Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_NA9yd6kitfk-28Uml_c_LM7f-k.roa
File: _NA9yd6kitfk-28Uml_c_LM7f-k.roa (raw, json)
Hash identifier: s1pg+obyB2NCntwA028ubzp5JCpZ5Kt5bPGs2BMUpBI=
Subject key identifier: FC:D0:3D:C9:DE:A4:8A:D7:E4:FB:6F:14:9A:5F:DC:FC:B3:3B:7F:E9
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018AD85A4B17952397570EF6D4F2BCA46E76
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_NA9yd6kitfk-28Uml_c_LM7f-k.roa
Signing time: Wed 27 Sep 2023 20:35:10 +0000
ROA not before: Wed 27 Sep 2023 20:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61335
IP address blocks: 212.116.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:5a:4b:17:95:23:97:57:0e:f6:d4:f2:bc:a4:6e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 27 20:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd03dc9dea48ad7e4fb6f149a5fdcfcb33b7fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:f2:8c:0d:94:fc:4d:63:4e:0e:71:9a:0d:
9b:0d:50:51:e2:ac:5b:15:01:db:38:f6:63:9f:20:
e7:f0:bd:81:f4:f3:71:14:ff:fd:64:ce:e6:04:79:
5f:58:1c:be:c2:cb:8b:68:3a:20:ac:20:7c:f0:96:
20:36:98:b1:a1:d7:9d:d4:5d:f5:6d:87:95:cc:7c:
a9:1a:de:22:b8:64:ed:9c:35:ef:db:42:4c:0c:48:
1a:d1:f3:e7:39:26:ef:c7:5c:13:55:e5:06:ef:bc:
24:cf:ab:a1:51:5e:0a:9a:b9:8d:84:e6:45:09:9b:
4a:49:2d:20:5a:9b:2f:65:b1:6d:c9:f4:67:34:ad:
39:23:83:26:3a:b2:74:e8:02:6a:78:17:3f:a6:eb:
16:a2:2b:be:21:cc:41:58:02:de:e8:50:0d:16:9d:
94:ff:ab:f5:11:7c:e0:53:18:f2:69:f6:00:8b:1f:
6b:80:e5:19:f9:cc:0e:44:16:67:5a:dc:fc:d5:8a:
b8:e5:18:ee:b6:da:63:c2:7c:5e:ad:34:dc:0a:47:
7c:f0:2e:ea:fb:f4:87:1c:37:13:c9:60:95:4a:e1:
f5:25:ac:d5:b0:0c:d0:32:79:62:5b:f7:5c:22:9c:
99:c5:13:a9:d1:80:4a:da:0d:9e:5b:69:c3:59:14:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:3D:C9:DE:A4:8A:D7:E4:FB:6F:14:9A:5F:DC:FC:B3:3B:7F:E9
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_NA9yd6kitfk-28Uml_c_LM7f-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7e:8a:7d:da:ea:7b:d2:0c:b9:a9:1c:46:bd:71:42:d1:3c:
9c:67:bd:f9:71:6a:d0:15:e0:35:e7:7c:f6:25:06:f3:21:ef:
2f:e1:35:a7:75:14:ed:f1:98:b9:11:16:ea:64:b9:4b:e3:ce:
87:d0:ba:8f:f3:0e:b7:0a:ad:04:b7:e9:f0:7e:e1:6c:80:66:
b8:8f:c0:8f:4a:34:83:73:ab:0c:7d:bd:94:9d:2c:f6:62:87:
8b:e7:d1:56:29:24:6a:0b:29:f4:60:0e:c5:f7:6d:7e:07:fe:
30:0d:e6:1d:02:8e:39:4c:60:4a:73:67:e4:59:b3:99:93:20:
e7:67:7a:57:7c:88:1f:c8:85:9b:ab:42:fa:1b:88:fe:1c:9b:
50:40:1f:0f:2e:72:76:a3:1d:db:50:86:9b:43:d2:f7:d4:e9:
97:64:f4:0e:9a:a9:d3:0e:69:96:7a:29:3b:26:63:5a:f2:c9:
8d:f2:03:f9:ee:0d:9e:91:f2:4f:af:15:5b:cf:a9:ad:ba:14:
ab:95:2d:84:70:c6:5d:2b:59:ab:6f:03:67:56:38:b2:00:b8:
cd:a1:07:55:e7:a4:b8:e6:0f:d3:5c:8b:4d:3b:b0:26:06:af:
dc:40:6a:81:1e:ee:4e:48:63:ac:65:f6:4e:52:a8:c8:da:26:
1a:b2:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:13 2025 by rpki-client