Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/MzDuBJQJ6IoEUGFH5p8PU3fPY_w.roa
File: MzDuBJQJ6IoEUGFH5p8PU3fPY_w.roa (raw, json)
Hash identifier: U+yeezyOrpADXUbDn5lIakiM1jEaZAeZsqClOrusi/A=
Subject key identifier: 33:30:EE:04:94:09:E8:8A:04:50:61:47:E6:9F:0F:53:77:CF:63:FC
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 018571B0AE18D2F353290C385A4D6253B821
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/MzDuBJQJ6IoEUGFH5p8PU3fPY_w.roa
Signing time: Mon 02 Jan 2023 08:54:42 +0000
ROA not before: Mon 02 Jan 2023 08:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200094
IP address blocks: 81.21.206.0/24 maxlen: 24
185.73.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ae:18:d2:f3:53:29:0c:38:5a:4d:62:53:b8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jan 2 08:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3330ee049409e88a04506147e69f0f5377cf63fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:c7:7d:ea:7f:c2:81:51:1a:db:2a:7a:15:
50:d3:db:aa:ff:ff:63:74:74:9d:c0:d5:07:4b:90:
30:f6:6c:f1:94:2e:ca:b8:d6:78:75:43:55:1e:72:
61:97:de:1b:83:ef:15:25:7f:c6:a5:ac:05:cb:39:
89:e4:6c:77:14:45:83:ce:5b:f7:b8:6b:93:ce:85:
36:7d:fc:e4:4b:88:a6:85:18:f8:9e:8d:22:bc:44:
d5:e9:8b:fd:c9:eb:84:d7:c3:33:c6:15:96:95:8d:
90:3a:d9:20:a1:bc:d9:56:da:dc:45:85:f2:87:5f:
c6:67:34:01:41:11:4f:48:32:9a:e0:4d:7a:1a:f1:
5c:49:77:0f:ae:07:90:56:62:a2:34:11:5a:3e:26:
41:f8:7d:3b:e9:e7:b0:51:b9:56:45:73:ec:d2:49:
61:9f:27:cf:09:47:23:63:65:48:7f:eb:18:59:ee:
bd:84:96:ca:c5:63:b4:1c:7c:27:a3:81:be:c7:eb:
5d:e1:8d:ff:cb:20:99:be:78:53:57:d3:f7:c8:74:
2a:b2:c8:ff:0a:d4:94:f0:b7:51:95:60:17:d7:6e:
eb:ee:fe:f3:71:f7:4b:33:92:e4:34:1c:a2:c0:1a:
48:a6:e0:f3:a2:cc:f5:59:cc:6f:e9:45:e1:49:f7:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:EE:04:94:09:E8:8A:04:50:61:47:E6:9F:0F:53:77:CF:63:FC
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/MzDuBJQJ6IoEUGFH5p8PU3fPY_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.206.0/24
185.73.60.0/22
Signature Algorithm: sha256WithRSAEncryption
46:27:de:c8:c6:d7:47:cc:6a:57:63:cc:3e:9a:39:b7:3d:bf:
1d:bd:42:73:a3:a0:c0:a8:6c:9b:70:7e:0d:84:bc:d0:df:f6:
dc:3b:09:3b:70:c0:1f:4a:40:71:ea:cc:74:c0:12:6d:32:62:
6f:fc:1f:11:b5:90:d1:73:eb:e5:db:6c:16:4e:d6:76:27:8d:
49:cf:10:c0:5b:be:20:2d:ae:9d:7f:3f:ba:09:7b:40:72:ee:
48:b9:47:59:80:80:b3:d0:6d:aa:7e:8d:f5:c9:ac:e5:27:cd:
40:36:48:1b:6c:0b:2a:df:db:24:39:e2:62:01:1b:e8:92:41:
1f:90:49:68:7f:09:9c:f1:85:cd:86:18:37:6a:84:a2:ff:7c:
15:34:b4:44:95:c4:01:39:11:fc:95:37:b9:20:36:4c:e5:fe:
93:6f:2f:19:c6:87:bd:00:03:10:aa:bd:fd:fa:d3:38:d7:b6:
41:1e:2f:15:8d:ae:99:00:d4:4f:39:ef:9a:99:a1:c7:83:a5:
cc:21:2b:88:09:59:bf:96:42:d5:98:ec:09:39:b4:7c:ef:50:
70:4c:8a:81:65:a7:f1:f8:6e:29:27:0d:11:91:3c:95:9c:b6:
35:ad:e3:0d:3b:aa:40:99:ae:ea:c9:57:63:43:45:87:a4:13:
3b:ee:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:08 2025 by rpki-client