Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Mfea_77MOmY5X1kZyqfr_z7W-lQ.roa
File: Mfea_77MOmY5X1kZyqfr_z7W-lQ.roa (raw, json)
Hash identifier: zXkjhx//h684WIigCC6WpscqYG6S53s09heViv3c8no=
Subject key identifier: 31:F7:9A:FF:BE:CC:3A:66:39:5F:59:19:CA:A7:EB:FF:3E:D6:FA:54
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0BE0E400
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Mfea_77MOmY5X1kZyqfr_z7W-lQ.roa
Signing time: Sat 01 Jan 2022 12:55:00 +0000
ROA not before: Sat 01 Jan 2022 12:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53356
IP address blocks: 2a0c:9a40:8200::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199287808 (0xbe0e400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 12:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31f79affbecc3a66395f5919caa7ebff3ed6fa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:7e:f5:7a:92:05:82:17:fe:a8:01:6e:15:
2b:5c:47:00:36:fb:75:65:9a:95:53:5e:86:34:14:
0a:a3:05:05:38:a1:db:f6:ab:e2:f8:ff:40:e9:f2:
6b:f4:de:7c:8f:f1:a7:c7:22:6b:0e:ed:c7:aa:b9:
ab:b9:71:7c:9d:cb:ac:b3:03:1d:57:f5:cc:47:27:
14:c4:62:1d:c1:0a:1a:70:20:99:c6:db:25:25:90:
a4:fc:a6:af:6d:46:fc:80:1b:3b:7c:10:30:e4:5d:
ed:59:5b:ff:75:e0:aa:21:81:8c:c5:0f:7f:f7:8a:
05:ad:24:4e:a0:59:5a:d1:09:df:fe:dc:f0:db:99:
6c:7d:1f:a3:4b:9f:b5:b2:0c:d4:e4:aa:bb:b4:21:
18:4f:38:e7:6b:fe:38:78:46:ee:d3:b5:34:bc:67:
07:2f:89:0f:ca:ba:d8:30:4d:4b:a6:08:ef:d9:ff:
90:7b:e9:89:25:fa:b9:ac:0c:21:08:9a:d2:15:75:
6f:a9:11:16:6a:e8:41:55:b7:c7:a5:12:23:de:9f:
c9:82:ac:66:e0:a3:99:37:e5:d9:9f:95:e9:14:3a:
fe:7b:14:3d:fe:fd:a2:5a:6f:46:02:ba:17:f6:be:
a6:05:9a:66:4e:58:ba:dd:6b:81:cb:7c:e6:d2:6d:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:9A:FF:BE:CC:3A:66:39:5F:59:19:CA:A7:EB:FF:3E:D6:FA:54
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Mfea_77MOmY5X1kZyqfr_z7W-lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8200::/47
Signature Algorithm: sha256WithRSAEncryption
51:a5:1e:66:9b:77:3c:a3:98:30:56:97:5c:9d:9a:7d:ea:82:
9c:90:9d:8d:7c:73:31:df:d1:34:33:a6:99:5a:82:5a:51:53:
55:8f:bf:8a:98:1a:42:a1:a1:3e:e8:5a:fc:f5:99:51:d9:10:
bb:7f:0c:86:29:86:53:27:8e:37:74:e1:79:01:87:e1:cb:e9:
25:d0:57:cf:1f:7a:96:c4:40:31:e0:62:73:10:2e:91:35:81:
35:66:d3:11:25:7d:19:89:f9:75:11:a5:58:63:0f:fd:8c:e4:
0f:e3:5a:3e:0f:c8:88:6e:34:79:b7:a1:55:0d:60:a5:c5:6b:
f2:2d:11:8b:49:20:4d:2c:c5:92:88:eb:d0:8f:b7:95:6e:2c:
39:0c:79:9c:e4:43:b7:9a:ec:05:0a:61:0a:9a:8a:62:66:48:
12:19:a3:4e:d4:a2:34:3c:93:af:43:8e:52:8e:b7:f9:44:7d:
2d:41:e9:32:bf:e1:47:69:bd:88:15:e9:e6:83:e7:bf:55:c5:
21:46:a4:e0:17:90:f9:94:b9:7e:92:2a:45:ba:16:f3:ac:ac:
71:f4:9e:cb:8b:b0:8f:ce:ad:1b:0e:08:94:10:d9:c5:e5:ca:
d7:2c:3c:f0:fa:07:42:66:04:e8:35:67:6f:ca:b9:71:a1:48:
10:da:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:41 2025 by rpki-client