Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/p02MMnZstkFSB46fSXemkidbO0E.roa
File: p02MMnZstkFSB46fSXemkidbO0E.roa (raw, json)
Hash identifier: Py3M6xWwpWVmuZUJIN/1kT/HC7vgojoXnj4OB4LnkPM=
Subject key identifier: A7:4D:8C:32:76:6C:B6:41:52:07:8E:9F:49:77:A6:92:27:5B:3B:41
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01894A8A67934124D6889052D0745B6C9B48
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/p02MMnZstkFSB46fSXemkidbO0E.roa
Signing time: Wed 12 Jul 2023 14:38:51 +0000
ROA not before: Wed 12 Jul 2023 14:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 212.116.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:8a:67:93:41:24:d6:88:90:52:d0:74:5b:6c:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 12 14:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a74d8c32766cb64152078e9f4977a692275b3b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:86:33:75:1a:4a:9f:44:73:07:98:99:ef:
07:26:e9:7f:72:97:f0:87:76:51:03:99:71:b8:79:
06:1a:d0:8e:8a:0f:6c:9f:82:5f:19:cc:bc:4e:fd:
64:6d:c8:e1:fc:2f:90:59:f3:1c:a3:ca:8f:10:ee:
f1:48:84:32:01:12:e7:cd:c5:7c:ac:50:6e:c6:20:
22:83:de:cd:c0:02:84:17:f2:9c:2c:8f:80:39:60:
82:de:b3:98:e9:ea:1c:18:e7:7f:13:ef:c1:4d:c3:
e6:9f:2f:32:f9:7a:b6:50:3f:be:5d:e3:e4:0d:cb:
60:4f:49:a8:a1:bc:a0:fe:5f:1d:d7:8b:01:4a:e4:
66:5f:71:39:f4:ae:f4:64:c4:d1:da:c0:60:fe:66:
30:38:9c:a0:0c:ec:50:bf:64:79:e2:89:21:23:c8:
56:5b:3f:b4:1e:7c:4d:23:aa:fc:c4:38:7b:e6:cb:
a1:51:e4:8c:33:43:63:16:5e:ac:90:04:db:2b:99:
b0:06:b1:50:c5:c5:1a:e5:e3:ee:26:63:3a:b3:16:
c3:29:1f:39:dd:c7:8b:68:ac:88:8d:b6:72:94:2c:
31:5d:4f:d6:a5:1c:90:3d:37:d4:b1:33:42:15:4e:
f2:a7:50:a6:99:25:c8:7e:6e:64:ba:05:08:f7:1c:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:8C:32:76:6C:B6:41:52:07:8E:9F:49:77:A6:92:27:5B:3B:41
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/p02MMnZstkFSB46fSXemkidbO0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
82:57:35:07:71:a8:ba:ef:f0:d0:b0:06:29:b9:d5:7e:e4:65:
1e:8a:e7:a0:5d:b3:86:12:40:59:4d:ec:45:d5:f6:78:54:88:
39:b1:1e:a6:ff:14:f9:b2:61:81:21:95:84:d5:c2:6d:4b:c7:
69:d6:8d:cc:bc:0b:f7:f6:b2:6d:52:ce:82:f6:42:c5:df:43:
e4:bb:f0:73:34:ff:c1:61:63:4c:7c:1a:c8:17:14:5f:03:66:
fb:51:28:fc:39:b9:88:9c:13:35:ed:be:a2:90:8d:f9:06:f9:
ca:64:e9:95:20:3a:46:e8:96:14:12:51:a8:a7:6d:53:d0:60:
10:a9:10:e5:07:b7:21:83:e0:f5:6e:77:46:a4:0d:90:50:37:
5e:9a:3f:80:0e:12:f9:74:66:3c:5e:67:18:e8:77:25:29:2c:
3a:05:8b:2b:9a:62:99:62:a8:62:1c:83:db:c3:25:fa:12:de:
9a:d7:be:3a:ee:44:09:34:d8:3f:36:2f:80:67:9d:11:b7:91:
82:bd:1d:c2:d1:fb:5f:aa:8c:58:67:ed:07:03:c5:ee:b8:6e:
7f:89:2c:4f:a7:33:66:33:1b:88:ca:14:9b:b8:34:59:c7:72:
42:48:0a:3e:89:e0:f3:a5:2f:9e:3b:ab:83:0e:28:aa:4f:9c:
38:48:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:04 2025 by rpki-client