Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mfMvcCNI6zWXFGvEdsQe6u1GfXk.roa
File: mfMvcCNI6zWXFGvEdsQe6u1GfXk.roa (raw, json)
Hash identifier: tqTDpPWT78jv4z87hHietkr8mAW6ZabKey1VcWv5ooo=
Subject key identifier: 99:F3:2F:70:23:48:EB:35:97:14:6B:C4:76:C4:1E:EA:ED:46:7D:79
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE2CADD5F34EB41DD2D9BC37A5809
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mfMvcCNI6zWXFGvEdsQe6u1GfXk.roa
Signing time: Sun 01 Jan 2023 14:44:50 +0000
ROA not before: Sun 01 Jan 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42031
IP address blocks: 195.91.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e2:ca:dd:5f:34:eb:41:dd:2d:9b:c3:7a:58:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f32f702348eb3597146bc476c41eeaed467d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:f1:f3:69:80:1d:df:79:73:78:3c:90:11:
a8:c5:17:ac:09:12:36:26:0b:a0:b5:2b:f2:01:95:
0c:ea:f0:41:58:71:9e:7e:26:92:ac:e5:d1:d0:71:
c5:19:72:89:1b:7f:98:fa:e0:44:fc:32:40:73:6f:
ba:6b:06:78:72:c4:aa:e7:65:6a:20:0e:2f:37:a2:
f6:74:ab:11:6d:a6:18:b7:e7:fe:38:1f:84:b1:30:
38:a5:72:4b:94:0a:fa:9b:32:2f:21:02:e8:52:b1:
4f:7f:3b:c2:84:35:53:53:9c:e0:8b:bc:a3:a8:b4:
9c:69:77:df:01:ef:fb:72:84:41:f4:1d:56:2d:75:
e9:d4:d4:a7:4b:50:30:5b:25:e5:15:9d:5e:20:20:
0e:4f:7d:07:28:36:9e:fc:57:d4:ad:93:d2:30:76:
e9:36:a0:72:72:79:5e:b0:ce:90:a1:c0:78:70:20:
a7:de:05:62:22:33:94:da:c4:11:d7:66:11:86:76:
d3:69:a9:6c:f1:ec:df:d0:70:2e:9b:6b:76:1d:30:
17:5d:28:7e:e4:da:a9:ed:5d:12:1a:8b:2e:37:a8:
e9:70:36:e1:6f:22:80:1e:45:10:d3:5c:b8:38:18:
35:82:42:dc:2a:48:9b:ef:11:01:c9:ea:08:7a:4a:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:2F:70:23:48:EB:35:97:14:6B:C4:76:C4:1E:EA:ED:46:7D:79
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mfMvcCNI6zWXFGvEdsQe6u1GfXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.91.142.0/23
Signature Algorithm: sha256WithRSAEncryption
52:c6:42:1f:9b:6f:8e:7b:7e:7c:95:2f:27:59:4b:49:2b:10:
e3:7b:e5:d5:0b:0a:27:45:f7:55:63:fd:1f:ce:37:6f:93:15:
8e:d6:1c:03:2a:61:aa:e9:77:af:21:e2:2b:9a:c2:99:4b:25:
cd:f7:db:98:35:1f:f6:53:bf:65:59:c5:24:9e:c2:dd:34:46:
65:4e:7f:32:8d:50:3d:02:15:55:39:a3:7e:c7:d2:09:59:76:
45:3e:12:12:6a:18:34:8f:f8:1f:29:73:df:2c:75:1e:d8:c0:
e7:81:de:8c:a8:93:e8:77:7a:5b:c7:7b:f3:44:c6:35:49:26:
9d:f6:84:10:9d:d5:37:c3:75:68:87:a2:a6:aa:c6:9c:c3:43:
95:e4:4d:83:d0:39:16:f9:6c:ee:5e:72:39:7c:ff:18:bd:80:
10:c6:3f:05:9e:d8:3d:76:83:29:86:6e:a4:a6:ff:9d:8b:d0:
57:44:0e:7e:68:11:ae:7e:a0:dc:ad:f1:7e:78:85:e8:91:9c:
e2:10:33:6e:4f:39:0f:b5:2d:fd:00:3b:47:6a:a5:2f:d9:99:
5b:ed:18:9f:4f:c0:52:35:d0:dd:ca:66:ce:63:df:64:3e:3a:
e9:47:4c:1f:96:fd:b3:05:10:c3:79:a9:33:11:18:a9:d2:04:
78:0d:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:44 2025 by rpki-client