Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bmYRQwKIrJIgqnhabRcd4AvdWjU.roa
File: bmYRQwKIrJIgqnhabRcd4AvdWjU.roa (raw, json)
Hash identifier: cOCxOc55Lmgqx9e3vrCENKxvjP6T2KACR4WWOc7ULes=
Subject key identifier: 6E:66:11:43:02:88:AC:92:20:AA:78:5A:6D:17:1D:E0:0B:DD:5A:35
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0182B0B607B1E27CE48A6DCFD51EF4AD8A45
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bmYRQwKIrJIgqnhabRcd4AvdWjU.roa
Signing time: Thu 18 Aug 2022 11:28:15 +0000
ROA not before: Thu 18 Aug 2022 11:28:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.116.246.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:b6:07:b1:e2:7c:e4:8a:6d:cf:d5:1e:f4:ad:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 18 11:28:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e6611430288ac9220aa785a6d171de00bdd5a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:28:93:e1:10:e2:18:6d:96:83:77:13:f7:
e5:2d:29:11:ee:38:ca:28:32:c1:92:64:8b:11:33:
d5:a6:10:38:0d:94:39:a5:1a:67:0d:d4:9f:d9:f9:
ea:76:e2:4c:21:cc:f6:8e:bb:cb:6c:0c:04:73:0e:
a0:87:64:86:40:65:ff:dd:eb:4c:33:77:1c:1c:1b:
37:97:1b:c4:cd:7d:18:00:56:71:4e:97:ce:ea:c8:
58:2c:92:c9:7b:19:1b:2c:21:48:18:f2:f0:a5:6e:
7c:91:25:1f:bb:5f:e4:f8:bb:96:5d:81:12:5f:65:
43:a7:b8:0b:00:a8:c9:e3:3f:87:aa:0d:5e:5b:6b:
83:58:72:68:7a:6c:e7:31:cd:59:51:90:72:11:66:
e8:1b:61:40:cd:ed:8d:24:44:f4:37:4a:a5:b1:45:
ba:64:eb:74:f7:72:7f:fc:1e:b2:0e:4b:8b:4e:4d:
73:84:06:c3:b5:0d:3d:1d:5b:5b:5c:6f:70:83:e5:
e0:94:76:5d:b7:f5:12:93:9c:68:16:08:fc:a3:44:
7c:d0:9e:2a:bb:73:3b:45:10:fa:0f:35:2d:14:9b:
e1:1d:ef:df:f6:a7:5e:13:92:7d:be:05:26:45:58:
e9:34:17:59:0d:15:ef:e2:41:6c:4b:60:c7:8f:04:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:11:43:02:88:AC:92:20:AA:78:5A:6D:17:1D:E0:0B:DD:5A:35
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bmYRQwKIrJIgqnhabRcd4AvdWjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:b8:f3:20:a2:c1:a0:1f:8d:40:ea:e2:ae:56:f2:28:f0:66:
40:96:2c:e9:fb:fe:ab:e8:5e:5a:40:02:c5:89:33:3c:e5:fb:
8f:bc:57:86:be:cf:8d:35:ff:7b:ad:0f:d4:a2:09:7a:1c:02:
ae:32:65:7d:4b:7e:c2:f7:4b:f2:79:fc:56:54:e8:1b:d7:0e:
84:31:e1:4e:4b:cf:49:d2:da:f9:11:54:29:03:82:5f:3b:c9:
63:40:ea:15:36:f6:c4:97:41:48:d3:01:7d:60:17:ad:6a:b8:
18:84:31:42:ea:e0:54:d7:f5:24:65:93:75:26:a1:8d:4c:e9:
da:fb:fc:0f:23:c9:92:7e:95:4d:b7:50:ba:23:c4:98:92:2f:
7a:5f:bd:86:0c:ed:8c:2c:09:3c:3e:7a:2d:30:86:dc:52:c8:
37:27:3e:b5:de:66:d9:90:1f:f0:eb:da:33:a0:06:66:d3:c8:
ba:03:fb:8d:78:00:e9:73:ec:ab:ad:08:5d:04:d1:f5:f2:4e:
f9:f9:aa:8b:24:21:6e:dd:8c:92:82:aa:91:0c:31:2a:68:44:
25:1c:7b:b0:01:69:8b:78:b0:98:4e:53:17:c3:c5:cc:a2:d0:
74:5f:aa:c6:81:0d:ef:60:0e:8b:b3:c7:a7:8a:95:9c:ef:74:
8c:ab:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org