Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Mx_9KQLs2x7mN82dzRWqL_2BVms.roa
File: Mx_9KQLs2x7mN82dzRWqL_2BVms.roa (raw, json)
Hash identifier: +BNjLVWBwI3RfBFFv2iWucGRena8iDqmWD8sF1iZr/Q=
Subject key identifier: 33:1F:FD:29:02:EC:DB:1E:E6:37:CD:9D:CD:15:AA:2F:FD:81:56:6B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018263D9A10D8252E46273AFBEB85278B864
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Mx_9KQLs2x7mN82dzRWqL_2BVms.roa
Signing time: Wed 03 Aug 2022 13:16:23 +0000
ROA not before: Wed 03 Aug 2022 13:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 212.116.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:d9:a1:0d:82:52:e4:62:73:af:be:b8:52:78:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 3 13:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=331ffd2902ecdb1ee637cd9dcd15aa2ffd81566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:ac:4e:97:98:5c:72:ea:e6:a8:b4:5e:27:
10:b3:c8:a6:09:2f:ad:ec:8c:97:b8:68:3d:6b:ba:
ae:ad:6a:fd:f0:4b:d6:20:11:af:56:6c:12:6b:83:
7d:4f:a3:da:72:f9:c7:27:38:00:df:39:f3:33:f0:
2f:01:72:e7:26:78:62:f4:09:df:d4:28:5e:22:1f:
d5:3b:ca:a5:92:bf:2c:79:55:88:4b:05:a8:20:8a:
7f:2d:71:21:85:aa:e7:e4:8f:1f:9f:ad:ae:68:da:
ad:9c:cd:c2:47:6b:be:7a:27:0a:56:f0:95:eb:b1:
62:d6:95:65:6f:91:3d:16:52:7e:3b:b4:46:c2:21:
55:ad:fb:62:1b:be:82:72:56:fd:fd:14:de:d0:f3:
28:c2:77:14:c6:e7:51:35:d3:e1:6e:e5:04:23:1e:
be:ca:2f:2a:e7:cd:0b:7b:99:6f:1d:d4:59:c2:ce:
cf:74:cf:d2:5d:31:52:23:f5:c8:e2:da:fb:f7:3c:
ce:04:b4:dc:68:a2:ff:5c:55:19:4c:bb:50:cd:d7:
d9:04:de:38:a6:1a:44:f2:97:99:6c:aa:b4:90:60:
5c:fa:75:4a:0f:e4:05:d8:04:8b:5e:2c:42:cf:2d:
43:99:c5:06:f0:1d:23:3c:08:3b:9a:96:e2:8d:b7:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:FD:29:02:EC:DB:1E:E6:37:CD:9D:CD:15:AA:2F:FD:81:56:6B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Mx_9KQLs2x7mN82dzRWqL_2BVms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
86:44:d8:c4:29:34:db:b6:e5:3a:c0:98:dc:9e:48:3a:0f:7a:
b9:5d:7c:28:62:4c:d6:b7:58:31:fb:5b:c0:e0:16:8b:be:15:
98:90:2a:14:9e:c9:b1:9d:8c:39:45:e9:ae:4c:17:81:d8:d9:
d0:62:11:7f:ce:58:9b:81:27:81:7d:a3:0e:f8:5f:1d:43:0a:
5f:39:74:db:97:51:93:72:91:ee:13:16:b5:47:3a:c9:73:31:
b9:8c:50:a2:01:67:50:e3:06:90:69:a3:21:ed:ab:5a:cc:0b:
e8:76:35:b1:22:44:99:85:f5:99:0a:f2:71:47:3a:77:0a:d9:
75:f7:be:f7:4b:e1:00:b9:a9:e7:1c:3e:18:61:0b:c8:48:1d:
f7:11:b1:e0:38:de:66:8d:4d:9f:36:10:7f:bf:5d:34:09:f3:
86:5e:02:e5:52:0a:16:c0:b0:72:f2:9d:36:a6:8b:4f:ea:1c:
a9:c7:31:0d:25:92:00:7a:de:0f:f7:b7:3b:d7:58:94:8c:e1:
28:9d:ed:f6:31:a4:6c:96:67:9d:cb:ae:43:c2:1e:31:f7:1b:
c1:b3:7e:70:ce:03:9a:ab:d2:00:84:01:26:e3:cc:62:fa:75:
15:c1:52:cd:1a:91:a2:96:bf:e4:4c:bd:9c:da:f5:24:96:d9:
8f:7e:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org