Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/MLQAyjKEq0GaCyWiRa-PeluEX1o.roa
File: MLQAyjKEq0GaCyWiRa-PeluEX1o.roa (raw, json)
Hash identifier: OKTdc0tOgArgWa85NCMSgkefZLkBhOOKvkwJXGflx+E=
Subject key identifier: 30:B4:00:CA:32:84:AB:41:9A:0B:25:A2:45:AF:8F:7A:5B:84:5F:5A
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 057DDEB2
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/MLQAyjKEq0GaCyWiRa-PeluEX1o.roa
Signing time: Sat 01 Jan 2022 12:59:45 +0000
ROA not before: Sat 01 Jan 2022 12:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 193.203.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92135090 (0x57ddeb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Jan 1 12:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30b400ca3284ab419a0b25a245af8f7a5b845f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:d6:1e:36:d5:62:3b:64:a3:69:d1:bc:6f:
3a:36:1d:22:f9:b5:b7:ec:eb:55:1c:33:5c:89:a5:
6c:37:63:15:a4:9b:e3:2a:1e:3f:ba:87:58:b4:a1:
e6:77:b8:2f:00:73:fd:39:61:ed:f0:e3:8f:a8:27:
33:79:33:fd:61:6d:cd:88:e0:5e:ea:0d:19:32:db:
88:50:e7:2e:52:bb:a1:52:44:62:e9:0f:8c:d8:a6:
b7:84:44:2a:fe:46:ea:1b:9e:7c:a4:af:eb:a5:17:
84:83:43:cc:5d:d8:aa:3a:24:c0:c5:47:08:be:73:
2e:4e:77:82:d8:5c:ae:c3:7f:bd:6f:83:04:9a:ab:
62:b5:92:6f:67:0a:2d:e2:30:40:fd:4c:ec:ae:9e:
28:03:0e:e6:ba:f0:2c:7e:3e:1c:b2:48:7e:c6:ba:
5b:b8:8b:83:48:e5:9c:20:26:ba:00:a4:35:8d:52:
85:31:7a:36:ec:f1:a0:0a:0b:b5:2d:aa:cc:e8:92:
b7:5f:b8:e2:b6:a0:4d:f7:93:df:f9:1b:73:96:55:
4f:fa:fe:89:cf:10:d3:81:6f:da:4d:5c:81:1d:50:
30:3d:80:e8:44:a2:60:22:45:58:a6:84:1a:b1:e7:
3c:22:d3:58:33:71:3c:ee:c3:ce:26:4c:86:cf:cc:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:00:CA:32:84:AB:41:9A:0B:25:A2:45:AF:8F:7A:5B:84:5F:5A
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/MLQAyjKEq0GaCyWiRa-PeluEX1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
Signature Algorithm: sha256WithRSAEncryption
71:cf:50:a8:b9:ed:4d:6f:ff:cf:d5:36:75:15:8b:5b:9b:df:
4d:a8:29:6e:3d:f9:81:19:ba:8f:00:5d:f9:c6:2f:78:8f:a0:
20:a1:cf:17:aa:18:49:8f:f8:5c:c4:a0:9b:08:3d:e7:82:96:
eb:0f:44:54:98:0b:3b:4b:4f:9c:63:76:a4:f4:60:70:b0:0e:
0c:8b:0d:5c:15:38:88:68:d9:9c:e6:49:2c:df:7d:ad:c9:bd:
ae:53:eb:5a:8a:4f:17:71:5c:f0:aa:25:c1:0b:2d:5d:2c:25:
c6:ee:cd:37:0e:9e:5b:56:5e:5d:37:8c:07:d5:ed:ce:7d:d1:
78:27:8b:27:24:2a:b3:61:f2:d1:5e:e5:aa:1f:a0:12:e8:b5:
13:ef:af:9f:6f:b4:62:cb:9d:a0:70:24:38:bd:2e:ae:a6:d8:
78:07:75:4b:3e:14:58:56:2d:88:3e:18:a6:d0:99:b4:42:dd:
76:e7:bf:51:0d:43:af:b6:6e:c5:e3:84:77:17:6b:d1:70:e9:
cf:b8:0d:74:3f:a7:0f:40:c8:19:a5:79:59:e7:49:5a:93:db:
d0:af:b3:18:bc:90:29:ec:ea:8b:9e:0b:e2:68:6a:e8:9d:f8:
a6:a8:80:f0:2d:00:d6:c0:7d:75:77:0b:22:65:39:63:69:54:
3f:71:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:59:39 2025 by rpki-client