Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MgANYf6hNw7vI_VgvS-rCrU4xN0.roa
File: MgANYf6hNw7vI_VgvS-rCrU4xN0.roa (raw, json)
Hash identifier: OWX1F6tt8Eia1k+MjdKY0qShya7Ujasu4zXULV+lmeQ=
Subject key identifier: 32:00:0D:61:FE:A1:37:0E:EF:23:F5:60:BD:2F:AB:0A:B5:38:C4:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018553E1C02224209CBBD0C7DE916CF31560
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MgANYf6hNw7vI_VgvS-rCrU4xN0.roa
Signing time: Tue 27 Dec 2022 13:59:41 +0000
ROA not before: Tue 27 Dec 2022 13:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:e1:c0:22:24:20:9c:bb:d0:c7:de:91:6c:f3:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 27 13:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32000d61fea1370eef23f560bd2fab0ab538c4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:8b:3b:45:63:0d:a0:e8:e5:b3:6d:a9:be:
c1:55:a9:0b:2a:56:0d:d1:50:da:5d:f9:d1:79:cf:
ed:bd:ed:6d:30:f8:56:42:ca:95:6d:5f:43:2f:b1:
40:8d:76:66:2b:ec:55:22:ff:91:51:a3:53:be:d3:
00:93:a1:0f:ab:c4:73:ee:66:71:06:8b:6b:2a:58:
45:27:b0:80:a3:1e:93:88:ad:fb:63:7f:b3:20:43:
d6:db:73:dd:05:5d:25:9b:76:7b:46:4d:dc:35:20:
29:23:0c:7e:70:31:26:14:3d:e0:34:4c:43:b7:7e:
df:ae:1a:a0:20:7a:20:e6:44:30:82:94:b5:a7:e0:
e4:43:1f:da:21:ab:a3:4d:9d:a2:d7:7d:03:35:7f:
a6:09:3a:51:53:a2:0b:36:55:4c:d8:d5:f1:1c:e1:
5e:4c:fd:c4:29:1f:7b:59:66:b2:bc:d5:af:fe:b3:
c1:8e:4c:83:9e:de:06:16:0b:79:71:c5:70:00:18:
f3:97:da:59:49:9b:02:54:b4:1a:ef:71:79:24:7a:
51:00:16:7c:2c:cf:a9:9a:70:35:7e:0f:42:c0:6c:
a3:0b:ee:4b:52:1f:a1:14:a1:55:02:e7:96:3e:31:
c1:b2:79:a7:54:98:8d:7a:8f:57:69:7f:9f:bd:ab:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:0D:61:FE:A1:37:0E:EF:23:F5:60:BD:2F:AB:0A:B5:38:C4:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MgANYf6hNw7vI_VgvS-rCrU4xN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
37:13:e5:80:94:0e:4b:0c:3b:bb:7b:d0:85:56:7d:d9:c5:0f:
f1:a0:af:1f:ee:3b:2c:a2:8b:71:e8:f2:f0:20:43:a7:97:f4:
0c:af:8c:a4:6d:65:72:d5:9c:79:d7:01:3e:ed:44:f0:65:6d:
f0:f4:97:99:6f:84:b4:58:8a:84:84:3d:b8:ca:aa:5f:72:cd:
18:d2:af:84:f6:02:ee:dc:c1:64:29:22:89:70:a6:19:fa:86:
db:ac:07:06:62:ae:61:d1:ca:18:1e:94:89:ba:48:d5:25:86:
99:1d:a8:7c:75:fc:39:39:19:a3:be:5b:06:6b:6f:aa:59:b5:
af:7c:a7:b3:39:30:16:50:fe:ac:77:cb:e7:80:0a:af:eb:81:
1f:7c:1e:8e:88:3a:4e:ea:f4:6f:a5:32:37:18:94:2c:25:50:
6c:14:a9:bb:0c:00:f4:e1:c9:1f:0e:ca:37:5d:df:30:05:b2:
58:ef:56:9d:4f:88:99:ab:c5:c4:83:db:a1:ec:ad:ec:c4:cc:
f8:47:18:2d:cc:c4:35:2c:ea:4d:31:d4:e0:85:e7:44:d6:66:
14:59:6b:92:e4:12:83:b7:fb:c7:2d:0d:60:61:dc:d8:89:dc:
d2:6c:51:55:d4:57:50:61:4a:80:38:6f:01:ab:53:99:9e:5d:
3c:7d:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:37 2025 by rpki-client