Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/mslFDX_xvWEBGDD3F7wlSLSQBQY.roa
File: mslFDX_xvWEBGDD3F7wlSLSQBQY.roa (raw, json)
Hash identifier: CvuUE4BzsYanX9qc8eCcMg7yn1uqEqwaHJue7C3QgEw=
Subject key identifier: 9A:C9:45:0D:7F:F1:BD:61:01:18:30:F7:17:BC:25:48:B4:90:05:06
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 0186AB7DE77351824379AB994ADDFAD6B9FF
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/mslFDX_xvWEBGDD3F7wlSLSQBQY.roa
Signing time: Sat 04 Mar 2023 07:20:00 +0000
ROA not before: Sat 04 Mar 2023 07:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60939
IP address blocks: 2a13:5880::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:7d:e7:73:51:82:43:79:ab:99:4a:dd:fa:d6:b9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Mar 4 07:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac9450d7ff1bd61011830f717bc2548b4900506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:7c:fa:24:5f:e7:f4:ca:67:f4:6e:84:4a:
81:72:ae:e1:32:90:57:47:4e:2c:40:19:b7:ad:00:
9c:36:6c:6e:8b:80:71:e4:5d:6b:e4:d6:64:59:64:
7a:df:4a:9a:2b:82:27:78:aa:2e:c9:c0:30:01:ca:
92:cc:89:ae:03:bf:58:ce:de:69:6e:7f:31:3e:56:
44:52:7b:9b:c1:2b:7c:b4:f8:cc:6d:a9:53:d2:01:
98:03:8e:73:2c:f3:59:9a:e5:97:97:1e:98:77:ee:
af:7f:41:b4:67:a5:f9:92:38:1e:85:d5:c9:7c:2e:
72:d6:35:87:e6:ef:d6:cd:15:4f:19:68:47:eb:e2:
0c:47:54:51:ca:85:78:ff:03:6c:4e:ca:0c:07:5a:
4b:20:05:d9:6d:71:32:b1:9c:e5:57:57:f1:75:b8:
11:9c:af:4a:f0:fa:e1:20:8f:39:83:d4:e4:9e:9b:
cb:df:22:61:9b:4a:25:69:46:5c:57:54:a1:67:3a:
2c:58:0a:cd:90:2f:63:67:e1:20:b7:e4:8a:fb:14:
73:31:1b:0e:66:c7:ad:c8:7b:0a:e2:e9:9e:26:59:
4f:2b:9f:b7:da:42:2e:38:83:34:fa:ba:df:49:3c:
bb:4a:25:c0:84:7c:1e:8b:85:45:9a:c3:42:cd:94:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:45:0D:7F:F1:BD:61:01:18:30:F7:17:BC:25:48:B4:90:05:06
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/mslFDX_xvWEBGDD3F7wlSLSQBQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5880::/29
Signature Algorithm: sha256WithRSAEncryption
7b:f1:bf:af:a0:83:ad:60:e3:8e:70:ce:9f:78:8f:b3:f8:80:
b6:94:78:a1:fc:73:17:2d:b3:9a:f6:02:fd:2d:e7:64:8c:80:
25:44:8b:31:e2:15:d8:99:f5:f0:a4:ae:d1:87:d2:b6:f8:3b:
56:9e:06:f6:a9:59:41:44:63:59:d1:f4:f6:f1:79:28:37:2a:
8b:10:ee:cd:9e:dd:79:af:e7:7e:a9:3c:7e:7d:2a:51:cc:79:
fd:e1:64:7d:d0:81:55:8c:d7:d4:7c:25:f7:d0:6e:38:7e:d4:
7b:9d:a2:72:58:96:a5:fa:5c:19:9a:3c:1a:15:13:ea:0d:69:
0b:15:09:a0:af:1a:99:4f:29:b7:a6:5f:50:a4:d3:14:63:43:
50:ec:4e:a0:69:2c:8b:65:11:16:56:08:7e:c6:0a:e7:e1:57:
e1:93:26:36:e2:a2:bf:9c:b2:0b:1e:75:5c:90:5a:01:5b:f2:
99:64:0f:3a:44:76:da:1b:36:0e:c2:6a:de:29:20:90:24:dd:
97:1d:d2:73:3b:18:bb:d6:f3:a3:03:f1:4c:5b:ff:e4:fc:93:
cb:55:d1:41:25:f9:90:d9:7d:35:3f:7a:25:5e:ac:e5:4c:c8:
bf:d1:85:76:b0:19:d8:a8:21:97:d6:a2:68:84:e7:00:97:99:
7a:6c:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:57 2025 by rpki-client