Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/MrwZAAFyQqdU3Tm4yuXEqPNsZBU.roa
File: MrwZAAFyQqdU3Tm4yuXEqPNsZBU.roa (raw, json)
Hash identifier: /6AbfzDcjxqsb0rlpKehd4udGEolqxDp3l1m6hzx9VM=
Subject key identifier: 32:BC:19:00:01:72:42:A7:54:DD:39:B8:CA:E5:C4:A8:F3:6C:64:15
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 04C907
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/MrwZAAFyQqdU3Tm4yuXEqPNsZBU.roa
Signing time: Fri 17 Jun 2022 07:08:44 +0000
ROA not before: Fri 17 Jun 2022 07:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207922
IP address blocks: 195.26.8.0/24 maxlen: 24
2a0f:4a40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313607 (0x4c907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Jun 17 07:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32bc1900017242a754dd39b8cae5c4a8f36c6415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:23:aa:fa:74:5f:c7:70:22:c4:3f:84:e7:
11:6c:00:f7:69:b5:5c:c8:33:b4:99:b9:6d:78:48:
90:37:b4:36:56:8e:f8:59:c5:c7:86:77:ed:9c:13:
bf:e0:39:66:c3:46:a3:da:d5:71:8b:b1:69:74:f4:
c6:4d:0a:50:a6:e0:76:fc:fa:fe:91:89:ec:90:1f:
1b:20:b2:37:27:a6:e0:be:a5:13:ca:95:c5:e8:f2:
79:58:dd:f4:bc:59:67:14:de:fc:9b:83:22:ff:92:
c5:64:ca:78:75:db:7d:0c:1d:8d:c5:52:eb:9a:b7:
55:3b:92:aa:82:f5:7a:17:3e:6d:ec:47:ef:11:1a:
f3:28:c1:15:96:b3:e6:e0:0f:c0:42:6d:7c:1b:ef:
ed:cf:ad:62:a8:c8:aa:fe:99:99:22:5a:44:b6:83:
f1:2b:69:51:52:ea:dd:58:f4:10:84:38:36:10:13:
ba:9c:13:07:c3:b5:95:01:28:76:9a:b1:69:35:c5:
47:94:5b:cc:7a:70:5f:0b:e0:b4:62:cb:08:15:fa:
38:be:fb:31:b5:87:9f:da:1a:09:46:ba:f5:fc:fe:
ed:ab:d9:0d:8c:60:f9:fa:52:4a:22:f3:67:7a:78:
1a:bd:96:6c:32:b4:98:2c:18:3b:1e:d0:60:ec:df:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:19:00:01:72:42:A7:54:DD:39:B8:CA:E5:C4:A8:F3:6C:64:15
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/MrwZAAFyQqdU3Tm4yuXEqPNsZBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.8.0/24
IPv6:
2a0f:4a40::/29
Signature Algorithm: sha256WithRSAEncryption
4d:f6:91:e5:f0:04:81:ea:95:52:93:9c:d5:81:c0:4c:26:35:
a5:19:ad:a5:ac:c6:cd:0b:34:90:91:4a:f7:11:95:8d:90:75:
29:87:6e:34:1d:ee:92:dc:2f:8c:b2:25:4c:84:77:91:d6:d9:
4c:57:f1:1f:3e:06:55:84:4e:da:ed:dc:81:b8:3b:82:4b:2f:
2f:9a:9c:31:d3:f8:a9:ec:a6:8e:50:c8:a9:4c:7e:e0:a4:e4:
04:93:a5:46:9c:ab:c2:d7:90:0b:9b:d7:9a:1e:bf:72:0d:c0:
c5:0f:08:bb:3c:71:1f:1f:d8:b0:ee:4d:10:63:b1:9f:75:6f:
46:22:59:2a:d9:5f:60:67:67:ad:f1:18:87:2e:6d:4a:a9:3a:
cf:79:04:6c:93:b0:43:58:23:80:cf:65:93:5d:64:55:46:21:
8a:db:c8:7d:c0:a3:d1:88:17:4c:07:12:3d:42:59:4e:71:fc:
b0:0c:fc:7c:ae:9d:d0:b9:59:f9:e3:a3:ca:05:19:89:c6:88:
29:9d:0b:15:52:42:b0:b2:3a:e8:a7:33:5a:4e:9c:41:39:82:
b7:33:35:57:94:e0:83:22:23:b3:b2:b2:9c:dd:86:95:56:f6:
15:2b:74:d5:f2:7b:63:03:38:3a:6a:52:f4:1d:a9:d4:c3:7f:
e3:18:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:04:55 2025 by rpki-client