Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/mfmzW1102CKsmcomFPTCFI8I_Ww.roa
File: mfmzW1102CKsmcomFPTCFI8I_Ww.roa (raw, json)
Hash identifier: B2zblx/ZEbIeFVYBl+nm4qCwGbx0o/pok4xe7Xm+ZIY=
Subject key identifier: 99:F9:B3:5B:5D:74:D8:22:AC:99:CA:26:14:F4:C2:14:8F:08:FD:6C
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 52F4
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/mfmzW1102CKsmcomFPTCFI8I_Ww.roa
Signing time: Thu 14 Apr 2022 10:37:16 +0000
ROA not before: Thu 14 Apr 2022 10:37:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210638
IP address blocks: 62.233.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21236 (0x52f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: Apr 14 10:37:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99f9b35b5d74d822ac99ca2614f4c2148f08fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:00:14:31:90:21:7f:b4:a5:46:46:1e:ba:
38:c1:8a:18:7b:a8:ea:2c:79:18:c1:22:4f:21:39:
d5:49:22:ad:79:30:46:a7:61:da:bd:b6:2d:ce:3f:
ee:52:31:38:5e:aa:1e:ca:e7:f0:71:60:6a:f3:31:
8e:9f:57:64:96:f5:51:89:d8:05:b5:03:14:aa:e9:
1f:08:00:cd:ea:ae:2d:8d:fa:59:fe:e0:dd:92:ba:
cb:7a:d8:08:7b:df:4c:5b:cf:d3:b2:61:13:2a:7b:
71:bb:63:f8:6a:c9:3a:af:56:ea:90:2d:99:95:0e:
b7:c9:56:ce:f2:43:ad:98:9d:c3:09:0b:21:90:17:
43:52:75:46:7c:38:a4:80:87:a6:7e:fd:d2:10:38:
b8:b4:6a:7a:33:23:a1:39:b1:40:24:3a:36:e0:da:
26:50:ee:6c:84:62:e9:b7:ca:22:79:bd:22:8f:19:
d2:6f:d7:a7:7c:2a:07:58:09:5c:d2:e6:dd:a2:24:
b0:67:37:b7:c8:a3:11:be:88:2a:19:db:c6:49:ae:
dd:ae:3f:21:a9:d0:eb:df:f8:c9:4c:bd:f4:d4:6f:
e3:be:57:12:bc:f6:02:54:bb:96:f4:41:c3:1b:15:
e3:fd:81:8d:54:89:6c:98:b7:86:b7:43:29:9d:41:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:B3:5B:5D:74:D8:22:AC:99:CA:26:14:F4:C2:14:8F:08:FD:6C
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/mfmzW1102CKsmcomFPTCFI8I_Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.58.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e1:0c:e1:5d:b5:eb:4d:3a:e0:03:e0:41:32:60:0f:89:00:
58:df:ce:1d:ec:5c:c1:ab:86:07:d3:d3:e7:5e:90:fc:20:a9:
56:20:39:dd:29:28:60:4b:52:68:bd:3b:7f:cc:99:cc:6c:42:
2e:5d:23:c6:43:fb:d4:af:6c:51:43:94:28:e9:17:3f:11:77:
a3:eb:63:a9:0e:35:a3:07:32:19:71:2e:b7:bc:4c:01:a1:0b:
9c:a1:3b:a4:f6:28:a9:7f:2f:9c:59:b8:ee:5c:e6:2d:ee:05:
eb:de:88:27:95:7a:45:94:6d:2f:74:99:9c:39:b5:69:11:12:
5a:c0:9d:19:f9:7d:07:f3:e1:0c:3a:4b:01:56:4c:6c:f7:0e:
89:00:96:04:63:db:94:32:f4:c5:ae:9e:86:a7:0d:ca:f7:99:
47:d4:68:a3:b5:50:36:a3:e9:57:9f:3b:df:bf:19:ad:61:69:
30:94:ce:90:83:df:e5:36:91:6d:2f:ca:14:9e:1e:9e:90:04:
8b:7b:ab:a9:f2:55:fd:e3:bb:ed:fb:93:3c:ea:0a:a6:a3:fd:
b7:45:bb:0e:e5:cc:40:2c:30:1a:8b:ea:9c:5d:ad:26:bb:db:
f5:d8:4a:d5:72:6b:46:cc:39:da:11:9a:69:ba:85:1b:01:fa:
91:ef:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:37 2025 by rpki-client