Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MfsVPsgBl91MoTSC_aEjQZqnKBU.roa
File: MfsVPsgBl91MoTSC_aEjQZqnKBU.roa (raw, json)
Hash identifier: BMZo6mfLWP8xhTzc/QeFrWgojrK4GWCsG3UvJ+ewy5A=
Subject key identifier: 31:FB:15:3E:C8:01:97:DD:4C:A1:34:82:FD:A1:23:41:9A:A7:28:15
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94DC18E6046E265AC53FA2CD483B7A
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MfsVPsgBl91MoTSC_aEjQZqnKBU.roa
Signing time: Sun 01 Jan 2023 23:05:04 +0000
ROA not before: Sun 01 Jan 2023 23:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 155.254.38.0/23 maxlen: 24
198.105.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:dc:18:e6:04:6e:26:5a:c5:3f:a2:cd:48:3b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31fb153ec80197dd4ca13482fda123419aa72815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:7a:92:af:7e:e0:74:bd:35:fe:73:d4:ab:
e2:80:80:e5:e4:bd:13:95:5d:06:47:b6:e7:bf:d5:
91:79:4c:0c:ff:6a:92:18:80:fa:a3:7e:89:59:e3:
73:d0:28:ae:9d:bb:f7:5a:8c:28:1b:f1:bf:65:54:
0b:37:bb:f2:fd:fc:42:b0:75:ed:6b:a9:25:65:d8:
71:01:c9:04:c2:fb:69:98:57:7b:6d:76:87:bf:60:
11:f8:d9:1b:a9:94:54:9d:82:46:64:1b:86:56:bb:
6e:01:bd:f2:4d:a0:67:18:a8:e2:1d:a0:4f:85:85:
2d:ca:e9:03:16:46:36:7a:6e:07:76:80:30:eb:85:
7c:b5:f6:55:d6:44:37:5a:0f:19:8d:b7:c3:08:27:
c3:c3:42:26:ca:17:02:d4:03:c0:79:d3:ea:c2:c2:
68:c4:f5:6f:8f:aa:39:19:82:6a:d0:86:02:66:a0:
a8:56:02:43:4f:8a:2d:d4:9e:0a:d4:27:23:00:91:
e0:99:cb:be:83:8d:54:5e:70:11:e6:c9:85:96:ec:
6c:1b:90:96:05:22:ff:98:94:e8:ca:c0:d4:38:a5:
72:56:a7:71:25:bd:7e:09:f2:c5:b1:89:50:bc:32:
81:c1:88:c7:a2:98:16:11:7c:02:bf:15:ef:55:e3:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:15:3E:C8:01:97:DD:4C:A1:34:82:FD:A1:23:41:9A:A7:28:15
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MfsVPsgBl91MoTSC_aEjQZqnKBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.38.0/23
198.105.100.0/24
Signature Algorithm: sha256WithRSAEncryption
45:81:52:4f:cd:c6:f3:c4:bb:3b:26:3f:a1:0d:fb:88:5d:a4:
37:3b:65:db:34:08:b5:1b:55:ab:99:e3:a8:f8:e9:ba:f6:14:
21:7a:08:c5:be:68:11:79:e6:27:bd:38:0a:97:ca:ed:39:23:
ec:23:c2:7c:34:ae:91:89:17:e0:1b:64:8b:81:b6:2b:89:a9:
61:fe:03:89:64:6d:0b:87:5f:a4:33:88:98:59:e5:ab:ae:0d:
92:6d:2a:b4:6c:0c:84:95:0c:4d:ec:0e:91:e1:2e:35:15:e1:
c9:37:57:13:07:53:7c:59:00:41:84:16:3a:07:9e:31:0b:85:
30:a8:86:9a:e7:26:28:bb:79:4b:e9:02:db:2d:f7:ec:cc:ab:
4d:a8:5e:d9:9d:e5:a0:c3:55:e6:ab:5a:02:81:3c:b9:b4:a7:
7a:2d:ca:af:27:73:a2:b5:b5:0c:06:d4:a8:37:22:71:7a:11:
aa:ca:95:e7:f4:cc:9a:6a:83:bc:c4:0c:7f:a1:5c:d4:b5:3c:
21:8f:c5:94:4e:68:9f:b1:60:59:53:6d:05:56:ee:ed:76:09:
78:4d:44:26:2c:d2:31:df:f9:7c:00:86:7f:c6:53:5b:6e:18:
be:2e:98:bd:84:5e:97:c2:bb:5c:7d:9c:0f:0c:bd:ad:a8:cf:
cf:e3:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:35 2025 by rpki-client