Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/3HMmXXr-oTbQrVUYYcoaZWeCC9A.roa
File: 3HMmXXr-oTbQrVUYYcoaZWeCC9A.roa (raw, json)
Hash identifier: tcU5d4tVj4VTz0UlP7dEnHKPf9GwKGvmb2WMQYDQO98=
Subject key identifier: DC:73:26:5D:7A:FE:A1:36:D0:AD:55:18:61:CA:1A:65:67:82:0B:D0
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03C8EA94
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/3HMmXXr-oTbQrVUYYcoaZWeCC9A.roa
Signing time: Sat 01 Jan 2022 14:04:21 +0000
ROA not before: Sat 01 Jan 2022 14:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31390
IP address blocks: 185.100.219.0/24 maxlen: 24
185.100.218.0/24 maxlen: 24
185.100.217.0/24 maxlen: 24
185.100.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63498900 (0x3c8ea94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc73265d7afea136d0ad551861ca1a6567820bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:25:f9:91:e2:e7:62:aa:bd:60:2f:46:50:
2e:b4:40:59:03:e8:05:52:07:28:c8:f8:6d:d9:53:
6e:95:fa:39:67:70:dc:7e:ed:8a:91:4c:09:ad:f0:
5a:27:ad:96:77:3c:48:ed:ab:a1:77:08:89:fa:a5:
de:71:bc:1e:15:7a:b6:22:de:ca:e9:29:6d:67:a6:
3e:89:4c:be:87:63:00:ea:f7:08:1c:7a:b4:56:35:
2a:f0:64:e6:fe:ce:23:a3:c3:8d:79:90:85:58:86:
78:3c:17:4a:f2:f8:3c:86:10:05:f6:b0:28:2a:8e:
e0:25:c1:61:31:b6:bc:43:6a:bc:fa:26:02:5d:10:
a1:ae:f5:fc:28:b8:f2:90:6d:a9:7b:e4:88:d4:2d:
01:a8:53:a5:56:8a:84:09:97:00:e3:2b:43:17:4a:
ff:e6:96:ce:94:e3:b0:ce:27:1a:b9:5c:42:45:25:
d4:2f:70:f8:cd:5d:19:72:ef:28:1f:c7:58:7b:a4:
a3:90:60:5b:61:f4:23:4a:1c:05:ce:d3:f9:f8:51:
80:69:4a:4a:ce:a2:e0:eb:b2:4b:b9:08:fb:e5:de:
e8:86:8e:09:05:db:79:f5:f8:d9:3e:29:5c:bc:1e:
09:69:b6:c2:ee:a6:6e:70:b9:3c:43:84:16:ad:34:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:26:5D:7A:FE:A1:36:D0:AD:55:18:61:CA:1A:65:67:82:0B:D0
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/3HMmXXr-oTbQrVUYYcoaZWeCC9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:da:35:bc:b2:0a:3b:90:89:6f:44:aa:51:fe:55:64:0e:93:
8f:c7:dc:95:cf:1b:f7:f2:46:c5:fd:a5:da:cf:f3:7c:dd:c0:
a0:5a:83:d0:d5:b3:db:2d:37:79:68:26:4e:6f:35:e2:b2:91:
d3:94:92:c0:5d:a1:51:e4:32:ea:96:ae:78:17:70:cb:f4:f1:
01:2e:5d:3a:65:59:31:08:6b:c3:f6:b3:e6:ed:5d:fd:0f:66:
56:85:25:cd:50:2f:5d:2c:52:c2:ad:c0:b2:6c:ea:0b:bf:03:
2b:6c:e2:6c:91:1b:38:c7:c9:74:8c:76:72:27:ae:48:91:36:
5a:a5:53:1f:1a:2d:f5:dc:4b:1f:8e:81:89:cf:04:b6:5f:73:
cc:ec:c9:14:c1:a7:75:6c:e3:2b:a9:0f:5a:83:54:18:65:17:
fe:5d:3b:45:fc:3f:38:08:a9:9a:24:7d:73:90:ad:f9:d4:62:
fc:8b:02:dd:e9:78:3f:8f:a2:3c:5d:ab:f4:da:fa:4f:12:53:
cb:bb:6e:d2:a8:e6:ed:3b:71:df:c6:55:04:7c:23:ef:86:53:
02:70:07:2b:97:a3:ef:40:96:9b:4d:18:95:9f:1d:16:ee:d2:
92:81:94:ba:d3:a4:71:3d:aa:db:06:f2:8c:76:9e:ce:4f:dd:
2f:fb:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org