Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/Ma-M-8pVLr1-Dfbv7TRhfPTPIPc.roa
File: Ma-M-8pVLr1-Dfbv7TRhfPTPIPc.roa (raw, json)
Hash identifier: r/Pc/RrHeROAnP8Av7Z0e1XtrSezhz2wKUQOWHegnL0=
Subject key identifier: 31:AF:8C:FB:CA:55:2E:BD:7E:0D:F6:EF:ED:34:61:7C:F4:CF:20:F7
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018A13CD1FDFF34C546529D25CCA0B868CE8
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/Ma-M-8pVLr1-Dfbv7TRhfPTPIPc.roa
Signing time: Sun 20 Aug 2023 16:35:24 +0000
ROA not before: Sun 20 Aug 2023 16:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60666
IP address blocks: 2a12:3fc2:aa40::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:cd:1f:df:f3:4c:54:65:29:d2:5c:ca:0b:86:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Aug 20 16:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31af8cfbca552ebd7e0df6efed34617cf4cf20f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:a7:2b:50:98:60:db:3e:c9:08:c8:3d:da:
d6:04:91:be:7a:75:ec:98:cf:35:c7:b6:91:bc:ab:
c7:b8:4b:c3:ac:02:5f:5d:a8:f2:50:44:3f:54:bb:
7f:1a:02:35:aa:de:e2:20:91:bd:0a:19:50:cd:4c:
9b:d4:e8:dd:26:7f:dc:d9:3d:40:18:a2:a9:63:0f:
dc:6e:c0:43:48:ae:ea:29:e8:ec:dc:ac:13:fb:eb:
1e:a2:c8:13:ab:a3:db:2c:1e:26:e1:cb:f2:06:9a:
72:a5:0d:55:0b:ec:f4:3e:b8:b3:ab:f5:0e:52:d1:
41:23:ca:30:2b:64:33:49:15:d9:83:cf:49:ea:87:
fd:01:07:66:1d:b9:a4:9a:b7:78:6f:1b:66:24:d6:
35:4b:26:f0:74:ed:e4:66:a8:59:5b:70:89:0d:e6:
59:e8:fc:3e:5d:99:0d:2f:9c:4b:99:5c:42:de:00:
fc:77:eb:21:dd:e2:e2:92:5b:11:c9:fe:73:d7:82:
5e:32:ee:f5:e2:c4:1c:60:0c:da:16:97:e6:fc:98:
13:09:2b:ca:b0:2c:6c:59:93:53:33:c5:be:40:23:
ee:e3:c5:41:10:2c:35:be:83:33:89:4d:9f:ba:43:
ba:81:af:b0:53:fe:46:85:df:36:7b:c2:06:25:9b:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:8C:FB:CA:55:2E:BD:7E:0D:F6:EF:ED:34:61:7C:F4:CF:20:F7
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/Ma-M-8pVLr1-Dfbv7TRhfPTPIPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa40::/44
Signature Algorithm: sha256WithRSAEncryption
a4:77:2b:5f:6b:69:66:5b:77:06:1a:96:b6:ca:56:89:06:a2:
ba:b9:e1:c2:e0:8b:8a:26:ba:6e:c0:37:4b:dc:1e:4a:32:0e:
4d:8d:c8:ca:13:06:fd:c9:ae:a9:4e:dc:c8:c7:50:61:46:a6:
4a:e2:64:26:50:f3:6a:17:86:08:6f:b2:6e:42:0a:8b:e7:3c:
e4:a1:0e:7e:d3:c9:61:db:54:d1:e3:3b:fc:12:70:c1:6a:d8:
ba:0e:d5:4f:b7:bc:ac:c6:6e:d2:49:a4:c2:70:ff:a3:c0:7c:
fb:05:79:fa:ba:27:73:22:16:f7:64:dc:e0:a3:2e:30:53:c6:
27:ca:f4:77:ca:62:2a:ef:29:ad:f2:e0:3e:9e:f8:a2:52:70:
ea:85:87:b1:27:15:10:75:89:b1:d6:82:ae:49:67:a3:9c:e0:
1e:c8:82:57:63:89:be:32:45:cc:03:fb:07:57:f1:29:2b:99:
d1:bc:6f:8f:03:03:40:8a:7b:85:46:e1:49:b5:52:9c:73:76:
5e:0a:23:a7:51:8d:1c:98:62:5d:5a:dc:ec:f9:e7:1c:62:0c:
ee:21:68:39:ab:e7:64:83:5f:04:ef:cb:40:ad:0a:ea:5a:42:
81:9e:4a:cc:90:a9:e3:e1:9b:83:52:c0:80:db:fe:f4:f1:cb:
be:ad:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:28 2025 by rpki-client