Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/mharYE13OHTGBBJl6RP425fRkNc.roa
File: mharYE13OHTGBBJl6RP425fRkNc.roa (raw, json)
Hash identifier: dP59Navn2ulSWm+K0T2VkeRu2uNM+2HFLHf93R0UgaE=
Subject key identifier: 9A:16:AB:60:4D:77:38:74:C6:04:12:65:E9:13:F8:DB:97:D1:90:D7
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 063D4504
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/mharYE13OHTGBBJl6RP425fRkNc.roa
Signing time: Thu 03 Feb 2022 23:20:15 +0000
ROA not before: Thu 03 Feb 2022 23:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12732
IP address blocks: 212.21.71.0/24 maxlen: 24
212.21.92.0/22 maxlen: 22
212.42.236.0/23 maxlen: 24
212.42.242.0/23 maxlen: 24
2001:bf1::/32 maxlen: 32
2001:bf0::/29 maxlen: 32
2001:bf0::/32 maxlen: 32
2001:bf0:40::/48 maxlen: 48
2001:bf0:69::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104678660 (0x63d4504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Feb 3 23:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a16ab604d773874c6041265e913f8db97d190d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:8f:8e:2c:c5:ed:fe:4a:d3:78:7f:62:01:
bc:fa:c7:23:ae:3c:b0:9a:ba:11:f5:20:e7:fd:c3:
50:19:ce:79:6a:3d:85:0a:34:1c:92:6d:57:24:00:
55:0d:f9:b6:45:0c:ad:90:e1:25:df:51:5d:97:b2:
39:69:4b:1e:1e:14:d6:35:a3:f6:07:b6:c8:18:c3:
dd:87:6f:b7:cc:50:e5:f9:88:95:34:0e:a1:d4:8f:
1d:f1:39:e3:3b:d9:bd:6d:8a:a1:d1:d8:c8:a5:9b:
0e:3d:3a:32:bc:18:e3:f7:04:c7:91:98:ce:42:d2:
68:ed:cb:f9:22:37:46:9a:8f:d9:93:6e:98:e9:98:
81:eb:71:65:bd:a7:65:a4:76:e0:3f:f4:56:be:b6:
1a:ad:cd:8f:65:ea:eb:a0:c1:53:dc:9e:56:a9:0b:
a9:53:0d:f5:32:7c:af:34:fe:44:77:54:72:c4:b4:
01:30:cd:82:7a:e6:44:00:f0:bf:8d:c0:13:43:0e:
86:e1:39:ab:c4:e5:ed:9f:17:c9:e4:08:89:78:6a:
e1:43:36:08:49:10:5f:01:66:28:41:2a:17:ca:f2:
e4:75:a0:cc:71:2e:ff:e8:37:b9:21:ed:a7:ef:79:
80:0c:fe:99:15:4e:11:e6:84:64:14:af:3d:02:53:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:AB:60:4D:77:38:74:C6:04:12:65:E9:13:F8:DB:97:D1:90:D7
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/mharYE13OHTGBBJl6RP425fRkNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.71.0/24
212.21.92.0/22
212.42.236.0/23
212.42.242.0/23
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:26:b1:34:20:74:dc:95:42:f6:36:2a:0f:5b:a2:f6:f1:df:
7d:2f:f0:a0:d7:c7:e8:22:45:7b:ec:44:f1:ea:b2:6f:f0:7e:
7c:24:53:ef:b2:4f:e3:2c:f8:b1:e8:bd:31:52:ff:f0:84:95:
