Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/mptMb9cvMh_7MLm4AO5-pVZ5vV8.roa
File: mptMb9cvMh_7MLm4AO5-pVZ5vV8.roa (raw, json)
Hash identifier: wxz63AW7pRBG0GpO16enxgY4C3XsdYNQlLPAnmy0uC8=
Subject key identifier: 9A:9B:4C:6F:D7:2F:32:1F:FB:30:B9:B8:00:EE:7E:A5:56:79:BD:5F
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 04940F0B
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/mptMb9cvMh_7MLm4AO5-pVZ5vV8.roa
Signing time: Sat 01 Jan 2022 04:02:49 +0000
ROA not before: Sat 01 Jan 2022 04:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42876
IP address blocks: 193.47.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76812043 (0x4940f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jan 1 04:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a9b4c6fd72f321ffb30b9b800ee7ea55679bd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:89:55:f1:2d:fe:90:11:f8:fa:a3:6a:c9:
49:a9:24:18:52:19:32:e5:21:63:6c:08:f5:66:50:
79:eb:49:f3:e8:57:8c:b7:36:07:3e:f9:c3:95:72:
6d:e2:4b:9e:88:21:64:d3:19:1e:0b:59:ad:cc:81:
ef:ce:ff:5d:df:ed:5e:73:4a:09:3c:f6:b0:f8:d3:
23:c9:c1:b4:94:a4:1c:d6:ac:63:17:8a:20:3b:08:
e4:1f:91:0e:10:c4:f5:2f:24:96:34:54:56:83:50:
3a:75:9f:b6:dd:a0:7b:ea:60:c9:ad:e1:c2:00:8f:
09:73:8c:77:36:c7:37:3d:c6:75:fa:8d:86:1c:71:
fb:68:71:2e:08:4a:43:61:d1:76:11:5f:41:53:d8:
8e:06:f7:6c:c4:d6:c2:7f:ed:b3:1c:10:c2:1f:54:
d9:c7:6d:ad:df:84:96:fa:14:86:a8:f2:c8:31:e2:
5e:c2:97:1a:83:dd:a5:33:9f:85:68:6c:20:ea:de:
e1:55:c4:bd:32:56:fb:44:1e:d6:bc:4f:04:42:d9:
5e:9c:9e:af:48:70:97:63:7b:22:5e:c1:c2:da:5d:
af:ca:4b:03:f1:5b:62:73:3f:5a:b2:9f:fb:b0:ed:
e0:93:2d:f0:e6:cc:16:46:cd:4e:59:17:28:04:d3:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:4C:6F:D7:2F:32:1F:FB:30:B9:B8:00:EE:7E:A5:56:79:BD:5F
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/mptMb9cvMh_7MLm4AO5-pVZ5vV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.186.0/24
Signature Algorithm: sha256WithRSAEncryption
30:29:83:3b:61:9a:07:33:f4:43:24:5c:c1:12:52:d9:80:5e:
96:e5:46:15:e9:75:98:48:c6:46:4a:0c:e4:35:1a:38:f3:2d:
12:63:3b:c6:b2:4c:41:ae:5f:68:1b:13:13:41:90:cd:3a:c5:
93:40:29:09:06:1e:36:45:07:6c:f6:d6:10:26:a0:12:5f:06:
0b:47:41:37:12:08:f0:82:ff:f9:a5:df:3d:bc:53:d1:c2:7d:
33:0d:dc:21:0c:7c:5f:7a:18:37:bb:b8:47:74:d9:4e:24:2e:
ff:ae:42:a6:e7:94:52:e3:4e:a6:3a:c2:75:03:16:88:fb:c3:
b0:54:70:b1:81:72:48:1a:c4:ff:04:bd:de:02:21:74:f2:11:
27:f5:01:39:ec:51:68:be:8c:e4:17:27:9b:00:ac:31:94:74:
73:f9:73:90:71:99:1d:60:e9:c6:12:a4:c2:86:42:89:6c:e6:
16:bf:c3:94:4e:8e:0b:d8:01:6f:50:a0:e7:f3:99:d0:34:6c:
4d:9a:0a:f0:ca:8b:ce:80:75:c2:d1:4b:4b:5f:58:4b:85:51:
94:b1:69:c6:f9:5d:ac:c6:92:86:b9:b1:f9:a9:46:0c:a6:58:
27:9b:a1:4a:43:64:c2:07:e2:3f:50:26:b5:55:68:b4:3a:8d:
b5:79:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:08 2025 by rpki-client