Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/3pDg529REOhCJL4wsIa1Ci7usJ8.roa
File: 3pDg529REOhCJL4wsIa1Ci7usJ8.roa (raw, json)
Hash identifier: alusKsqZ239Splf5ydX6cMlXab3FpSGep7yPoCjl6zE=
Subject key identifier: DE:90:E0:E7:6F:51:10:E8:42:24:BE:30:B0:86:B5:0A:2E:EE:B0:9F
Certificate issuer: /CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Certificate serial: CB9073
Authority key identifier: 45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/3pDg529REOhCJL4wsIa1Ci7usJ8.roa
Signing time: Sat 01 Jan 2022 07:57:47 +0000
ROA not before: Sat 01 Jan 2022 07:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41171
IP address blocks: 185.253.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13340787 (0xcb9073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Validity
Not Before: Jan 1 07:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de90e0e76f5110e84224be30b086b50a2eeeb09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a0:8a:08:20:99:75:7c:42:6b:9b:72:33:4d:
4d:15:08:cc:cc:4c:64:f2:48:c4:69:1f:aa:81:ed:
2d:29:5c:2f:f4:54:27:4f:1c:c3:2c:87:8d:d2:4d:
41:f9:71:3e:78:80:9b:a2:8e:e7:a1:55:f3:ec:1a:
c4:34:e4:d0:41:47:68:34:09:58:68:b5:40:b0:a3:
90:3e:0c:48:c6:ef:0b:46:96:c1:c4:c2:12:83:48:
a2:d9:67:65:20:df:cf:af:40:13:1a:86:d9:df:21:
93:e0:58:dd:2e:4e:d8:eb:c6:01:4c:1c:78:37:f2:
58:ef:9e:e2:63:4a:f4:0b:2e:62:8d:a1:a9:2c:00:
58:6f:e8:33:30:1f:7b:1f:05:72:1e:f0:9b:56:2d:
0c:0c:de:5e:92:8b:9f:4e:5f:36:60:1b:f8:55:af:
fc:17:68:8e:ee:87:20:15:d7:57:e7:89:7a:38:01:
8e:bb:1e:83:ea:92:b6:47:07:35:2b:9e:44:a4:95:
58:b8:4f:5a:7b:20:21:1b:31:8f:17:cd:ff:9f:d0:
19:b5:8e:d4:13:ca:56:59:d7:1e:ed:75:cd:28:d4:
23:39:77:fb:d8:6a:ca:0c:d8:0b:f3:fc:65:10:3a:
ad:c1:47:d7:a5:ea:c3:69:fd:00:26:e1:ac:7c:ab:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:90:E0:E7:6F:51:10:E8:42:24:BE:30:B0:86:B5:0A:2E:EE:B0:9F
X509v3 Authority Key Identifier:
keyid:45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/3pDg529REOhCJL4wsIa1Ci7usJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5c:b1:33:e3:f6:68:0e:52:82:7e:e0:15:b5:ed:ae:d7:87:
d5:92:3e:97:43:70:d0:3e:b2:80:d3:ef:e7:3f:0d:1b:d6:e5:
5d:5c:04:88:27:15:1b:30:9f:49:1f:ee:0e:d0:5f:69:65:b8:
7a:b0:2e:89:d5:b7:e7:32:a6:82:77:cd:62:bd:04:f8:e6:1e:
ed:07:ae:a3:e7:75:fb:40:69:cf:23:e0:26:5e:a8:5e:25:f2:
d6:e2:20:67:70:7c:87:3a:bd:11:1d:a3:e9:66:c6:24:b8:66:
51:af:30:ce:26:bb:44:f9:3e:81:06:2f:a8:d8:44:e1:fd:b6:
40:4b:b9:5a:37:e9:94:f7:e7:33:58:20:59:0d:1d:91:e6:03:
51:83:d4:70:eb:2c:47:85:9b:d8:bc:ec:1b:09:69:40:e8:0d:
8f:bf:ef:ea:f8:0f:f1:a9:da:be:98:9b:3d:b0:b2:39:ee:50:
87:09:d6:4a:e7:90:49:9d:bd:d7:4b:11:b7:1b:a0:ef:31:d3:
1e:c5:ff:a7:f1:83:94:56:14:ea:56:d0:58:03:77:b6:af:e4:
74:bc:de:63:34:c0:05:77:ce:76:84:40:be:70:63:0b:66:05:
75:81:ba:23:2e:47:dc:c9:5d:7a:09:44:7e:34:10:70:11:29:
0c:6b:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:56 2023 by rpki-client on console-fra.rpki-client.org