Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/3Dh9rpief8teavjcziLvK1awoDk.roa
File: 3Dh9rpief8teavjcziLvK1awoDk.roa (raw, json)
Hash identifier: GSefMGZALJWtvZk8b0yR7zKUfL1GmuPr8sdy+vdkS78=
Subject key identifier: DC:38:7D:AE:98:9E:7F:CB:5E:6A:F8:DC:CE:22:EF:2B:56:B0:A0:39
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08EA7211
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/3Dh9rpief8teavjcziLvK1awoDk.roa
Signing time: Thu 24 Mar 2022 09:57:20 +0000
ROA not before: Thu 24 Mar 2022 09:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 185.227.83.0/24 maxlen: 24
45.141.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149582353 (0x8ea7211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 24 09:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc387dae989e7fcb5e6af8dcce22ef2b56b0a039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:ec:bd:4f:80:b2:dd:ee:93:0e:2d:17:5f:
3c:e3:f0:5d:5b:a0:d3:ce:2f:bb:1c:6b:22:f7:4f:
d8:cd:fd:05:ac:64:45:ba:35:09:ea:c6:7a:cb:f5:
b5:96:01:5f:3c:fe:b1:8d:e3:14:37:f9:70:23:00:
a7:27:d3:44:a4:7b:d7:13:11:77:73:83:e8:28:4e:
6d:f9:cf:f9:07:4c:d8:fd:97:50:49:b8:ff:ab:12:
05:ea:4e:49:8a:cf:87:7d:2b:86:66:8c:a5:da:71:
89:f7:ce:f3:6f:24:72:1b:65:e7:21:2b:9a:36:de:
9d:06:de:bd:15:87:a9:9c:af:cf:5b:97:31:5e:c0:
48:40:42:bc:26:93:05:06:14:29:04:98:32:5e:57:
3f:6c:03:35:03:83:95:1e:93:6b:3c:f2:cc:54:a8:
ef:ad:9b:f4:89:6a:83:e3:45:cd:74:30:fb:69:3c:
e7:a7:b8:77:e3:f7:1c:3c:ca:1a:17:f9:0b:69:0f:
5e:5b:31:71:88:90:7e:96:5b:e9:34:ba:77:ca:09:
7d:42:1d:dd:f6:09:55:c4:87:53:ec:de:03:7d:7c:
78:05:db:cd:ee:7d:f4:a2:45:fe:63:51:98:bf:be:
55:88:a5:aa:36:f3:ee:41:14:10:5a:9d:94:1d:4d:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:7D:AE:98:9E:7F:CB:5E:6A:F8:DC:CE:22:EF:2B:56:B0:A0:39
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/3Dh9rpief8teavjcziLvK1awoDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.60.0/24
185.227.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:91:1e:33:c2:d7:3c:fc:25:e3:86:2a:aa:fb:92:2b:c1:e5:
09:b6:7a:cf:6d:fe:0c:11:72:0b:6b:1b:8e:13:63:90:07:3b:
2e:7c:d9:1a:44:f4:85:f6:3c:d9:36:0c:08:25:0d:05:0f:3b:
3a:3d:47:4e:c5:bd:16:c2:12:1a:7f:14:ce:a5:f1:5d:9e:48:
18:73:45:cd:ca:b1:85:61:73:07:da:6f:f2:05:51:e8:42:d1:
05:a1:93:dd:e9:09:b1:da:bd:03:76:d6:f7:61:d7:c2:c5:82:
89:fc:43:96:02:f3:f9:14:6c:67:cc:94:49:ec:06:b4:1b:81:
c9:c9:52:3f:ac:f1:25:a5:f1:af:94:90:10:6e:3c:ab:93:09:
ab:72:d0:77:22:10:bf:c0:86:a7:db:82:5c:7c:6f:35:d7:f6:
ba:ef:52:46:ef:68:65:13:1e:2e:07:51:20:c2:57:7a:b6:71:
19:d8:e9:0b:ce:6d:c4:15:d6:ad:43:41:07:41:6c:82:eb:bb:
e6:b0:61:5d:fc:2c:36:e5:20:cc:ef:40:45:ac:a9:73:d9:96:
50:46:ca:a1:3b:8c:46:36:ad:a9:e9:bb:99:90:40:6b:cf:87:
6e:0a:4b:2b:91:cb:47:5f:01:75:19:50:1e:ad:14:bb:88:a1:
23:d8:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org