Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/mxJ_yh7q6b0iBDmVkRlfbW_36yw.roa
File: mxJ_yh7q6b0iBDmVkRlfbW_36yw.roa (raw, json)
Hash identifier: +AD/WBDeDbj4/2SckMmsFM6s50hEauU9JE1++993kEI=
Subject key identifier: 9B:12:7F:CA:1E:EA:E9:BD:22:04:39:95:91:19:5F:6D:6F:F7:EB:2C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018466693A323EA428142D7C9A7C64CBEDDD
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/mxJ_yh7q6b0iBDmVkRlfbW_36yw.roa
Signing time: Fri 11 Nov 2022 11:18:03 +0000
ROA not before: Fri 11 Nov 2022 11:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.116.246.0/24 maxlen: 24
212.116.244.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:69:3a:32:3e:a4:28:14:2d:7c:9a:7c:64:cb:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 11 11:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b127fca1eeae9bd2204399591195f6d6ff7eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:ca:82:2c:52:97:90:9c:c4:b6:9a:84:9d:
41:08:d1:e2:85:76:a4:b3:f5:65:91:32:99:6a:e3:
8e:4e:3a:1a:30:86:8e:c9:80:2f:2e:77:88:5f:f4:
be:70:de:5d:17:b0:f2:7c:1f:67:da:dd:70:cd:60:
4c:ce:57:d2:cb:32:4f:f2:80:eb:2a:22:0b:ce:3c:
ec:24:11:7d:c4:44:d3:70:80:d9:d6:d0:45:ae:22:
a5:85:7f:11:da:e3:e4:2e:01:88:8e:01:bc:09:a7:
e1:5c:a2:0b:29:30:0b:df:30:15:8f:ad:97:09:8e:
c1:52:6f:6a:aa:a6:e7:2a:02:f5:e2:25:84:aa:00:
28:4a:01:1e:ce:fe:f8:e4:7a:fc:fd:cc:75:8c:b6:
45:96:84:91:e5:21:90:fc:30:60:e2:34:5e:12:af:
f4:c3:02:d0:eb:30:a5:f9:c1:be:64:84:b4:12:50:
00:96:1f:33:24:31:b0:b0:ce:df:ca:2d:11:e7:5f:
c9:22:4a:77:c5:34:c6:5a:53:f2:5e:64:79:c4:30:
28:ee:57:68:27:2f:ba:99:29:98:18:6a:9f:68:e1:
97:f8:70:e1:23:4b:ec:d1:87:e7:51:e0:37:a1:1e:
d0:32:4d:3d:f3:3d:62:87:59:5a:33:76:5d:17:20:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:12:7F:CA:1E:EA:E9:BD:22:04:39:95:91:19:5F:6D:6F:F7:EB:2C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/mxJ_yh7q6b0iBDmVkRlfbW_36yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7f:23:05:2c:ad:d1:63:5d:4c:12:55:31:d1:dc:03:0b:7d:
09:4b:69:b3:3d:97:35:e0:bb:03:d9:e3:73:f1:e4:83:1e:c5:
0a:cb:b9:bb:e5:90:41:b5:b1:ff:ea:ac:7c:d0:d3:f2:3d:28:
69:21:25:c1:4f:59:64:81:f1:74:b7:c4:7f:3f:59:77:77:56:
33:4c:f5:4c:3c:00:d5:59:61:cd:89:a6:5b:ef:61:46:a8:6b:
50:ec:72:3c:8f:03:79:b4:48:49:09:60:d4:a8:ea:0e:03:ff:
bb:8e:10:0b:dc:7b:3d:70:f9:8e:34:58:28:fb:d3:1b:0e:e2:
29:89:b5:e3:99:32:f1:39:85:90:90:02:33:e6:05:32:38:04:
09:5f:e4:44:46:9c:0a:e0:df:92:9c:6e:b3:c2:7f:e9:61:c1:
34:1d:8a:b1:e0:04:2c:d6:e8:a9:d6:b5:ab:f9:64:e7:26:99:
a1:70:78:6e:5b:6c:52:96:11:82:8d:c7:33:a6:11:dc:52:a0:
9c:54:67:1b:2b:b9:3d:de:25:97:a3:0d:c9:e5:6a:79:f9:7e:
d5:4c:43:ca:83:7b:32:a8:8a:bc:c6:be:46:79:fa:ed:82:d6:
1d:3a:60:ab:80:49:1a:f0:80:4d:8d:24:e9:9c:60:ac:af:c7:
70:41:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:46 2025 by rpki-client