bc:bf:3f:12:48:81:07:df:1e:ac:39:fe:33:8a:a8:1d:53:4d:
a3:e0:14:e7:64:c7:4d:01:7e:9d:ef:1a:db:70:5a:7c:da:26:
19:be:a9:f8:55:b4:3a:23:fe:bf:60:cb:f1:95:86:b5:04:df:
da:56:74:ba:c5:2f:37:f9:26:4c:ff:dd:c6:6b:a7:e4:a8:0d:
f4:fe:99:33:48:86:f1:c5:b3:08:0c:9a:b5:58:67:91:c9:ab:
62:19:24:01:85:d7:e0:ba:4a:37:90:00:50:db:43:35:07:a5:
3a:07:20:7a:e6:eb:05:44:3c:cb:98:3a:29:e3:23:33:fe:41:
69:b2:00:5c:d6:8c:50:d1:11:73:48:bb:1e:f5:c8:50:95:32:
ed:b3:01:c5:cc:d1:90:e6:72:c0:a0:19:ae:16:14:e5:cb:0e:
5e:99:f4:61:f8:52:71:d0:97:a7:92:d6:80:ab:9d:fd:90:ca:
e4:ad:04:ce:b6:3f:a0:1e:a4:5d:3d:04:1e:68:a2:b3:79:42:
20:b1:62:13
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBj1FBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjMxNDkyNDczYTc4YzZmZTlmNTM5ZjlmYTdkMjI1MjU2MGEyYjdlMB4XDTIyMDIw
MzIzMjAxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWExNmFiNjA0ZDc3
Mzg3NGM2MDQxMjY1ZTkxM2Y4ZGI5N2QxOTBkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnjj44sxe3+StN4f2IBvPrHI648sJq6EfUg5/3DUBnOeWo9
hQo0HJJtVyQAVQ35tkUMrZDhJd9RXZeyOWlLHh4U1jWj9ge2yBjD3Ydvt8xQ5fmI
lTQOodSPHfE54zvZvW2KodHYyKWbDj06MrwY4/cEx5GYzkLSaO3L+SI3RpqP2ZNu
mOmYgetxZb2nZaR24D/0Vr62Gq3Nj2Xq66DBU9yeVqkLqVMN9TJ8rzT+RHdUcsS0
ATDNgnrmRADwv43AE0MOhuE5q8Tl7Z8XyeQIiXhq4UM2CEkQXwFmKEEqF8ry5HWg
zHEu/+g3uSHtp+95gAz+mRVOEeaEZBSvPQJTX+0CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSaFqtgTXc4dMYEEmXpE/jbl9GQ1zAfBgNVHSMEGDAWgBT/MUkkc6eMb+n1
Ofn6fSJSVgorfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L196RkpKSE9uakdfcDlUbjUtbjBpVWxZS0szNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMWI0MTA1LTM0NzEtNDU5Mi1iZjA3LTczZmQzYmMxOWFhNy8x
L21oYXJZRTEzT0hUR0JCSmw2UlA0MjVmUmtOYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MWI0MTA1LTM0NzEtNDU5Mi1iZjA3LTczZmQzYmMxOWFhNy8xL196RkpKSE9uakdf
cDlUbjUtbjBpVWxZS0szNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEANQVRwMEAtQVXAMEAdQq7AMEAdQq
8jANBAIAAjAHAwUDIAEL8DANBgkqhkiG9w0BAQsFAAOCAQEAbyaxNCB03JVC9jYq
D1ui9vHffS/woNfH6CJFe+xE8eqyb/B+fCRT77JP4yz4sei9MVL/8ISVvL8/EkiB
B98erDn+M4qoHVNNo+AU52THTQF+ne8a23BafNomGb6p+FW0OiP+v2DL8ZWGtQTf
2lZ0usUvN/kmTP/dxmun5KgN9P6ZM0iG8cWzCAyatVhnkcmrYhkkAYXX4LpKN5AA
UNtDNQelOgcgeubrBUQ8y5g6KeMjM/5BabIAXNaMUNERc0i7HvXIUJUy7bMBxczR
kOZywKAZrhYU5csOXpn0YfhScdCXp5LWgKud/ZDK5K0EzrY/oB6kXT0EHmiis3lC
ILFiEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:40 2024 by rpki-client on console-ams.rpki-client.org