Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/MNEEKhe4SxXasreD6fCd6P2WBFw.roa
File: MNEEKhe4SxXasreD6fCd6P2WBFw.roa (raw, json)
Hash identifier: EDXaj+Ei/IXCxwet91MyIglHxmdsHLD15AoTb9WIij8=
Subject key identifier: 30:D1:04:2A:17:B8:4B:15:DA:B2:B7:83:E9:F0:9D:E8:FD:96:04:5C
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 018570DE3CDC47FB5096F663078771A0CAAF
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/MNEEKhe4SxXasreD6fCd6P2WBFw.roa
Signing time: Mon 02 Jan 2023 05:04:50 +0000
ROA not before: Mon 02 Jan 2023 05:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210329
IP address blocks: 212.115.109.0/24 maxlen: 24
212.115.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:3c:dc:47:fb:50:96:f6:63:07:87:71:a0:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 2 05:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d1042a17b84b15dab2b783e9f09de8fd96045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:72:17:f3:1b:b0:71:be:67:32:73:82:a3:
9e:1c:bc:d5:35:f8:37:d6:83:dc:4c:4b:0a:a0:0c:
10:04:ef:bb:e0:5d:0a:01:d6:f4:c5:6f:24:52:3a:
7e:d6:6c:ff:ec:f2:77:4c:e3:d1:2a:a2:b2:de:74:
8d:fb:d0:62:35:91:bb:a1:f6:f6:39:1f:93:2f:24:
57:16:b2:64:9e:28:2e:f0:7e:85:73:85:06:cc:57:
8d:99:3a:00:c6:52:8e:f1:4b:02:ef:00:a9:61:73:
14:ab:ea:bc:e1:e1:12:68:8e:ab:49:81:66:b1:8f:
a9:8b:15:32:87:62:5a:e6:14:1f:7c:71:8b:70:94:
f4:bf:1d:3b:36:0b:7a:84:0d:de:76:35:a8:9c:5c:
95:6d:2f:de:d5:bb:83:ae:84:dd:73:62:d1:7c:3d:
92:c5:eb:ff:05:19:f6:ca:c6:ad:44:5a:6e:87:e4:
8c:22:bc:ad:e4:49:f1:34:a8:11:83:95:05:58:14:
23:54:b7:92:86:41:6f:78:69:bb:18:9d:27:07:52:
65:be:56:a8:7c:17:ab:9c:40:a3:9f:98:63:98:c4:
5f:61:8d:b6:39:61:a3:5a:e7:47:59:71:0b:93:d3:
30:d5:c4:a5:dc:43:7e:d4:2b:b5:2a:7b:7e:64:82:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:04:2A:17:B8:4B:15:DA:B2:B7:83:E9:F0:9D:E8:FD:96:04:5C
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/MNEEKhe4SxXasreD6fCd6P2WBFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:6b:21:47:fa:2b:56:0a:63:1d:38:01:9a:2d:82:2e:c8:25:
91:5c:6e:e8:fe:f4:e6:e3:61:42:22:d0:55:55:fa:c5:ba:20:
b7:b8:93:62:20:cb:bc:8f:2a:5f:0d:95:69:e8:a4:67:45:ff:
98:ee:9b:5a:b8:98:fd:64:a2:4e:2e:67:3e:3a:a9:76:4d:7c:
3e:6b:96:ca:ef:e9:c4:5d:d8:ba:09:89:dc:15:f5:ec:7f:7f:
21:1b:4a:08:9a:74:9f:f9:2e:bf:27:31:5f:6f:be:be:2b:6c:
2f:2f:76:ec:2a:b1:6b:49:4c:a6:ca:23:f7:40:26:b9:fb:64:
30:0b:66:f0:3e:a9:94:83:a2:3a:04:17:8b:c0:8c:50:7d:07:
c5:5e:40:1a:2f:0f:02:da:d7:93:68:e6:b9:81:bf:f8:0a:8f:
53:75:c1:5e:36:85:84:cf:86:57:31:64:30:f8:d9:8c:02:01:
63:14:db:1c:1f:35:d6:60:e9:9e:64:9f:c5:3e:0a:16:e3:16:
0f:fe:39:ad:06:f5:e6:9d:0a:7b:f9:86:cd:f7:e9:f9:14:a5:
c9:81:d2:d3:6a:52:e0:8e:18:a2:29:6d:c4:f5:35:a3:45:9c:
17:b5:f2:20:eb:8e:30:25:7d:1a:83:44:6a:80:48:f2:12:6a:
7d:25:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:13:42 2025 by rpki-client