Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/mh87V-d2sSe_ghwL5x2-EudD_-M.roa
File: mh87V-d2sSe_ghwL5x2-EudD_-M.roa (raw, json)
Hash identifier: gMfn74sq++vpm4zwQQn++jtfRAdoHGvwrXxUOJe5tpQ=
Subject key identifier: 9A:1F:3B:57:E7:76:B1:27:BF:82:1C:0B:E7:1D:BE:12:E7:43:FF:E3
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 0185728C8F05E7260A589FE12305FE24FA61
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/mh87V-d2sSe_ghwL5x2-EudD_-M.roa
Signing time: Mon 02 Jan 2023 12:54:52 +0000
ROA not before: Mon 02 Jan 2023 12:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49029
IP address blocks: 212.23.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8f:05:e7:26:0a:58:9f:e1:23:05:fe:24:fa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Jan 2 12:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a1f3b57e776b127bf821c0be71dbe12e743ffe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:0c:f0:4b:1b:cb:64:9c:26:d1:a6:c2:1f:
c7:ba:d5:77:1d:40:6b:5b:44:00:9c:47:21:bd:71:
d7:f0:36:80:95:fc:67:ef:84:56:22:81:4d:8e:fb:
5b:dd:3b:b6:ae:6d:ee:03:51:34:1f:a8:7c:17:69:
c2:da:20:e5:08:d5:97:a9:54:63:fb:e0:de:11:59:
86:16:b4:4e:94:48:dd:12:73:f9:3b:5a:9a:fd:60:
7e:14:02:48:02:79:0d:80:60:88:95:72:34:0c:ce:
e4:97:53:5c:24:27:83:05:6a:0c:e9:5b:76:df:06:
23:06:60:47:3b:6a:0f:b5:bc:bf:6a:3f:19:96:6d:
02:75:6c:d4:62:bd:b0:d8:62:0b:60:0c:90:3d:15:
70:7e:a2:d4:2c:1e:41:25:db:ce:a2:f7:3a:33:1c:
d8:62:c6:0d:4a:67:51:10:6b:43:77:f6:70:62:84:
36:dd:35:25:5e:5b:66:a1:a7:88:31:a4:c6:e3:f6:
9c:99:ca:d7:29:6f:f4:ec:60:5e:e0:42:d8:31:d1:
6e:79:23:fd:72:a5:18:09:21:d1:09:75:02:e8:df:
ef:22:1e:14:4d:de:a5:05:37:88:b2:2c:b4:23:92:
7b:84:b8:3e:cf:5b:ca:ea:5b:9e:2c:c7:64:a9:0c:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:3B:57:E7:76:B1:27:BF:82:1C:0B:E7:1D:BE:12:E7:43:FF:E3
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/mh87V-d2sSe_ghwL5x2-EudD_-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bf:c4:1c:9e:32:12:81:e1:9b:df:24:a3:0c:31:a6:05:ce:
df:e8:c2:48:6d:e5:b6:68:7b:bb:a2:9d:8c:42:fd:9c:28:5f:
c4:89:70:5a:d7:ab:1d:dc:ae:47:52:7d:58:18:e6:0c:c9:de:
5e:eb:b2:e6:41:ea:be:0e:f0:1f:f5:43:81:8d:c3:28:ab:48:
bf:46:4d:e7:cd:31:f2:e3:18:3e:16:25:0e:f2:ea:8c:6d:51:
41:8b:d3:0f:7c:c9:91:d7:5f:0e:5c:2f:2f:f3:50:fd:38:a5:
6b:c2:9a:5e:2b:a4:65:a3:e4:02:cb:ff:10:9a:65:bb:4d:ce:
c7:c3:79:74:9c:b2:c5:c2:67:79:23:4e:ff:73:26:88:02:2f:
f3:65:20:16:94:13:6d:0c:b6:96:ea:f0:93:37:8b:0b:e7:cf:
96:96:a9:7d:80:cc:87:c4:08:09:59:de:5e:e4:28:56:ce:1f:
8e:b9:a0:82:b4:ec:57:6b:54:ca:45:15:a9:6e:cc:3b:4d:76:
56:b9:2d:8a:c3:33:2c:8b:11:3b:00:6e:c5:44:51:ae:73:91:
1d:58:6c:94:79:38:fe:3a:02:e8:9c:7c:01:8b:64:2a:7e:14:
b2:1f:60:07:9e:bd:a4:d5:b1:72:3a:ef:e8:56:68:75:eb:73:
24:62:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:40 2025 by rpki-client