Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/MZkHrEBrXTww99qr1IyGGaI_Ffk.roa
File: MZkHrEBrXTww99qr1IyGGaI_Ffk.roa (raw, json)
Hash identifier: /FSnM1LV4jKYiwhHeF04snf/WPatG5mWKP7NE1R9zQY=
Subject key identifier: 31:99:07:AC:40:6B:5D:3C:30:F7:DA:AB:D4:8C:86:19:A2:3F:15:F9
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 07C07C2B
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/MZkHrEBrXTww99qr1IyGGaI_Ffk.roa
Signing time: Sat 01 Jan 2022 06:55:32 +0000
ROA not before: Sat 01 Jan 2022 06:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208562
IP address blocks: 2001:678:ad8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130055211 (0x7c07c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Jan 1 06:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=319907ac406b5d3c30f7daabd48c8619a23f15f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:2e:04:5a:e1:6c:ff:48:7f:29:cf:7c:73:
04:6b:c9:e1:8d:1c:0a:a4:76:4e:2a:33:08:e5:be:
91:48:cd:76:73:05:4d:7a:9b:5d:bd:57:e8:e9:09:
cc:38:2a:9d:07:78:c5:ef:26:24:93:50:07:fb:b5:
ce:41:9d:b8:26:b6:76:76:98:f0:5d:13:9a:a6:3e:
6c:64:3f:4f:a6:3d:e9:8c:0f:47:a7:08:92:c2:68:
57:c8:91:f2:1d:98:8e:2c:f0:6e:49:e2:c3:8a:e1:
e7:9b:7d:d9:63:ca:b1:25:cd:b0:2a:f8:db:1d:89:
71:3f:66:c6:fa:54:51:40:ba:ad:dd:67:a1:34:3f:
1b:e2:22:da:53:56:72:2f:30:12:d9:6d:64:04:6a:
ac:fc:42:9e:54:50:5f:9b:a8:b2:08:14:71:41:3a:
a4:b0:32:d5:10:57:10:02:94:21:b6:60:49:9d:3e:
15:46:96:e7:35:ce:35:ad:da:9b:98:2b:b7:53:5b:
76:50:e8:cb:34:21:b4:0a:f8:83:a9:02:33:2d:73:
78:a0:05:92:3f:01:73:f2:73:12:8c:b6:7c:ef:d8:
67:d6:2a:dd:b4:be:b1:8b:68:b9:6c:78:3f:4a:0d:
a7:fd:ad:56:bb:96:ac:f4:58:b9:cb:06:2b:4e:e5:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:07:AC:40:6B:5D:3C:30:F7:DA:AB:D4:8C:86:19:A2:3F:15:F9
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/MZkHrEBrXTww99qr1IyGGaI_Ffk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ad8::/48
Signature Algorithm: sha256WithRSAEncryption
a0:f1:23:73:bb:26:79:b7:97:99:06:89:ac:62:e1:4c:a7:a9:
74:4a:d7:f8:7b:ff:10:ca:da:53:20:d8:cc:7e:24:85:9b:20:
6b:e9:2b:7f:07:c0:6f:31:20:12:e8:44:ff:f8:a2:85:6c:95:
27:c4:46:09:24:fd:3d:0e:97:ca:f0:95:7b:da:45:97:a1:b6:
fe:5c:b1:55:21:ce:50:c7:39:5f:74:1d:1c:82:1c:91:23:3b:
bc:7c:fa:e8:50:94:8b:38:18:4e:8a:7a:60:ff:e6:f4:72:1e:
87:b7:c9:8a:e6:5e:bf:62:9b:4c:b7:34:16:5e:86:c6:8e:c5:
d1:7d:b7:0b:12:70:98:8e:28:e0:eb:a0:9f:82:83:3f:10:f4:
88:eb:5e:4f:79:19:82:a3:94:fe:ed:8d:bc:13:02:a5:48:ea:
0c:ce:cd:43:47:ec:18:80:fd:91:17:b3:b1:46:e6:9e:c8:22:
ec:ba:39:62:ba:bd:ac:8d:39:2b:23:8f:ef:5a:bc:ad:07:80:
9e:9f:20:1a:58:58:ab:62:d6:a1:07:05:d2:39:a2:37:31:88:
93:6f:23:50:50:bc:ce:8e:64:d8:38:45:79:6d:e8:cb:f1:5f:
2e:e3:ff:a5:76:f7:25:7b:ee:38:34:82:79:33:a5:e5:45:b5:
4d:a3:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:13:40 2025 by rpki-client