Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/Mrgeotrn20k-LNKTB4nyyxKyZXo.roa
File: Mrgeotrn20k-LNKTB4nyyxKyZXo.roa (raw, json)
Hash identifier: RisTnw6K34Z2vuV5YcD+tF6NqqDHTkWTw1NnHompQ5Y=
Subject key identifier: 32:B8:1E:A2:DA:E7:DB:49:3E:2C:D2:93:07:89:F2:CB:12:B2:65:7A
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 0183F9ED73A4EDFF468FBEAE0DA06D2E85A6
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/Mrgeotrn20k-LNKTB4nyyxKyZXo.roa
Signing time: Fri 21 Oct 2022 09:43:51 +0000
ROA not before: Fri 21 Oct 2022 09:43:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29518
IP address blocks: 185.63.72.0/24 maxlen: 24
185.63.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:ed:73:a4:ed:ff:46:8f:be:ae:0d:a0:6d:2e:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Oct 21 09:43:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b81ea2dae7db493e2cd2930789f2cb12b2657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:9a:37:06:c6:3e:24:16:2d:bf:e6:22:15:
e5:71:56:06:72:57:4e:62:92:d4:9b:25:9c:f6:8a:
68:4d:23:63:08:ec:bc:a8:04:d7:44:b3:f5:63:f9:
29:c4:2c:6b:44:93:b8:81:ed:b0:22:ba:17:31:33:
36:78:81:76:9f:20:a4:59:4e:ac:a1:b6:48:37:da:
df:6f:5a:8a:a7:b8:6c:71:1c:e9:1c:cd:72:07:13:
10:f0:43:5f:2e:5f:f3:22:02:bf:84:20:00:83:1c:
7e:fd:ab:02:a5:24:84:38:e4:4c:6c:13:36:b0:19:
44:6e:e9:f9:15:3c:ea:ef:4b:3a:aa:04:02:5e:2a:
6c:f2:a6:b0:e2:71:49:09:4f:78:65:fb:3d:12:12:
a8:b1:9c:13:db:4a:7d:fe:54:b2:66:7f:01:e2:69:
90:f2:e7:26:be:d5:6b:82:2e:2e:6f:7e:62:a8:09:
d5:a6:db:d8:9b:e7:e4:ba:06:b8:f8:b6:e9:91:29:
47:34:48:ee:74:d0:47:67:23:08:ff:ac:be:68:d4:
74:e6:1a:9a:74:1d:e2:46:49:1b:00:c0:48:c6:14:
66:50:42:9e:99:f9:dc:4e:3e:f4:26:4e:c6:5a:e4:
dc:5d:5d:37:59:08:d7:b2:b3:c4:9a:49:48:cb:d2:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:1E:A2:DA:E7:DB:49:3E:2C:D2:93:07:89:F2:CB:12:B2:65:7A
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/Mrgeotrn20k-LNKTB4nyyxKyZXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.72.0/24
185.63.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6e:24:f5:58:1c:11:f3:82:94:59:99:24:17:b2:c5:6c:3b:
fb:83:92:27:74:ba:e3:d0:f7:c2:64:16:1c:69:c5:9a:be:48:
fd:61:07:81:71:9d:92:02:e2:96:dc:dc:3e:9a:96:f5:88:99:
3a:21:56:1f:04:99:39:cc:59:b2:b1:3c:7a:97:4a:33:fb:d4:
4d:7b:4c:0c:fe:bd:bd:83:8f:8a:93:75:66:a3:f7:05:13:f8:
62:aa:3d:22:0c:13:9d:33:84:25:89:51:bd:ac:6d:dd:a4:be:
11:20:81:b6:af:37:b2:a3:54:ab:ed:3d:64:71:e6:8c:61:2e:
15:c9:81:da:35:a3:47:69:ed:97:11:c3:e2:78:70:ce:cf:a1:
63:89:74:7f:6e:ac:3b:78:a0:df:61:ec:95:32:7c:ef:6c:f3:
52:4d:74:a8:6c:77:ae:1a:26:ac:e9:7a:7e:2a:8d:62:e1:1d:
33:e2:93:99:61:b1:63:9d:98:66:df:d4:49:2b:c3:dd:2f:94:
8a:4f:ca:9b:c8:0b:0c:61:cf:ae:3e:a2:01:cd:02:a1:f3:a7:
e3:31:07:8d:b0:f0:c3:41:37:96:50:7a:57:73:a8:80:35:eb:
1b:68:02:db:25:b4:20:cf:13:fe:fa:c5:62:14:80:9c:bb:92:
b5:da:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:11:19 2025 by rpki-client