Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MFC-mkY92zXvWlImq324fVMG94s.roa
File: MFC-mkY92zXvWlImq324fVMG94s.roa (raw, json)
Hash identifier: ekUluDPQH5eNZ31XSg9x8mhlQUiknkA6egYphgLGNwk=
Subject key identifier: 30:50:BE:9A:46:3D:DB:35:EF:5A:52:26:AB:7D:B8:7D:53:06:F7:8B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182F3BCF2C3764DEAFF55492F8BCA9A0ADF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MFC-mkY92zXvWlImq324fVMG94s.roa
Signing time: Wed 31 Aug 2022 11:50:22 +0000
ROA not before: Wed 31 Aug 2022 11:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 88.209.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:bc:f2:c3:76:4d:ea:ff:55:49:2f:8b:ca:9a:0a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 31 11:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3050be9a463ddb35ef5a5226ab7db87d5306f78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fc:e8:c5:c8:76:3f:24:52:86:bd:e0:4b:7a:
d4:b0:1d:fa:40:95:48:a0:60:5b:b3:74:68:3d:e7:
3a:84:43:d4:90:4b:c4:a7:e6:ba:79:0a:2c:01:0a:
9b:05:e0:07:c4:bf:d5:35:7c:b2:5a:9f:3c:8a:16:
85:90:fe:63:82:a7:69:c2:a9:cd:91:9f:56:74:53:
62:24:ad:fa:ef:be:0f:1b:6c:d4:d3:6e:a1:da:04:
f7:0f:7a:c4:91:c0:d4:07:8f:bf:3e:31:06:0d:fb:
4b:01:5e:32:b6:bc:23:dc:72:b9:9a:ac:28:ec:d2:
4b:8d:7e:7f:19:7a:11:d8:b4:05:40:44:0e:d2:cf:
20:38:05:aa:62:28:dc:80:1b:05:92:de:98:e4:a4:
2b:99:7d:cd:f3:6e:f2:e0:df:3a:db:20:8f:c0:1a:
15:03:38:df:f6:1e:67:f8:e7:10:43:b0:6b:d1:98:
41:28:33:52:86:f7:85:b5:79:44:c9:62:1b:b0:3e:
58:fd:dd:8c:cf:da:31:33:83:cf:2d:34:86:6e:09:
49:14:8c:cd:d3:e1:12:a3:47:50:1e:df:9b:c9:f6:
b1:c9:89:c7:57:4f:92:13:d3:b9:c2:e3:69:89:da:
15:66:d0:38:76:7b:84:9c:29:4a:98:84:0a:e3:35:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:BE:9A:46:3D:DB:35:EF:5A:52:26:AB:7D:B8:7D:53:06:F7:8B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MFC-mkY92zXvWlImq324fVMG94s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.249.0/24
Signature Algorithm: sha256WithRSAEncryption
23:60:f6:59:e6:2c:a7:39:03:b9:66:3e:ec:09:02:e3:5b:f2:
13:84:f2:25:6e:a3:54:a5:82:af:d2:a3:13:27:4a:ca:6f:d0:
e5:5d:b0:a1:74:09:3e:b3:12:84:1b:9a:46:2f:0b:ee:e4:e5:
11:d4:f1:df:61:42:12:fd:54:06:b3:36:92:df:70:57:33:f1:
84:7b:7f:63:b2:6e:85:cf:77:0c:70:06:be:b5:2e:33:52:74:
fb:0c:a9:8a:ab:11:7d:cc:fd:12:f7:35:08:43:71:54:26:b3:
72:b7:e5:02:a4:15:b2:f3:30:13:76:4a:7e:65:3b:97:26:74:
2b:3c:e0:31:63:1d:e0:a8:1f:cd:b0:ae:34:51:99:cf:89:b0:
a3:fe:38:ea:c9:91:af:62:bb:0c:52:ee:83:e9:a1:06:58:ad:
c6:d6:20:4a:dc:c1:ca:6d:6b:7b:2a:bc:51:67:14:47:e3:00:
92:ca:fa:eb:04:49:ae:af:5a:2e:30:cd:32:52:6d:fc:4a:a4:
27:a6:e6:2d:8d:97:12:83:68:74:e8:8c:c9:f1:40:bb:e8:19:
48:82:84:9f:bb:06:dc:ea:08:a5:23:da:40:79:93:85:36:b2:
e7:40:d8:2f:5e:03:f8:6f:8a:af:bf:0a:43:a7:51:66:f0:26:
cd:40:7f:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLzvPLDdk3q/1VJL4vKmgrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwODMxMTE1MDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDUwYmU5YTQ2M2RkYjM1ZWY1YTUyMjZhYjdkYjg3ZDUzMDZmNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Pzoxch2PyRShr3gS3rUsB36QJVI
oGBbs3RoPec6hEPUkEvEp+a6eQosAQqbBeAHxL/VNXyyWp88ihaFkP5jgqdpwqnN
kZ9WdFNiJK36774PG2zU026h2gT3D3rEkcDUB4+/PjEGDftLAV4ytrwj3HK5mqwo
7NJLjX5/GXoR2LQFQEQO0s8gOAWqYijcgBsFkt6Y5KQrmX3N827y4N862yCPwBoV
Azjf9h5n+OcQQ7Br0ZhBKDNShveFtXlEyWIbsD5Y/d2Mz9oxM4PPLTSGbglJFIzN
0+ESo0dQHt+byfaxyYnHV0+SE9O5wuNpidoVZtA4dnuEnClKmIQK4zX5vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDBQvppGPds171pSJqt9uH1TBveLMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvTUZDLW1rWTkyelh2V2xJbXEzMjRmVk1HOTRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH5MA0G
CSqGSIb3DQEBCwUAA4IBAQAjYPZZ5iynOQO5Zj7sCQLjW/IThPIlbqNUpYKv0qMT
J0rKb9DlXbChdAk+sxKEG5pGLwvu5OUR1PHfYUIS/VQGszaS33BXM/GEe39jsm6F
z3cMcAa+tS4zUnT7DKmKqxF9zP0S9zUIQ3FUJrNyt+UCpBWy8zATdkp+ZTuXJnQr
POAxYx3gqB/NsK40UZnPibCj/jjqyZGvYrsMUu6D6aEGWK3G1iBK3MHKbWt7KrxR
ZxRH4wCSyvrrBEmur1ouMM0yUm38SqQnpuYtjZcSg2h06IzJ8UC76BlIgoSfuwbc
6gilI9pAeZOFNrLnQNgvXgP4b4qvvwpDp1Fm8CbNQH+N
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org