Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3_d1vehFVzf_rx7VycInq-ptFkw.roa
File: 3_d1vehFVzf_rx7VycInq-ptFkw.roa (raw, json)
Hash identifier: p8NU0yd6FR4e/Fu00LZdOsEXtFva3wrz+PsK97nfqww=
Subject key identifier: DF:F7:75:BD:E8:45:57:37:FF:AF:1E:D5:C9:C2:27:AB:EA:6D:16:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0931EFE3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3_d1vehFVzf_rx7VycInq-ptFkw.roa
Signing time: Sat 01 Jan 2022 05:55:29 +0000
ROA not before: Sat 01 Jan 2022 05:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200032
IP address blocks: 5.83.136.0/24 maxlen: 32
2a00:cdc0:11::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154267619 (0x931efe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff775bde8455737ffaf1ed5c9c227abea6d164c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:db:ab:a3:4e:be:26:b6:6f:15:9d:20:e1:
96:e7:79:9c:06:44:9a:50:3a:3c:1b:e7:b3:2b:b4:
a9:64:cf:44:30:34:ad:8a:09:02:c5:49:54:6b:0e:
8a:c2:9b:7c:f0:2f:b0:af:60:0f:5c:fa:6a:f1:92:
ae:87:48:6e:72:d0:92:68:1e:7b:3a:c1:c4:d1:53:
43:5a:64:24:2d:76:b8:23:76:7f:62:2c:97:2f:fa:
ac:c1:ea:20:3f:6a:5a:20:a0:28:6d:b4:11:82:cb:
09:48:e1:2d:c0:91:5c:2a:27:f4:70:d5:92:c3:70:
ec:4a:53:0d:93:dd:1c:b8:09:be:ef:f5:fd:b9:c3:
2b:ca:3b:1e:b7:0b:58:4e:ec:a7:d0:1b:c8:a4:64:
bd:8f:6b:11:16:cc:49:c5:d3:4f:c5:11:cf:c0:d6:
96:7d:ca:8d:53:58:94:5d:49:0b:23:62:77:b4:2c:
24:71:c1:d3:97:d3:94:39:b7:a8:e5:84:29:72:55:
52:30:8e:85:06:33:d8:f4:22:1b:2a:50:13:6c:12:
b9:6f:c0:b0:6e:c5:fe:00:d9:83:ac:2f:91:a1:79:
73:8b:fe:4f:b6:5e:5d:7f:88:dd:89:5f:31:05:74:
c2:57:69:51:27:52:2e:5e:da:8b:b0:f2:6e:9d:1b:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:75:BD:E8:45:57:37:FF:AF:1E:D5:C9:C2:27:AB:EA:6D:16:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3_d1vehFVzf_rx7VycInq-ptFkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.136.0/24
IPv6:
2a00:cdc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
3d:56:36:39:6c:31:aa:33:c0:ac:0a:b5:11:a5:c1:e1:ec:a0:
3d:28:42:4a:4d:85:81:b1:a0:f0:17:2d:10:ae:bd:2b:e3:c8:
9e:df:58:34:1f:b9:3b:95:2c:01:00:ea:25:16:19:e6:2e:31:
3e:92:6d:33:a3:9f:46:00:f2:fc:51:75:13:6e:19:16:ad:5f:
bb:9a:da:5d:b8:b9:38:8d:27:15:db:1e:e1:de:4b:34:26:18:
6b:84:e7:74:f0:83:bb:85:2f:47:22:1c:37:70:4c:ac:a2:87:
15:7f:dc:f3:30:c7:03:ee:59:5f:f0:3e:7f:8f:3b:ab:80:08:
00:bb:2b:54:ef:da:7c:87:2d:f7:56:a0:4e:2b:c5:14:c7:c6:
53:81:91:a5:52:e3:d2:fd:0b:44:da:67:04:3a:1d:ce:f0:f9:
f2:a2:05:86:55:dc:70:7e:d9:8f:7e:cc:af:2f:e0:89:a8:74:
6b:04:3a:d6:bd:f5:2c:c8:7d:02:4b:6c:51:10:ff:b4:cc:26:
14:29:73:ac:a5:36:91:06:c3:a7:3e:12:16:fe:fc:44:ca:a9:
54:c1:f0:b0:d9:92:bf:bc:99:f0:ea:4a:bf:2d:14:11:a3:7f:
24:9b:22:09:08:87:45:36:c9:4a:f3:36:92:a1:20:d8:2e:b5:
93:5e:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org