Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/MNmr_3F_spjwB8RRw4RxHgLrdds.roa
File: MNmr_3F_spjwB8RRw4RxHgLrdds.roa (raw, json)
Hash identifier: nL78/khMLxtznhFxbW0CTKdSsiv1AOb4RJc6LmGFIqc=
Subject key identifier: 30:D9:AB:FF:71:7F:B2:98:F0:07:C4:51:C3:84:71:1E:02:EB:75:DB
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 058012F3
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/MNmr_3F_spjwB8RRw4RxHgLrdds.roa
Signing time: Sat 01 Jan 2022 04:58:35 +0000
ROA not before: Sat 01 Jan 2022 04:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199072
IP address blocks: 5.61.15.0/24 maxlen: 24
2a00:9801:e001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92279539 (0x58012f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jan 1 04:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30d9abff717fb298f007c451c384711e02eb75db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:36:26:36:f4:a8:d5:4f:4d:c8:7f:45:39:
71:fb:8b:02:8e:9c:61:47:e5:7d:90:49:b9:de:92:
0d:f7:a6:14:8c:42:48:1d:9c:64:8d:6a:7c:4c:5c:
3d:22:71:e5:83:f8:db:29:4c:e7:7b:f5:0a:5a:06:
68:2c:05:51:e6:0c:77:5e:b1:f5:58:c9:46:27:40:
30:85:fd:f7:bb:93:70:53:f9:95:29:f5:14:97:5a:
b6:b0:85:3b:a1:f7:e6:53:98:cb:8b:12:e7:ff:20:
42:06:2f:8c:9c:8d:ab:3a:76:58:1f:85:d5:88:a4:
3f:3b:dd:71:a1:9d:cf:73:aa:6d:43:80:bc:22:d2:
88:85:94:be:5c:9f:ef:fb:43:e0:91:15:66:40:69:
1e:ab:d3:59:82:84:63:03:c5:1e:bd:1e:c9:c5:33:
b3:87:cd:9c:98:ce:16:f0:1b:ef:be:3b:c5:3f:27:
3f:1d:d3:13:70:b1:4b:8e:67:0e:1f:17:f4:e8:fc:
f4:49:6e:b1:7f:2f:69:16:3f:bc:c7:52:f3:79:46:
50:95:78:1f:92:41:f9:96:b1:a4:23:51:73:26:4a:
45:47:c8:f5:a1:28:5a:b9:44:17:fc:10:0e:c8:7c:
01:be:21:ee:c5:32:13:56:de:5a:24:ab:9a:45:c5:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:AB:FF:71:7F:B2:98:F0:07:C4:51:C3:84:71:1E:02:EB:75:DB
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/MNmr_3F_spjwB8RRw4RxHgLrdds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.15.0/24
IPv6:
2a00:9801:e001::/48
Signature Algorithm: sha256WithRSAEncryption
35:80:da:96:29:d7:16:e2:64:cb:66:40:5a:f0:61:04:66:db:
a3:22:99:d1:8a:6a:b2:a5:c1:87:56:4a:70:53:0b:c4:13:ec:
a8:90:19:6f:41:f2:3d:99:81:62:5a:6b:1e:ce:69:e6:9e:7e:
b6:4b:0a:ca:4f:22:af:e1:cf:c3:69:e8:3e:2b:88:df:05:f2:
03:9b:9a:d9:f9:f0:09:55:f2:28:e8:26:97:3a:fc:72:92:8b:
ba:ee:10:66:eb:36:a2:2f:33:05:15:b4:54:98:3d:3b:df:b3:
16:8e:96:56:61:d6:e3:38:9b:8e:d1:42:55:81:9f:6b:e5:e9:
76:65:74:90:de:7e:0a:df:0c:1f:23:d5:e7:ce:46:58:95:cc:
54:c3:8e:41:0d:85:dd:e6:fe:5a:53:90:ba:a1:52:74:a1:86:
ac:f4:6f:78:ea:58:b5:b4:f0:73:1b:6e:49:f5:8d:a7:7e:83:
ee:f1:4f:a2:3b:f5:ee:63:b3:3d:97:97:c9:8b:4f:08:25:d1:
5f:f6:f9:a7:df:b5:6f:7a:83:33:21:4d:31:35:7a:69:07:4f:
75:99:1b:89:f1:19:01:fc:2a:af:1d:8c:52:cd:a1:58:80:f4:
89:7e:fc:93:eb:99:54:2b:73:6b:55:3e:11:df:0a:6b:f2:d5:
79:94:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:16 2025 by rpki-client