Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/mMnw0ckCB6axvxZuZitiNEBWOZk.roa
File: mMnw0ckCB6axvxZuZitiNEBWOZk.roa (raw, json)
Hash identifier: kB5r21HXd5KkKwmLvC2e2lRocIOXMoPSMl8iamXpKGw=
Subject key identifier: 98:C9:F0:D1:C9:02:07:A6:B1:BF:16:6E:66:2B:62:34:40:56:39:99
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0460D033
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/mMnw0ckCB6axvxZuZitiNEBWOZk.roa
Signing time: Sun 03 Apr 2022 00:55:10 +0000
ROA not before: Sun 03 Apr 2022 00:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 2a0f:7880:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73453619 (0x460d033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 3 00:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98c9f0d1c90207a6b1bf166e662b623440563999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:0b:55:87:2c:23:ad:9f:9f:15:72:63:5e:
b9:4f:d4:47:f0:d0:b7:d5:40:ce:17:66:5f:56:0e:
bb:9f:7c:37:e3:d1:59:a2:13:48:00:5e:c1:69:c1:
9c:71:82:7b:2d:c6:23:2e:c0:41:35:72:2d:54:01:
1d:c3:4a:d7:b6:67:b7:79:d5:02:52:bb:9c:68:98:
f5:e6:31:8e:30:aa:f8:f7:75:03:5b:45:e3:2f:50:
4f:cc:92:1a:82:41:e2:ea:e5:16:29:ec:3a:a3:6c:
e5:f2:9d:63:70:1a:27:c3:3c:d5:24:17:8d:d5:a6:
30:ce:1d:be:c4:81:7a:0e:a8:71:27:ec:b4:c7:7d:
ee:4d:29:9f:6a:a1:ae:4c:cc:4c:c7:22:1a:20:5e:
f2:28:a3:c7:6f:f7:f1:8f:4c:6f:3b:99:a8:06:e3:
e8:7c:22:0e:2f:0a:88:40:73:e0:04:16:5b:c5:d4:
12:d6:0f:64:84:81:95:5b:c3:fe:87:50:9b:bf:43:
c6:f2:19:0c:42:ec:e2:10:84:b3:23:e8:41:64:0c:
10:9b:0a:69:92:3c:ac:cd:86:a0:1a:25:38:d5:0d:
20:48:f2:74:cd:03:14:71:71:f6:55:d1:f7:5a:2c:
8b:1c:ef:d5:51:20:8c:c4:5e:2f:fa:92:df:0a:e1:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C9:F0:D1:C9:02:07:A6:B1:BF:16:6E:66:2B:62:34:40:56:39:99
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/mMnw0ckCB6axvxZuZitiNEBWOZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:100::/40
Signature Algorithm: sha256WithRSAEncryption
73:36:00:2a:49:d7:81:76:66:5f:84:6b:48:70:f8:55:3a:e1:
65:16:aa:db:b9:72:88:84:6d:74:8f:44:76:e3:28:d2:67:70:
1b:7c:fd:b9:0a:76:cd:87:a1:5f:36:f4:9e:c3:48:d6:18:2c:
6d:21:78:65:52:65:0a:02:d6:21:67:03:71:3e:ec:d1:46:b5:
28:33:ee:15:c2:ae:d2:60:7f:72:3f:40:44:b0:49:d3:7a:cc:
32:12:5a:a8:c6:bd:79:39:15:bc:a7:53:8d:fa:59:74:c4:04:
58:95:49:51:fd:0d:33:a2:4e:89:4c:7e:df:f0:fa:5e:98:90:
36:05:b5:0d:0e:2c:04:c8:14:6f:db:b9:2e:ad:b2:86:91:ec:
29:8c:62:26:41:ae:b2:68:5c:35:7f:9e:f4:f4:8f:d3:47:34:
29:fd:94:89:1a:d0:f8:02:6a:6a:90:f5:a8:ca:8a:21:6c:04:
e8:bd:2f:49:99:6b:a1:8c:5c:5b:64:3a:28:45:58:17:ce:55:
20:42:f6:b5:e7:c9:02:c6:41:be:56:a2:28:60:4e:97:27:c4:
0f:be:20:93:02:ff:ea:90:87:0e:7b:e7:97:14:b4:1f:d8:12:
a6:ad:34:fc:76:48:34:3a:56:db:80:a2:25:0d:13:bb:98:03:
7b:39:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:12 2025 by rpki-client