Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/MiwG_6w9TSLQXIyo6U9ppWEqb0o.roa
File: MiwG_6w9TSLQXIyo6U9ppWEqb0o.roa (raw, json)
Hash identifier: McuYfPyXhWS7s9Rxt8oV9ROJ9O5GmwZshPGKDcjQtxE=
Subject key identifier: 32:2C:06:FF:AC:3D:4D:22:D0:5C:8C:A8:E9:4F:69:A5:61:2A:6F:4A
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0513CBD8
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/MiwG_6w9TSLQXIyo6U9ppWEqb0o.roa
Signing time: Thu 19 May 2022 08:01:18 +0000
ROA not before: Thu 19 May 2022 08:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18046
IP address blocks: 212.30.40.0/22 maxlen: 22
212.30.52.0/24 maxlen: 24
212.30.55.0/24 maxlen: 24
212.30.54.0/24 maxlen: 24
212.30.53.0/24 maxlen: 24
212.30.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85183448 (0x513cbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: May 19 08:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=322c06ffac3d4d22d05c8ca8e94f69a5612a6f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:69:67:99:71:b0:21:c9:09:b9:0f:ee:bd:
fd:2d:24:a5:62:1e:63:ad:4a:c0:9c:57:f1:b1:39:
35:10:c7:a0:ab:d7:09:7d:05:03:cd:7e:40:c1:91:
1f:15:1c:60:35:7b:82:ce:59:75:ac:1b:0d:cf:7c:
ee:4e:75:24:83:04:5c:b8:d5:d0:14:d5:5c:93:4f:
c9:b9:2f:d1:28:3f:81:97:f3:3d:87:87:be:b1:70:
10:36:bb:9b:11:e9:5b:6c:91:85:cb:31:c4:62:6c:
a5:a3:44:30:b7:b0:7c:1d:a6:ee:3d:dd:15:71:26:
9a:96:17:ae:8e:98:3a:fe:b1:d0:c5:88:53:9d:fb:
18:d2:3c:96:6f:60:3c:c0:22:73:a5:8d:fc:85:05:
dd:43:6c:c1:e9:1c:b3:67:87:76:f0:54:89:79:82:
36:17:22:5b:11:14:fc:4c:80:3d:c2:36:41:29:54:
37:c3:60:48:5e:e0:b4:18:d9:82:8a:de:c5:45:f2:
f8:bb:91:7e:0c:1e:e6:c7:7a:72:70:b5:2d:10:94:
84:c4:b7:11:99:c3:08:01:f5:0f:20:d5:ff:70:6b:
85:fc:88:b8:96:8a:90:87:05:01:69:67:cc:58:e8:
d3:c0:f5:a2:82:3f:42:58:f7:ed:6e:0b:c5:d1:6e:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:06:FF:AC:3D:4D:22:D0:5C:8C:A8:E9:4F:69:A5:61:2A:6F:4A
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/MiwG_6w9TSLQXIyo6U9ppWEqb0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.40.0/22
212.30.52.0-212.30.59.255
Signature Algorithm: sha256WithRSAEncryption
0a:3f:35:cc:5e:a9:04:c0:13:91:d3:e8:2f:da:c3:ec:a8:21:
16:85:56:b3:d3:71:bc:18:fb:a7:3d:76:f7:7a:74:e2:43:d1:
42:c7:a4:c2:91:bc:24:31:c6:e1:fc:f6:6c:4d:ff:9a:91:2d:
7e:26:71:c0:db:d6:72:4c:fd:26:15:9c:a9:1c:2c:24:87:53:
7c:5f:a1:a3:f3:20:f6:6b:ab:59:39:9d:88:ee:17:1b:cd:f8:
ac:a9:c3:0f:3c:3d:9c:0e:a7:71:df:96:5b:a6:0f:c3:a4:df:
df:ad:89:26:16:06:10:c8:82:8e:6c:e5:89:d2:ee:05:46:6c:
87:63:8d:d3:cb:0a:c8:00:00:1f:65:3a:59:ac:cd:b7:85:f6:
0a:c1:af:79:12:17:28:19:16:a4:2d:81:c4:26:ac:65:60:f4:
c2:14:05:23:9a:2d:ca:6a:4a:c0:b2:f1:93:33:c2:c6:33:f8:
78:a1:cd:64:1f:97:ba:17:c3:23:db:bf:87:34:91:17:f8:16:
21:78:58:b3:39:6a:42:8c:ab:96:18:a1:cc:bb:47:8a:be:09:
54:ad:29:4a:48:43:90:79:fd:d3:10:db:23:60:24:d6:ba:00:
41:8d:6c:7e:f6:f5:71:f8:51:7f:42:f3:40:3f:73:3a:e4:0e:
95:56:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org