Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MA9xlOe-hCPAuoxegDAkm2O5Ak0.roa
File: MA9xlOe-hCPAuoxegDAkm2O5Ak0.roa (raw, json)
Hash identifier: 7XWIbO9B+B/pqnau+VAIrK7Sw8fz6A4cQEPEnDAswWI=
Subject key identifier: 30:0F:71:94:E7:BE:84:23:C0:BA:8C:5E:80:30:24:9B:63:B9:02:4D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DCF1DD
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MA9xlOe-hCPAuoxegDAkm2O5Ak0.roa
Signing time: Sat 01 Jan 2022 16:01:53 +0000
ROA not before: Sat 01 Jan 2022 16:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60190
IP address blocks: 212.243.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356657117 (0x50dcf1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=300f7194e7be8423c0ba8c5e8030249b63b9024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:70:53:ac:cc:53:48:d2:21:29:0b:64:3f:
ff:67:f6:41:19:7b:e7:37:f7:a2:44:55:f6:d5:07:
ec:0f:cd:23:4b:82:c6:75:0b:c8:74:ad:64:01:be:
9d:3b:0a:bf:2b:48:47:6e:d1:33:21:c9:21:2f:b1:
df:d3:40:c3:c9:b6:b7:9d:c7:4b:4e:61:fe:3a:d5:
2a:ca:61:33:c7:9b:63:63:54:cd:50:c8:b4:5a:83:
c3:c2:ca:75:55:1d:81:02:88:f3:e4:38:59:0d:e3:
49:67:b7:52:32:49:f0:0a:d1:76:70:7a:4d:b5:01:
46:be:ba:bc:a3:39:24:76:1a:c3:c7:78:6d:b0:d7:
91:15:a3:9f:54:31:ea:cb:60:12:6c:c5:87:f7:b2:
5b:cf:e0:ac:39:21:63:c9:75:32:7d:fd:3e:5b:c3:
bb:3e:fe:f8:8a:e0:f9:6b:d8:df:26:75:ae:81:ba:
dc:90:5f:ad:8a:92:b8:b6:19:00:d7:d0:9e:40:cd:
6a:b1:08:05:03:a2:5b:4e:f2:65:d9:3e:e9:29:74:
fc:21:a5:06:68:8e:46:1f:50:8e:b3:61:51:8b:ed:
b3:dc:98:aa:1a:c4:b8:ef:8e:49:97:f0:54:14:96:
90:42:ec:1b:1e:c9:cd:86:a4:f5:b6:82:06:49:03:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0F:71:94:E7:BE:84:23:C0:BA:8C:5E:80:30:24:9B:63:B9:02:4D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MA9xlOe-hCPAuoxegDAkm2O5Ak0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9b:bf:d2:29:47:cb:31:72:b5:29:5e:e3:61:9e:62:eb:f0:
1a:77:34:06:b4:1e:ed:43:b3:7b:cf:24:ed:78:09:67:8e:9d:
1c:35:35:74:27:42:9a:1b:5b:95:cf:6b:86:56:e2:b3:92:d2:
41:51:c4:24:17:f2:d2:da:71:0d:04:d3:77:18:39:ab:d3:79:
a0:f7:b4:a2:da:5e:4b:0d:ca:7a:9d:e1:bc:58:7a:d1:f4:28:
08:0f:95:cb:70:be:ab:6c:13:df:83:09:ce:b3:97:a8:bf:eb:
ec:58:1d:5e:78:8e:cd:cc:8d:6b:77:8c:5e:3d:60:b7:01:b6:
0a:71:2e:c9:b6:61:65:a1:ea:ce:7c:73:7b:96:02:9c:e6:4a:
b7:ec:1b:8e:3f:59:96:16:17:03:de:69:82:2c:bf:2c:70:3e:
2d:8e:9b:ce:c7:57:89:17:95:13:78:15:aa:01:9c:52:39:c8:
01:3a:33:fb:14:58:71:d4:a2:b5:43:ee:af:89:d4:dd:b6:f6:
74:cc:0f:c6:16:93:12:f9:7b:d4:9b:bc:55:99:03:4f:9f:77:
26:c7:fb:6b:a4:65:05:31:78:a5:43:19:30:e9:52:ab:39:a2:
13:a9:fc:ef:06:87:01:a8:92:2f:27:a6:5d:f2:9e:73:d9:19:
e4:a1:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:14:49 2025 by rpki-client