Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/M1H_9g89osiblhyFOdSoa1WftBk.roa
File: M1H_9g89osiblhyFOdSoa1WftBk.roa (raw, json)
Hash identifier: lxU79ZgESoJQ4Si26iKAqmi8xv2/2u38KwUIp/VgFV0=
Subject key identifier: 33:51:FF:F6:0F:3D:A2:C8:9B:96:1C:85:39:D4:A8:6B:55:9F:B4:19
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 12F31164
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/M1H_9g89osiblhyFOdSoa1WftBk.roa
Signing time: Sat 01 Jan 2022 10:02:54 +0000
ROA not before: Sat 01 Jan 2022 10:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211499
IP address blocks: 193.16.98.0/24 maxlen: 24
2001:678:f2c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317919588 (0x12f31164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jan 1 10:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3351fff60f3da2c89b961c8539d4a86b559fb419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:04:06:08:fd:2a:24:37:bd:48:77:2d:42:
d7:a3:cf:7d:98:1d:10:1e:63:f3:99:0d:78:a0:69:
ea:d7:fb:52:e5:95:71:2d:ad:18:87:b3:d6:bb:b3:
34:51:de:4f:ae:d6:be:be:b0:ef:37:93:22:74:5d:
bb:a9:9e:94:68:61:93:da:66:b9:da:9c:ef:74:7a:
f3:e4:ac:76:90:9f:0c:7b:a8:d5:13:da:23:92:e6:
5a:9f:4f:65:01:17:62:b3:01:be:d2:3b:86:ea:88:
25:80:ef:02:a0:1b:d2:ee:60:8f:28:1e:70:d8:6c:
6d:1f:c0:75:08:ab:53:47:33:08:41:64:06:e9:e0:
54:f7:c1:fd:1f:ff:b7:5a:ea:74:ce:68:a3:ab:62:
17:66:b6:6c:a4:bb:1f:5d:4a:37:71:5e:89:bf:a5:
87:34:97:2c:d9:31:2e:17:43:e6:eb:b0:0b:48:b2:
59:bc:f0:d4:97:4d:59:5f:aa:2b:7e:6b:3c:46:d2:
9c:91:91:7e:26:35:43:51:13:dd:80:62:e2:bd:bb:
63:82:a9:6d:7c:be:e5:83:2a:8e:1e:e8:60:52:ac:
1e:dc:60:16:e9:24:49:21:91:74:50:38:0a:80:a0:
48:56:bd:60:e2:48:3e:64:cb:e0:e2:c0:ba:8c:c4:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:FF:F6:0F:3D:A2:C8:9B:96:1C:85:39:D4:A8:6B:55:9F:B4:19
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/M1H_9g89osiblhyFOdSoa1WftBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.98.0/24
IPv6:
2001:678:f2c::/48
Signature Algorithm: sha256WithRSAEncryption
01:52:91:35:58:1f:cc:56:2d:61:d2:e9:d9:c1:ff:02:01:44:
dc:aa:d1:09:99:b0:04:1b:0c:a0:79:6e:11:1d:55:e4:2a:a0:
ce:46:95:f6:53:9d:18:41:a1:eb:46:2d:2b:3c:d8:11:ab:f7:
0b:0b:8f:56:96:05:95:9d:27:1b:83:d2:9a:86:48:3f:af:0d:
ee:7e:38:2f:42:c7:57:5e:d8:8f:05:72:91:35:81:e5:39:2f:
0b:37:a1:5c:ed:36:83:f7:d7:4e:0d:c1:6a:21:67:a6:77:7f:
db:66:e0:fa:0b:bd:66:7d:94:c6:93:a8:16:b2:ba:49:5f:ee:
ac:b7:c6:ad:29:7d:c5:8e:dd:9b:d8:65:b8:b0:9e:60:25:c5:
b6:a0:8d:c1:85:f2:3f:db:8c:cc:8e:2f:2b:30:bb:74:b9:5d:
f7:1c:c5:d4:73:ca:1d:f8:a7:ec:15:c3:13:f3:95:ed:0a:52:
bd:0b:8e:11:77:f5:4b:40:76:19:4a:71:a2:87:65:15:31:e1:
0c:04:67:06:77:12:60:5a:51:76:7b:97:b6:f9:da:0f:8b:71:
3a:8c:5d:65:dd:83:92:42:ac:4d:7c:85:6b:ef:f6:c7:76:04:
fa:60:8c:75:a3:62:70:50:f2:da:10:ea:d9:5f:cc:39:9a:a7:
5a:9a:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:53 2025 by rpki-client