Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mfax2TFID5T9teFlMCwU9j8oHzA.roa
File: mfax2TFID5T9teFlMCwU9j8oHzA.roa (raw, json)
Hash identifier: SQhyUs8JFRhWbusPUfkExTUlQ4pGhy2gfK9PEATTIYE=
Subject key identifier: 99:F6:B1:D9:31:48:0F:94:FD:B5:E1:65:30:2C:14:F6:3F:28:1F:30
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01840523A1EBDCB88C180FC41A632B2B62A0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mfax2TFID5T9teFlMCwU9j8oHzA.roa
Signing time: Sun 23 Oct 2022 13:58:52 +0000
ROA not before: Sun 23 Oct 2022 13:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200857
IP address blocks: 2a0c:9a40:8103::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:23:a1:eb:dc:b8:8c:18:0f:c4:1a:63:2b:2b:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 23 13:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99f6b1d931480f94fdb5e165302c14f63f281f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:d3:ce:cb:86:29:21:b0:c4:4e:52:59:b1:
dd:f8:c2:ae:5c:c2:81:7b:48:36:e5:5c:f9:94:06:
2f:d1:3c:4d:d5:cf:1e:98:30:d4:8d:f5:89:64:2c:
8a:5b:38:10:d2:9a:a3:09:2f:59:38:46:a7:de:a8:
89:9e:38:30:a4:58:53:a3:56:b1:8e:64:5b:46:dc:
2f:9f:b5:68:a1:6c:81:25:41:89:c8:1d:fe:9e:84:
eb:be:48:23:da:59:20:da:19:aa:5c:09:dc:58:47:
6c:df:22:39:08:f9:70:60:c3:82:b4:a1:fe:1d:85:
29:7e:32:81:ec:24:cd:e8:54:e9:4c:22:e5:27:32:
f6:5f:7c:72:e5:5d:61:8e:87:a7:2b:de:34:4a:52:
48:fe:fb:b6:94:c3:03:6c:41:58:2e:bf:15:2a:20:
b5:05:b6:37:1a:d3:6b:44:37:d7:d2:dd:31:05:83:
a4:68:f5:61:89:64:5f:ca:17:a7:1d:9d:3d:93:f0:
7e:5f:28:98:13:f5:5b:f4:88:44:22:c9:8a:43:33:
00:b8:3c:96:d9:31:ab:2e:f9:2e:24:41:bf:75:7c:
0b:dd:ef:81:b4:12:75:3e:c8:1f:e1:12:d5:9a:21:
0e:da:db:7f:94:a0:f4:d2:68:c3:19:67:88:0b:8c:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:B1:D9:31:48:0F:94:FD:B5:E1:65:30:2C:14:F6:3F:28:1F:30
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mfax2TFID5T9teFlMCwU9j8oHzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8103::/48
Signature Algorithm: sha256WithRSAEncryption
10:2a:42:ae:28:ae:43:17:20:b4:cc:d9:a1:52:31:43:b6:80:
8f:b0:3d:f9:69:95:88:8d:5d:97:9d:17:df:79:6f:2b:a4:e4:
36:b1:17:6e:e8:e4:5c:ac:ac:38:c7:22:dd:ee:d6:e4:41:d5:
67:9f:a9:12:4f:7e:14:be:b4:d6:73:07:27:ae:7f:c8:03:ac:
c8:03:d4:54:61:e4:e6:b9:2f:e7:6b:77:c8:59:d8:92:b6:5a:
96:f4:09:e0:66:f6:d9:47:7e:0c:95:69:40:81:5c:2d:6b:44:
30:5e:c4:26:00:3b:21:32:06:51:cc:d9:14:e0:70:f0:99:4d:
a0:91:ea:0f:96:b0:68:6a:1a:71:aa:87:0a:fd:dd:ff:df:37:
83:57:7d:ad:be:35:5a:92:90:a4:ce:b8:91:f2:a8:d9:68:e3:
15:60:b2:8a:5e:12:3a:dd:93:93:89:59:a6:3c:59:3f:a5:e4:
95:28:fc:50:45:2f:cd:27:b9:2f:5e:bf:99:ff:a9:9c:2d:67:
73:49:ed:82:e1:52:6d:a9:0a:f6:27:e0:dc:dd:35:2b:8d:6f:
7c:2e:81:6a:0e:52:85:e8:48:8b:c1:ff:fc:8b:21:5b:eb:d5:
9b:4b:ef:93:65:05:f8:85:c7:f3:19:cd:62:d1:b7:fb:d0:02:
a8:e2:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:16 2024 by rpki-client on console-ams.rpki-client.org