c2:01:29:92:db:10:90:df:ef:16:a5:5d:
ff:7c:25:3e:da:ac:e6:ab:22:8b:b9:21:ea:a6:a8:97:93:11:
de:10:47:70:d4:67:aa:a7:61:03:01:c2:1f:3f:33:8d:bf:bb:
5f:b5:25:2d:86:71:04:2f:c2:04:48:fe:de:31:81:7b:f6:9b:
fc:68:5c:79:43:e8:13:cb:4d:8b:d3:e4:fa:f7:65:16:39:f9:
b7:09:b6:39:12:b7:1f:98:fb:6f:0f:45:19:9e:fa:6e:70:31:
37:c3:55:89:c1:f5:ab:90:50:b5:90:a1:28:ba:3e:c3:4b:87:
fe:c3:be:a2:cf:5f:83:79:63:e1:8c:c0:2c:f3:9c:f8:c1:50:
60:e7:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:58:02 2025 by rpki-client