Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/3IPkfzgYzltmcupiN38Cx8UeEJQ.roa
File: 3IPkfzgYzltmcupiN38Cx8UeEJQ.roa (raw, json)
Hash identifier: b1qMSdhZuqX3BxtpK5Libn0xzKOC0cKgB6L3XCDhkLw=
Subject key identifier: DC:83:E4:7F:38:18:CE:5B:66:72:EA:62:37:7F:02:C7:C5:1E:10:94
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 06FE3809
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/3IPkfzgYzltmcupiN38Cx8UeEJQ.roa
Signing time: Sat 01 Jan 2022 04:55:47 +0000
ROA not before: Sat 01 Jan 2022 04:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 185.63.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117323785 (0x6fe3809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jan 1 04:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc83e47f3818ce5b6672ea62377f02c7c51e1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:6b:c1:47:0f:ff:e5:3b:7d:69:09:0b:56:
02:b9:5b:6b:67:07:c7:b5:46:05:a0:6f:92:5c:e9:
d5:62:ff:d4:b5:70:96:4a:5a:54:bf:6a:d4:65:cf:
e3:30:98:43:5f:7d:c7:47:5e:93:7c:ed:85:2b:fe:
5a:85:8e:de:87:b7:ea:1b:a6:37:bc:81:93:cc:d7:
f1:8e:59:d3:72:e7:cd:95:13:e7:91:bf:b7:08:06:
96:0f:85:c7:78:52:08:a9:0e:69:81:f9:50:e0:01:
4d:51:8c:78:2a:fc:c7:ea:4f:dd:a1:c3:63:20:70:
0e:f6:6e:99:c8:aa:5b:1e:53:8e:a9:91:db:28:c9:
d1:38:39:40:a0:2b:f4:4c:1b:d3:98:42:6c:56:aa:
c0:bf:31:a7:d1:53:34:15:40:32:b7:17:64:04:d6:
e4:00:09:c6:e4:db:e8:b3:f4:a7:ea:e7:b7:ae:35:
ae:55:6c:c1:cd:a5:09:ac:64:99:9b:51:76:34:c9:
4f:4e:83:87:0c:bf:47:33:5c:be:f9:b1:44:bf:e8:
a9:e7:65:9d:24:bd:01:ae:65:bf:14:34:e6:81:d5:
da:68:b4:fa:6e:c2:36:62:72:80:54:0b:54:58:84:
ba:ec:b0:25:c0:92:6d:8e:67:50:e4:9b:e8:ce:54:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:E4:7F:38:18:CE:5B:66:72:EA:62:37:7F:02:C7:C5:1E:10:94
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/3IPkfzgYzltmcupiN38Cx8UeEJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.244.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c1:3c:70:26:1d:58:10:26:70:88:30:99:de:f2:73:c3:90:
02:13:fb:e8:93:9b:07:a5:a1:b3:36:15:ce:f5:1b:7f:b6:f3:
a4:5a:ad:85:67:c8:3a:43:c4:c5:03:4d:ef:2c:7b:8c:78:b4:
3e:ce:e5:d8:7a:6e:24:4b:20:df:8b:f8:29:cc:19:ce:05:5d:
f1:1c:c6:f0:96:28:59:f0:0e:67:76:ba:50:0c:6a:a8:cf:ce:
9a:ef:f8:ab:f9:16:39:a4:71:d3:c1:34:c0:cd:59:42:69:af:
c0:6e:08:d0:95:c3:80:26:56:f9:b4:ee:72:2d:c2:f3:ea:2f:
82:52:6a:73:79:1a:4e:a4:b3:1f:03:e9:8d:70:2d:0c:ae:3c:
36:62:a7:a6:5b:36:89:3d:8f:7d:61:89:e9:35:55:08:b4:7e:
26:31:5a:be:aa:f5:6b:8c:7f:9a:a3:98:46:53:a1:f8:2f:9f:
f5:a5:7e:19:bb:7a:6f:59:34:d9:a3:2f:92:74:23:9f:57:9b:
3d:cb:f8:5b:7e:c1:5e:61:5d:ed:e0:e5:31:ff:06:6f:86:ee:
71:d5:8a:4a:68:10:12:8a:15:7e:70:97:60:af:7b:ce:ba:4f:
8c:72:2d:d3:88:73:81:e2:d3:54:41:7c:b7:07:d1:6a:38:0f:
36:48:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:13 2024 by rpki-client on console-fra.rpki-client.org