Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/rhuQYzg5CL5hFDH_s4rXap30Gx0.roa
File: rhuQYzg5CL5hFDH_s4rXap30Gx0.roa (raw, json)
Hash identifier: mM7GuFhM14Ryl3FzrfA9s6QHHTswlCQWXeaXWXKPLyE=
Subject key identifier: AE:1B:90:63:38:39:08:BE:61:14:31:FF:B3:8A:D7:6A:9D:F4:1B:1D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018C8F5281DBABCAC343A2D0C5FFDE1BD326
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/rhuQYzg5CL5hFDH_s4rXap30Gx0.roa
Signing time: Fri 22 Dec 2023 02:19:58 +0000
ROA not before: Fri 22 Dec 2023 02:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 212.116.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:52:81:db:ab:ca:c3:43:a2:d0:c5:ff:de:1b:d3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Dec 22 02:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae1b9063383908be611431ffb38ad76a9df41b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:18:93:a3:a5:56:f7:7e:44:65:f0:54:59:
53:ec:7d:01:d1:23:80:ad:ad:d2:f1:09:b2:aa:e2:
22:e5:26:2f:2f:fe:9b:a0:93:3c:8d:71:2f:68:67:
e0:3f:39:3f:f8:e6:10:2c:29:3a:c0:d0:e4:c8:c5:
0f:6b:78:ac:d2:80:2f:ce:a7:f8:57:b0:ac:7b:7d:
a2:a2:14:19:cf:37:cd:ff:bb:fb:0e:32:da:77:fd:
92:bf:21:e1:ba:18:e8:b2:64:63:1a:33:61:74:09:
63:36:aa:22:e3:2f:32:e4:30:b6:6d:5b:a3:b2:48:
22:15:23:2b:80:50:10:7b:3b:60:22:c6:a4:62:a3:
01:20:f9:37:c4:be:d4:76:22:60:c9:e5:58:e8:4e:
13:f4:1e:09:17:e8:10:9d:36:f4:3c:83:4e:d9:5b:
7a:6f:06:11:e9:3b:76:f5:ea:b8:b8:63:84:30:90:
9d:e6:a2:01:a5:02:6b:c6:41:7a:3d:a0:1e:1d:b0:
fe:b0:5c:21:16:a7:54:ce:be:5e:ca:78:e0:ca:3a:
65:81:fb:c7:19:be:c4:33:6d:6e:04:ee:aa:b5:0e:
5f:bf:54:d6:8a:82:f1:14:be:b7:f2:2f:48:66:5c:
d5:fd:0d:09:d2:7f:81:44:52:fd:cf:ba:16:ee:d9:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:90:63:38:39:08:BE:61:14:31:FF:B3:8A:D7:6A:9D:F4:1B:1D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/rhuQYzg5CL5hFDH_s4rXap30Gx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:8b:ac:f8:af:61:6d:4f:81:a9:f0:80:26:3d:92:d5:a8:b4:
97:91:42:80:7e:d4:57:b6:68:19:81:6a:ee:e4:bc:00:36:7d:
66:25:96:a4:68:77:94:44:4c:3f:b9:80:df:74:58:f9:37:bd:
d6:a4:c3:56:9d:da:3b:76:d6:35:12:1f:6f:18:6d:d1:69:af:
4b:2a:b1:3f:b5:9c:94:62:91:a5:8a:c5:8c:3d:7e:40:dd:f8:
e1:73:bf:83:77:e9:df:f9:fd:cb:9d:dc:a0:81:90:b8:38:14:
27:4e:f7:a8:a8:91:c8:5b:96:1a:48:5a:c0:ad:a3:cb:ca:1e:
92:01:2a:bb:d2:75:2e:bd:d2:55:5e:78:93:43:a9:d5:4b:63:
3f:fc:2a:31:98:39:c9:4c:e7:df:4b:1c:0b:c4:bb:7d:cd:23:
3d:1f:5e:c8:8e:b4:b8:ce:20:67:6c:c0:08:5a:4f:57:6c:95:
7c:9b:d6:fe:9d:8e:26:95:4a:81:1f:71:8d:83:c2:b0:d5:49:
49:3c:2f:dd:e2:f3:42:9e:66:b2:a6:d7:b3:d4:ba:e2:3e:74:
6e:75:80:46:fd:ef:0c:9e:84:71:b5:ba:71:1e:32:db:ef:74:
e9:bb:4d:b8:40:91:65:c0:e8:4b:74:c2:51:85:f8:7b:ee:8c:
7b:00:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:18 2025 by rpki-client