Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MCzSFPRfQoAdIgZ9DLEv54b0WFc.roa
File: MCzSFPRfQoAdIgZ9DLEv54b0WFc.roa (raw, json)
Hash identifier: F0G+evzd5I0+nwGpEw/8l4+XxQg3TJ6fjMHWXRvMp7I=
Subject key identifier: 30:2C:D2:14:F4:5F:42:80:1D:22:06:7D:0C:B1:2F:E7:86:F4:58:57
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0181DF0D5B5CB81520BA5C5E799BC7B64109
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MCzSFPRfQoAdIgZ9DLEv54b0WFc.roa
Signing time: Fri 08 Jul 2022 18:23:23 +0000
ROA not before: Fri 08 Jul 2022 18:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 45.147.31.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a12:ac40::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:e841::/32 maxlen: 32
2a0f:a01::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e00:123::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a12:d540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:df:0d:5b:5c:b8:15:20:ba:5c:5e:79:9b:c7:b6:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 8 18:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=302cd214f45f42801d22067d0cb12fe786f45857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:95:7f:f0:44:56:d8:77:f0:30:7a:a6:98:
97:07:54:c9:2b:ca:1e:ab:13:ad:ce:6e:cb:81:e3:
ed:76:16:14:ec:2f:92:5c:58:6a:e0:03:14:28:23:
0f:eb:d2:5e:06:b0:34:ee:7d:0e:ac:ec:58:dd:bf:
46:a7:5a:44:7a:b5:46:1f:13:72:67:e0:67:8e:ff:
90:de:79:0a:67:3b:11:06:21:2f:62:1f:1e:88:f6:
83:3a:3b:e5:24:42:62:da:aa:15:93:4e:10:cd:00:
a2:99:90:a0:41:8b:de:c8:81:d6:c2:10:81:2b:d1:
c4:c7:be:d0:b2:5a:cc:24:18:9e:2b:60:7e:94:e3:
4b:b1:04:16:c7:5c:5f:bc:3f:d6:c4:ec:61:14:bf:
26:c1:91:12:bf:40:a3:80:11:bd:cd:b2:49:3a:25:
f0:b7:b1:4e:7e:b0:5b:33:8a:2f:45:5f:81:95:c7:
8a:bb:2f:9f:0b:ce:9f:ca:89:72:8a:6c:5d:4b:06:
ba:29:de:5b:b0:83:83:6f:83:2b:9b:3d:2d:4a:2b:
34:e8:2a:80:2e:0b:96:a3:fe:b8:a7:7d:09:6b:b8:
51:3e:0d:b5:bc:93:50:36:b8:6f:da:6d:5c:ef:7e:
43:9e:be:8b:57:81:d9:25:e3:26:11:73:bf:44:e6:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:D2:14:F4:5F:42:80:1D:22:06:7D:0C:B1:2F:E7:86:F4:58:57
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MCzSFPRfQoAdIgZ9DLEv54b0WFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.31.0/24
IPv6:
2a07:f300::/29
2a0c:9240::/29
2a0e:5a80::/29
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:e841::/32
2a12:ac40::/29
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
c3:4d:f7:14:0e:f2:8b:bc:61:10:49:4b:ae:27:de:46:26:4b:
bb:3a:42:95:68:df:29:16:95:0b:ee:72:9d:cd:9d:93:e1:b3:
fc:d5:0c:c0:5c:3a:03:e6:86:78:bc:d6:b1:d5:bf:92:a5:54:
a4:e7:ee:70:56:1c:b2:b0:34:d2:e9:38:2d:a4:0a:34:80:2b:
a5:13:f0:c3:d5:73:ce:f4:36:f9:0c:f9:64:e9:cd:5f:84:db:
b5:a9:a3:80:ee:a1:81:6f:15:69:b7:1b:2b:ad:09:f5:6a:b8:
fe:f5:6d:79:34:2a:98:77:ee:9f:06:30:45:fb:17:ae:fe:8b:
99:91:f1:84:b0:28:eb:a6:b2:21:0a:56:9c:78:8d:61:f8:eb:
da:80:f0:9e:ac:23:14:45:f1:19:c9:7c:c2:75:e9:25:da:ab:
08:91:c3:2d:06:8f:4f:69:91:df:51:af:6f:86:b3:da:38:75:
2b:3c:55:4e:14:77:50:47:f5:89:a0:f9:15:1c:1b:c7:b4:b6:
07:13:15:08:54:b6:c9:0b:0e:07:36:73:19:5a:5b:83:6e:67:
6e:4c:84:c7:bf:53:e6:f1:50:fa:74:a0:d6:43:52:f0:79:1e:
0f:8c:0c:39:20:da:9c:b4:a0:3f:cd:e5:41:06:f7:a5:b9:c3:
50:4a:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:48:55 2025 by rpki-client