Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/MspdGmYW6GRbYuanehWfMdoEE_o.roa
File: MspdGmYW6GRbYuanehWfMdoEE_o.roa (raw, json)
Hash identifier: +zmllS4utDQmoilCBbVwl58jEoRbkedSL30AtDYDs70=
Subject key identifier: 32:CA:5D:1A:66:16:E8:64:5B:62:E6:A7:7A:15:9F:31:DA:04:13:FA
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: D3B1E5
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/MspdGmYW6GRbYuanehWfMdoEE_o.roa
Signing time: Sat 01 Jan 2022 07:54:35 +0000
ROA not before: Sat 01 Jan 2022 07:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61276
IP address blocks: 91.190.156.0/24 maxlen: 24
2a11:6380::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13873637 (0xd3b1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jan 1 07:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ca5d1a6616e8645b62e6a77a159f31da0413fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:c9:7c:94:14:0d:5d:83:fe:8b:22:81:9e:
fc:28:80:6b:eb:81:76:4e:a8:9d:f6:1b:e0:55:69:
5a:82:a4:c1:49:a6:08:68:5d:24:6f:f3:36:c0:6a:
13:88:53:a5:5b:47:87:66:f6:bd:0e:f8:5d:4a:9d:
38:45:7a:55:74:3a:b2:34:4a:bc:c6:05:8b:42:53:
9d:cb:9a:50:59:5b:88:89:15:11:62:b1:c9:55:22:
70:b1:14:b7:41:94:e4:a3:56:45:65:ba:e6:6b:ec:
73:f5:76:28:c6:7d:a1:e7:4e:e2:26:9e:f8:fd:0a:
6e:1f:9e:4e:7f:f5:e8:a9:1a:07:7a:13:13:b6:5a:
c6:f4:7d:64:cf:56:2d:0e:57:23:80:cd:60:55:9b:
1e:31:33:69:8a:f4:13:78:4a:32:da:09:1c:0c:26:
e4:2d:2f:5e:f8:48:6a:51:85:09:36:8d:85:9e:93:
29:d5:31:13:2c:91:16:3d:c3:bc:d2:6e:87:41:36:
58:74:6b:4b:8b:a0:05:33:e0:8d:0a:d6:28:9a:ed:
9b:e1:df:e4:af:d8:e6:f6:ef:07:b7:fe:d2:f7:21:
6b:ea:90:f3:9a:81:ba:fb:35:32:f9:c2:c9:66:d7:
24:e3:36:7f:83:73:36:58:a0:cd:0d:b1:63:65:ed:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:5D:1A:66:16:E8:64:5B:62:E6:A7:7A:15:9F:31:DA:04:13:FA
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/MspdGmYW6GRbYuanehWfMdoEE_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.156.0/24
IPv6:
2a11:6380::/29
Signature Algorithm: sha256WithRSAEncryption
88:44:b8:65:ac:ac:c6:20:48:1f:a8:eb:92:91:f3:f5:16:ff:
48:ef:61:7a:51:f7:57:97:b7:c5:ae:ba:a3:33:51:7a:14:45:
8d:fb:19:d0:bc:42:ab:4e:1d:d3:d1:48:9c:b4:67:71:20:65:
c3:31:b5:a8:88:e2:44:1e:37:8c:1c:a6:d8:37:39:59:e6:87:
71:f3:26:b7:06:ff:6f:86:95:d5:52:c3:87:c8:28:db:b9:1e:
4f:8a:a6:44:6f:6c:9d:eb:1f:a6:0e:09:16:61:41:f6:bf:28:
0e:79:60:87:b2:6b:12:f4:16:39:90:34:12:eb:59:20:f8:32:
a0:5f:81:06:8c:95:06:d0:43:9a:b9:36:26:b4:96:32:43:0e:
b8:57:26:27:61:a4:fa:f2:47:85:c0:d1:69:8a:10:18:a3:30:
fd:b7:ef:5e:9f:2e:7e:a8:a3:24:0d:3a:6d:3b:25:18:eb:7f:
13:30:85:fe:48:34:c4:51:22:05:eb:2a:73:57:4a:1e:2b:61:
ce:ba:30:71:0b:8e:ef:59:a7:5f:03:94:89:f9:9b:19:13:fe:
0e:b6:ef:cf:6b:ca:67:2b:8f:1a:ba:dd:a3:65:dc:eb:53:4c:
82:60:9c:74:f6:4b:f4:0e:35:3d:15:71:ba:6a:43:5e:a4:e5:
f3:3c:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:42 2025 by rpki-client