Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3ox1Joo1euVLSwE3KdM1P2uUnM8.roa
File: 3ox1Joo1euVLSwE3KdM1P2uUnM8.roa (raw, json)
Hash identifier: H3JvKUxtPMD7TYYgcz0/qFC6jgL8Ec0rUlppELD2Jn8=
Subject key identifier: DE:8C:75:26:8A:35:7A:E5:4B:4B:01:37:29:D3:35:3F:6B:94:9C:CF
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446C52C3
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3ox1Joo1euVLSwE3KdM1P2uUnM8.roa
Signing time: Sat 01 Jan 2022 03:58:16 +0000
ROA not before: Sat 01 Jan 2022 03:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8362
IP address blocks: 195.6.244.0/22 maxlen: 24
92.188.0.0/16 maxlen: 24
194.51.85.0/24 maxlen: 24
194.206.79.0/24 maxlen: 24
194.206.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147949763 (0x446c52c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de8c75268a357ae54b4b013729d3353f6b949ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:ec:59:0d:f4:4f:ee:62:32:00:f7:55:c3:
08:05:a9:0b:8f:52:5d:50:b6:d0:59:71:1b:b6:68:
3b:97:93:72:26:d4:40:d4:ce:a8:62:37:82:26:36:
1e:ad:a9:1e:21:8e:8a:fe:74:9b:8a:21:56:5b:e5:
08:bd:4f:f3:df:4f:c0:e3:b0:aa:16:b5:66:c2:0d:
09:44:b0:26:0d:24:b5:23:e6:81:20:91:73:f9:74:
e0:d0:df:fb:76:15:45:3f:4f:61:74:b0:f5:5b:38:
50:0c:b4:ed:79:fa:8f:38:e3:98:3e:31:91:e3:28:
74:40:08:a7:50:e6:e5:fa:43:43:8b:af:03:ed:73:
54:52:56:0c:4f:98:51:a5:a5:4c:1c:20:4b:23:80:
84:60:ad:2b:46:2c:ef:f3:f6:ae:d1:2a:a2:98:67:
2e:9c:37:9c:00:b8:b5:08:7b:ce:e7:ce:2e:c6:c8:
82:2d:c9:f4:d3:67:e7:73:f1:fd:1b:7d:1d:c0:71:
8a:43:54:23:11:80:37:e4:7c:4d:06:2e:e3:12:ac:
93:42:67:82:c1:9e:35:f6:32:75:33:38:13:d0:69:
4c:a0:61:34:ca:1a:2b:02:a6:01:05:43:fc:fa:03:
61:20:10:10:4c:86:d6:8f:e8:85:04:d8:c1:37:42:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8C:75:26:8A:35:7A:E5:4B:4B:01:37:29:D3:35:3F:6B:94:9C:CF
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3ox1Joo1euVLSwE3KdM1P2uUnM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.188.0.0/16
194.51.85.0/24
194.206.79.0/24
194.206.126.0/24
195.6.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:76:cd:f9:f7:be:b4:3b:d9:53:51:44:ac:8b:41:b5:ce:37:
88:5e:13:02:7f:1b:08:b7:5a:f1:a7:c6:39:3c:97:21:4f:7c:
98:09:68:eb:a5:80:d6:6f:fd:2a:84:67:fd:9a:7e:f9:6b:0b:
d4:1f:dc:3f:ac:e1:21:1a:4d:f9:3e:ec:dd:f1:03:80:8d:03:
4b:03:0a:f8:e1:0e:88:4a:57:3a:27:a4:a6:d9:5d:2e:3e:b1:
1e:3b:87:af:d7:8e:ce:33:cc:91:7e:19:d7:b6:0b:d5:68:e3:
df:04:b2:00:31:01:24:98:68:c2:37:76:f6:52:2b:a4:d6:78:
c0:3d:ba:9d:ac:eb:17:de:2e:6b:20:39:60:c0:ce:99:94:e1:
14:d5:d6:0a:eb:8d:c1:36:e2:d9:b2:b8:ff:cd:d7:59:92:bf:
17:0c:e2:03:1f:4a:6e:70:cf:3b:c5:45:9e:bc:f0:3d:b7:51:
ca:a4:c3:3f:fd:8c:06:1d:6e:a0:84:95:9e:33:18:38:aa:33:
b9:89:27:54:ac:4d:77:8d:6f:3e:bc:29:a3:a1:27:b1:7c:dc:
64:7f:e2:7e:e6:cd:d6:1f:c0:b5:44:2f:5d:e9:6e:03:66:45:
dc:36:3f:ae:30:e6:f6:22:18:f1:ec:69:77:a4:e7:6b:2d:39:
f6:02:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org