Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/MZTLdVQ90PT4oehYz2fNM2kaR0g.roa
File: MZTLdVQ90PT4oehYz2fNM2kaR0g.roa (raw, json)
Hash identifier: NGh8ZlUrmfeKhRnH2t57rKua5vid3Q9Rt2CyRcxBLok=
Subject key identifier: 31:94:CB:75:54:3D:D0:F4:F8:A1:E8:58:CF:67:CD:33:69:1A:47:48
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0188FBCE3E103A2633B0801CFE2AC215998C
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/MZTLdVQ90PT4oehYz2fNM2kaR0g.roa
Signing time: Tue 27 Jun 2023 07:42:57 +0000
ROA not before: Tue 27 Jun 2023 07:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43451
IP address blocks: 31.24.176.0/21 maxlen: 22
93.174.176.0/21 maxlen: 22
185.213.144.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:ce:3e:10:3a:26:33:b0:80:1c:fe:2a:c2:15:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jun 27 07:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3194cb75543dd0f4f8a1e858cf67cd33691a4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:7d:0c:f2:c8:ed:3b:9b:bb:0c:1e:17:1d:
c0:49:bd:d0:81:db:25:b3:e1:d7:19:75:7f:38:3b:
48:77:07:d5:00:26:86:b7:25:b5:0f:5f:ae:aa:bc:
7b:aa:0a:c8:d4:40:b8:d5:38:9c:be:92:12:c0:0f:
f0:b8:6b:9a:d3:a7:b7:7b:b1:3a:77:95:b6:d1:1c:
00:0f:6a:65:52:8e:69:f0:07:54:32:48:03:a8:cf:
50:3e:51:24:f4:3f:be:88:75:16:ea:7e:29:d9:e3:
2a:46:74:97:83:95:71:4b:81:17:1a:51:27:ff:4c:
24:95:e3:8c:52:2e:f7:8a:3c:6d:e5:86:8c:c7:9a:
d4:fe:23:ee:a3:22:62:a2:25:7e:9c:fa:65:9b:5c:
56:50:1d:69:02:bf:04:16:8e:8c:53:4c:a5:bf:0c:
ac:87:e1:01:4c:cb:f4:51:18:28:8a:e5:2d:64:9c:
d6:80:67:3f:af:28:5e:7d:91:a1:d9:0e:3e:ba:81:
48:6d:ed:ce:f1:71:b2:41:0b:d1:65:d0:a2:81:4c:
8c:9e:96:b3:bc:60:0b:c3:dd:42:22:4f:0a:f2:c1:
3f:d3:ab:87:9d:27:16:7b:d3:9a:9e:9c:ca:41:84:
29:f9:b7:2d:67:8b:f2:53:c0:a6:3d:1d:6f:cf:2b:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:94:CB:75:54:3D:D0:F4:F8:A1:E8:58:CF:67:CD:33:69:1A:47:48
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/MZTLdVQ90PT4oehYz2fNM2kaR0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.176.0/21
93.174.176.0/21
185.213.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:06:93:2c:f0:b5:43:cb:35:13:02:05:f5:97:77:34:8d:6e:
05:3b:d6:dd:4e:ea:15:c5:2b:b2:59:96:b4:aa:a4:50:13:1b:
84:4f:98:8a:3e:42:5e:19:70:e7:57:12:ce:97:ef:db:bd:96:
ed:be:18:3f:92:e3:23:08:0e:67:77:e2:e0:7a:d5:af:7a:02:
3f:a6:c4:e6:10:bc:fe:ed:4c:eb:75:67:15:83:20:30:f4:1c:
34:76:86:55:7d:48:12:a5:b2:cb:26:93:cb:a8:4c:30:da:5e:
bc:6d:1d:b7:d6:4a:04:99:e6:80:03:bb:73:ad:69:08:5f:e2:
03:84:6e:da:6c:9c:86:38:db:b6:56:a6:8c:c1:a6:b6:2b:0a:
62:f2:a6:8c:2c:e8:65:6a:57:7d:a3:71:21:16:cc:0f:13:83:
0e:d8:0d:08:e9:e0:32:e1:8d:5d:95:ed:42:fb:ec:8d:5d:c6:
82:38:a0:68:73:04:7f:4f:0d:c8:37:21:66:be:02:5c:18:43:
6d:58:ff:79:12:89:07:ac:b3:a0:a6:82:8a:6c:90:af:da:a9:
6d:df:1e:b4:7b:48:3f:e2:22:f2:b6:97:b0:3f:4d:a6:4a:24:
22:a4:db:3e:b6:f4:35:e7:d8:d4:7b:ff:73:ba:5d:4a:c8:d0:
2e:b5:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:00:07 2025 by rpki-client