Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/mFM2tW1etn_5jVtjdyMdy4TnnIA.roa
File: mFM2tW1etn_5jVtjdyMdy4TnnIA.roa (raw, json)
Hash identifier: 0MrAK+MiVkJSdx83F+c4z069nuybi5AuOZSdfScC97g=
Subject key identifier: 98:53:36:B5:6D:5E:B6:7F:F9:8D:5B:63:77:23:1D:CB:84:E7:9C:80
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 018570303DD73E38B1347869C4711811354A
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/mFM2tW1etn_5jVtjdyMdy4TnnIA.roa
Signing time: Mon 02 Jan 2023 01:54:47 +0000
ROA not before: Mon 02 Jan 2023 01:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 193.176.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3d:d7:3e:38:b1:34:78:69:c4:71:18:11:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jan 2 01:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=985336b56d5eb67ff98d5b6377231dcb84e79c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:46:9e:27:d3:99:5b:1d:24:ea:41:1b:64:
8c:d9:f4:b7:0a:4a:9f:4b:7d:32:54:69:f4:a6:3e:
47:3a:58:c9:61:93:9e:18:72:c9:1f:c7:0a:3f:fa:
91:4e:04:4d:76:91:c5:6d:9e:38:67:04:83:43:08:
08:fc:9c:4d:08:5f:0a:f3:c6:94:e1:1e:c8:18:96:
59:77:a4:f7:b9:a9:2b:5b:00:e9:35:d7:40:3b:8f:
0e:0e:23:cd:4a:ae:92:90:23:c5:cf:11:8b:dd:13:
b3:72:cd:ff:53:93:15:a1:a3:27:ae:a1:2f:11:89:
a5:ee:38:af:5c:aa:4e:b5:22:52:27:ed:6d:a3:5e:
bd:70:2f:22:4f:00:ec:b7:66:a6:e5:e8:48:a7:1f:
2d:48:4a:15:21:0f:77:97:50:a5:36:5b:0a:ca:30:
e3:83:44:06:28:c1:07:da:7c:72:2e:d6:25:b2:ac:
90:21:80:3b:8c:73:23:da:9e:e4:a1:a5:66:4c:43:
c6:aa:39:be:8f:bf:cb:4c:2e:d7:c7:8d:2e:3d:f3:
75:1f:f2:d3:87:d6:81:76:f4:10:b8:e4:d0:f4:1c:
d8:be:e4:34:8a:09:58:3e:b3:7b:3c:28:b2:78:68:
d6:0e:39:9c:e6:b2:89:1f:76:8e:fa:93:8d:2c:82:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:36:B5:6D:5E:B6:7F:F9:8D:5B:63:77:23:1D:CB:84:E7:9C:80
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/mFM2tW1etn_5jVtjdyMdy4TnnIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.136.0/21
Signature Algorithm: sha256WithRSAEncryption
23:8d:88:67:d7:15:0a:9e:b2:5e:de:dd:cc:bc:c7:1d:a3:fd:
67:d7:9b:de:a0:14:2b:f6:31:13:1d:18:9a:01:e9:b1:3b:a9:
4a:f6:a1:8d:e9:c3:17:3f:96:56:17:c5:d1:0b:9b:6b:7e:ae:
5e:c9:fa:5c:cc:a8:f3:11:65:91:6f:08:cc:c0:a3:9b:e5:e2:
ff:65:dd:9a:fe:28:5d:4d:b4:80:7e:d3:2b:96:c9:c5:57:8b:
53:20:da:49:ce:08:82:24:b7:a7:19:c8:d1:df:58:21:8c:71:
75:44:11:b7:89:1c:9c:02:cf:d1:bf:95:cc:ba:f6:e2:07:81:
bc:23:7d:17:48:bb:e1:2b:b6:60:ab:ca:82:d7:b6:73:87:1c:
3a:99:32:08:99:12:ae:9e:a5:2d:e7:da:e0:50:a6:1c:a7:5b:
79:18:9e:c4:cb:28:f2:c3:eb:ad:2f:9e:86:0d:21:dd:0f:d6:
1f:a6:0d:97:34:64:1a:de:30:80:93:3d:de:20:fc:4a:30:cd:
29:18:e2:76:ea:fb:29:eb:ca:43:5b:de:fd:3f:7e:e6:6f:2f:
bf:46:1c:de:35:da:d3:10:d0:9c:dd:a1:a2:2e:31:b6:99:a7:
49:5f:4a:8e:04:37:ab:ad:bf:af:77:ae:61:b9:5d:4f:4d:0b:
65:ea:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:30 2025 by rpki-client