Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/9kvDxncocMyF6qa2spMU9aUobtk.roa
File: 9kvDxncocMyF6qa2spMU9aUobtk.roa (raw, json)
Hash identifier: PsdiUhOEkyWrz9dLbkWmKffgHQt1wdR35xPCS7D+BSI=
Subject key identifier: F6:4B:C3:C6:77:28:70:CC:85:EA:A6:B6:B2:93:14:F5:A5:28:6E:D9
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0183C6D07FFC4F2D2E8350B0B32EF9D54080
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/9kvDxncocMyF6qa2spMU9aUobtk.roa
Signing time: Tue 11 Oct 2022 11:31:36 +0000
ROA not before: Tue 11 Oct 2022 11:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13232
IP address blocks: 212.39.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:d0:7f:fc:4f:2d:2e:83:50:b0:b3:2e:f9:d5:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Oct 11 11:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f64bc3c6772870cc85eaa6b6b29314f5a5286ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:e3:a4:01:f7:74:5a:17:67:3c:d4:b7:e4:
4f:fe:57:96:91:67:52:56:e5:76:2f:15:72:53:ec:
8b:83:a4:ae:93:4a:cd:7a:72:5e:10:a1:fb:7f:e5:
58:c9:b5:69:df:b9:30:00:09:d9:76:62:0e:a5:2e:
57:32:8c:5a:08:b8:5a:56:58:bc:b5:a0:3a:22:dc:
34:2b:bf:bc:cb:b8:1a:fa:9d:0b:2b:31:a3:36:33:
7f:eb:0a:a4:9a:cc:01:e8:dc:35:90:46:0e:e8:4a:
c4:3b:d9:50:7e:61:99:52:49:5c:c0:94:55:6f:6d:
86:c2:44:65:61:78:9c:d1:af:d6:b1:99:fb:ad:02:
12:ac:c0:6d:81:2b:f2:01:f5:7a:b1:94:7c:f9:e3:
77:ce:92:76:44:9b:a0:db:27:a6:98:e1:0a:0f:f3:
08:3d:21:da:50:2c:94:14:88:6e:6f:15:b2:a1:95:
61:24:a9:31:bb:69:dc:bb:95:bb:66:04:57:50:95:
1c:c0:8f:0b:c2:9a:a9:4b:8f:66:13:d4:cc:12:a6:
14:c1:1c:c5:a9:2a:50:86:ba:92:2c:b0:6b:5a:d2:
18:a9:79:27:59:22:1f:23:01:53:97:59:76:4b:54:
ce:b7:d7:2c:f7:5d:3d:30:2c:17:b8:5b:32:8e:4a:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4B:C3:C6:77:28:70:CC:85:EA:A6:B6:B2:93:14:F5:A5:28:6E:D9
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/9kvDxncocMyF6qa2spMU9aUobtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a5:16:ac:af:37:90:48:85:27:27:75:7a:b4:74:6f:22:68:
c1:3f:9a:94:1d:85:87:31:6d:7d:50:3d:6b:fe:95:0c:1b:27:
3b:96:f3:6c:71:e7:5c:1c:de:ff:70:1f:c4:e9:1e:ab:be:ba:
57:50:ad:78:19:dc:a2:46:8e:b9:ef:75:ba:9e:3f:44:61:1d:
00:4b:67:69:9e:cd:a8:db:4c:6c:a7:31:ce:c0:89:75:d2:56:
d8:3a:7f:31:0d:53:e9:14:c0:a1:01:51:d1:a2:b1:f8:ea:31:
8d:e7:bf:d8:de:ba:3d:9e:cd:b6:51:c9:e5:58:92:6a:43:2a:
57:db:9e:e1:cb:99:47:21:24:fd:a2:32:c7:87:d8:f9:13:55:
7e:99:36:98:a7:a0:f0:1b:91:b3:f6:ed:70:e6:71:6b:51:1a:
9c:d2:a2:0b:3d:f4:dc:6f:36:79:4e:86:03:8d:a0:e2:a2:8b:
a5:21:6c:5f:08:34:d0:fd:fc:15:bd:87:0e:0a:10:97:bb:46:
a1:b3:83:8f:ec:3e:5e:f7:57:cb:a4:d8:ab:c1:7c:f4:ea:55:
d0:f2:9d:ed:fa:97:e6:10:f2:e6:07:f7:6a:70:7b:34:f9:83:
1e:b3:c7:b0:5e:df:c6:03:b0:26:79:04:49:48:c7:e7:65:b8:
42:6f:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:41 2025 by rpki-client