Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa
File: MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa (raw, json)
Hash identifier: kxo1YN0w3Ql9FNHt58qA0P9zPaLUEyAB3Ir4fDbJ3vw=
Subject key identifier: 30:55:F0:C6:D9:64:4F:B8:49:5A:02:7A:F0:FA:32:E9:A0:21:12:3C
Certificate issuer: /CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Certificate serial: 010E2582
Authority key identifier: 7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa
Signing time: Sat 01 Jan 2022 01:03:03 +0000
ROA not before: Sat 01 Jan 2022 01:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 94.247.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17704322 (0x10e2582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Validity
Not Before: Jan 1 01:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3055f0c6d9644fb8495a027af0fa32e9a021123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:0c:1c:5c:59:2d:bd:36:e5:65:2d:7e:1d:
79:8f:bf:e3:ae:c8:1d:a0:67:58:c3:f7:9c:b7:d1:
3c:50:49:3f:f3:13:09:aa:97:3d:a8:f5:2f:7a:c8:
d7:1d:65:fa:94:2e:96:cb:8d:21:e1:05:5c:6c:7f:
9d:1f:df:97:73:a1:59:db:d0:dd:6f:af:74:8d:66:
bd:6b:a0:82:7c:f3:53:9d:da:92:2a:56:a0:df:1c:
02:32:3b:94:e4:3a:c1:56:df:53:7c:92:17:97:4c:
0a:01:3f:b7:8f:50:80:80:52:ee:41:aa:71:47:58:
79:8e:37:fa:e3:24:eb:4d:ab:9b:ed:b2:1b:ea:34:
51:fc:dd:e0:fc:3d:40:37:29:52:f1:79:6e:0e:1e:
8a:65:4b:4b:70:f6:09:a2:c1:1e:22:03:90:d3:e3:
f8:83:86:9c:7b:5a:b8:33:51:2c:f5:38:ab:eb:1e:
c5:29:30:43:e0:de:36:b3:2e:2e:85:41:66:c9:73:
a1:40:35:79:02:8c:3e:63:9d:eb:73:cb:5f:2d:1c:
9e:c2:22:17:03:4f:68:fc:54:2c:1e:99:cf:cf:70:
ce:a6:28:0c:76:c7:16:30:44:6f:aa:be:2d:c4:65:
66:ae:c1:7c:5d:ca:0a:2f:19:9c:3f:75:5c:ff:c1:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:55:F0:C6:D9:64:4F:B8:49:5A:02:7A:F0:FA:32:E9:A0:21:12:3C
X509v3 Authority Key Identifier:
keyid:7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/MFXwxtlkT7hJWgJ68Poy6aAhEjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9c:e2:43:f0:6e:01:e7:9f:4c:75:81:51:b4:50:75:8f:7f:
ef:74:b9:33:28:ee:06:ff:f7:a7:5e:cb:f0:54:19:1b:95:38:
c2:da:5c:82:d5:90:a0:75:a7:83:fb:ec:75:28:d6:67:50:9b:
29:24:98:ac:05:aa:09:5d:49:da:b4:73:cc:59:2a:83:ab:b0:
bd:77:28:d5:c5:40:05:b5:0d:88:10:e9:51:5f:91:35:8d:d8:
ce:6e:db:58:36:9f:74:e4:76:3b:42:a8:4b:c4:9a:42:dd:57:
1e:f5:c7:40:80:7a:84:af:56:a6:71:38:47:a9:b5:fd:7e:bb:
be:bc:4d:f3:fd:ec:b8:21:c4:41:59:e6:d3:74:6f:5f:d5:c3:
d7:d5:04:57:98:d1:31:0c:63:3e:34:f6:fd:72:43:38:56:78:
f8:4e:06:7d:27:3f:e0:93:ff:c9:60:91:a4:0e:55:30:44:21:
d6:ce:21:5a:87:d6:ad:14:25:2c:85:ee:9c:fc:af:85:cb:29:
f1:c6:44:f9:e5:6b:7d:06:8d:1b:fa:0a:05:55:8c:2a:eb:a4:
ed:18:01:1b:d1:58:f1:6f:4f:8a:3b:28:1c:92:24:76:f5:6d:
e8:66:1d:11:0a:e7:75:0a:4d:62:0a:78:0f:9f:e0:be:e9:cf:
ad:40:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:53 2023 by rpki-client on console-ams.rpki-client.org