Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/mfDNxMFLXL6ILaQ96B17PfB3ed0.roa
File: mfDNxMFLXL6ILaQ96B17PfB3ed0.roa (raw, json)
Hash identifier: YBSyNh/vCMF5XssqUWxkpu3liCMAoEjGc33URNtfdjQ=
Subject key identifier: 99:F0:CD:C4:C1:4B:5C:BE:88:2D:A4:3D:E8:1D:7B:3D:F0:77:79:DD
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01857042AAFA476CD706EC9703CF686D5BA7
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/mfDNxMFLXL6ILaQ96B17PfB3ed0.roa
Signing time: Mon 02 Jan 2023 02:14:55 +0000
ROA not before: Mon 02 Jan 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57327
IP address blocks: 2a0a:3507::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:aa:fa:47:6c:d7:06:ec:97:03:cf:68:6d:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 2 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f0cdc4c14b5cbe882da43de81d7b3df07779dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:14:bd:19:ca:64:2c:cd:1c:18:5f:ce:4a:
27:5c:8e:d9:52:94:46:5c:c6:1f:72:b5:42:a5:dd:
b4:25:11:41:88:ee:e4:fc:0b:c1:a7:56:5b:2e:ca:
21:2b:d1:41:dc:1c:9e:dc:cc:a3:a3:ab:7d:e6:2a:
b5:29:3a:78:7f:7a:bd:a2:e6:73:6f:6d:6e:7d:97:
3e:b4:96:0d:bc:8a:77:62:72:c2:8e:31:ed:7e:38:
e3:04:d7:72:86:c7:95:d9:19:83:6f:d2:ef:32:50:
95:b7:21:4a:7d:d7:a8:12:af:6c:1a:17:64:47:f1:
32:35:ff:eb:f9:56:c2:00:f6:1b:f5:e2:6a:41:57:
ab:7b:40:9e:06:09:16:ab:37:f8:86:b4:0b:a9:ae:
b1:e4:63:7f:a0:8c:10:57:a2:be:cb:a6:16:a0:00:
ca:88:11:be:ac:90:48:89:33:a0:8c:94:9d:0e:32:
06:78:b3:57:38:e2:dd:9d:c0:2f:47:25:c3:fa:b7:
16:5a:07:93:88:a0:15:9f:86:4c:3e:13:17:6d:7a:
1b:23:04:ff:73:c4:7e:2a:b7:9a:bc:fe:8d:59:81:
d6:22:75:42:3d:9d:7e:91:7e:5f:20:bd:4f:75:d0:
1e:12:53:37:89:a3:94:56:d1:d1:7f:b5:3f:e8:0d:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:CD:C4:C1:4B:5C:BE:88:2D:A4:3D:E8:1D:7B:3D:F0:77:79:DD
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/mfDNxMFLXL6ILaQ96B17PfB3ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3507::/48
Signature Algorithm: sha256WithRSAEncryption
0c:bd:9c:8e:7e:40:8c:f8:17:05:1d:5b:75:a0:f4:fa:63:34:
b4:f3:fd:8a:2c:d7:4c:7e:76:c0:54:ac:4f:18:74:19:43:dd:
ac:ca:fc:bb:7e:64:83:8f:f7:6a:57:00:71:44:c9:96:1c:75:
2f:0f:64:ef:6b:98:95:a8:83:78:4d:70:9d:c6:ad:be:83:56:
14:29:29:5c:16:e1:84:72:15:fd:34:43:23:dc:f4:49:2e:11:
be:a0:d7:24:be:16:25:af:c3:d2:7d:ea:39:b0:e9:ef:a1:c0:
c1:f9:ce:ab:59:72:d9:64:14:9e:67:74:95:6b:36:f9:10:51:
5b:87:cf:7d:55:af:8b:ea:90:16:20:27:ca:2b:55:75:26:37:
36:b2:37:b7:b6:fe:fc:92:75:99:dd:94:75:21:70:56:2b:f7:
fb:c4:33:ee:2d:32:a2:d8:d1:85:d7:bd:d8:b3:32:64:6f:69:
8d:c6:6f:29:3d:60:97:2e:31:e9:42:ac:e6:51:31:7e:17:a9:
27:d2:93:9f:56:7a:11:cc:1f:83:4b:66:5f:c4:06:c3:95:e5:
88:3e:27:72:96:4c:b2:bc:82:6f:26:10:07:fe:52:76:6f:91:
bf:96:f1:49:de:fa:3c:51:f7:73:4c:1c:24:8f:80:eb:b5:5d:
3a:ab:fb:2b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVwQqr6R2zXBuyXA89obVunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0
NDg4NzgwHhcNMjMwMTAyMDIxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWYwY2RjNGMxNGI1Y2JlODgyZGE0M2RlODFkN2IzZGYwNzc3OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QUvRnKZCzNHBhfzkonXI7ZUpRG
XMYfcrVCpd20JRFBiO7k/AvBp1ZbLsohK9FB3Bye3Myjo6t95iq1KTp4f3q9ouZz
b21ufZc+tJYNvIp3YnLCjjHtfjjjBNdyhseV2RmDb9LvMlCVtyFKfdeoEq9sGhdk
R/EyNf/r+VbCAPYb9eJqQVere0CeBgkWqzf4hrQLqa6x5GN/oIwQV6K+y6YWoADK
iBG+rJBIiTOgjJSdDjIGeLNXOOLdncAvRyXD+rcWWgeTiKAVn4ZMPhMXbXobIwT/
c8R+KreavP6NWYHWInVCPZ1+kX5fIL1PddAeElM3iaOUVtHRf7U/6A372wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJnwzcTBS1y+iC2kPegdez3wd3ndMB8GA1UdIwQY
MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt
YzBiMWFkNDM1Yjk1LzEvbWZETnhNRkxYTDZJTGFROTZCMTdQZkIzZWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1
LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgo1BwAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAMvZyOfkCM+BcFHVt1oPT6YzS08/2KLNdMfnbA
VKxPGHQZQ92syvy7fmSDj/dqVwBxRMmWHHUvD2Tva5iVqIN4TXCdxq2+g1YUKSlc
FuGEchX9NEMj3PRJLhG+oNckvhYlr8PSfeo5sOnvocDB+c6rWXLZZBSeZ3SVazb5
EFFbh899Va+L6pAWICfKK1V1Jjc2sje3tv78knWZ3ZR1IXBWK/f7xDPuLTKi2NGF
173YszJkb2mNxm8pPWCXLjHpQqzmUTF+F6kn0pOfVnoRzB+DS2ZfxAbDleWIPidy
lkyyvIJvJhAH/lJ2b5G/lvFJ3vo8UfdzTBwkj4DrtV06q/sr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:23 2025 by rpki-client