Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/3zUE9mwx4IXKsGI3FkqE9Dsbu3E.roa
File: 3zUE9mwx4IXKsGI3FkqE9Dsbu3E.roa (raw, json)
Hash identifier: oBgrLN7+eqlbgrpXpVuKmnIz9ETFpXhLszqdnLsJj90=
Subject key identifier: DF:35:04:F6:6C:31:E0:85:CA:B0:62:37:16:4A:84:F4:3B:1B:BB:71
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CB39314
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/3zUE9mwx4IXKsGI3FkqE9Dsbu3E.roa
Signing time: Sat 01 Jan 2022 04:59:44 +0000
ROA not before: Sat 01 Jan 2022 04:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201908
IP address blocks: 212.91.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749966100 (0x2cb39314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df3504f66c31e085cab06237164a84f43b1bbb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:45:d8:eb:98:97:cc:0f:9d:02:71:83:ce:
3f:04:00:21:47:6e:67:95:ad:d9:54:8b:0a:55:b4:
f5:7a:76:3a:47:be:9c:62:18:d7:2b:ab:cb:f1:86:
af:a7:f7:5b:22:5c:a6:0c:d2:37:d9:2f:37:76:df:
69:75:40:2e:04:ea:0d:c2:ea:eb:4c:c3:f5:98:a2:
9b:a5:67:84:bb:0f:32:f1:16:ae:73:f3:84:93:0f:
9c:9f:48:9a:a2:1f:23:09:92:42:6a:04:40:a6:84:
2e:66:5c:f9:c2:b7:b9:6f:66:ee:cc:d2:62:66:5e:
c9:42:be:e6:c1:3c:7e:42:20:29:45:17:e6:dd:88:
5a:91:50:9b:1a:0d:9c:0e:12:84:ff:6f:2d:e8:b4:
43:08:fa:cc:d7:a8:04:89:b8:f1:24:30:40:20:b8:
2a:24:99:62:27:d7:55:2a:d2:8b:dc:5c:39:35:0e:
2e:61:b8:fe:42:e8:27:aa:86:76:02:3b:f3:83:85:
90:c9:7c:56:65:73:8d:54:80:c4:6a:43:b8:b7:f3:
e4:95:39:80:5d:d7:57:84:3f:55:fc:94:0c:6e:f6:
3a:7c:97:c5:eb:5e:34:ac:9b:03:28:39:20:5b:64:
16:6e:41:b0:a0:65:10:9f:32:32:8d:31:55:57:4b:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:04:F6:6C:31:E0:85:CA:B0:62:37:16:4A:84:F4:3B:1B:BB:71
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/3zUE9mwx4IXKsGI3FkqE9Dsbu3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.30.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:de:b5:02:42:25:d3:e2:48:09:71:28:3b:97:92:8e:f7:c0:
6d:e8:33:3c:90:bd:97:8c:e3:23:39:1f:3b:b6:9d:b7:87:07:
4d:85:cf:dd:b7:25:87:a3:d2:82:ce:c3:3a:0a:54:89:8b:f3:
f9:fc:eb:e2:2e:13:0a:97:c8:7d:aa:50:d4:a7:78:0e:f4:00:
7c:dd:d9:bf:7e:2d:74:b2:8b:b7:d2:49:e0:ad:c3:4a:f5:04:
38:45:42:b9:99:b6:ea:a6:45:12:67:02:0b:63:23:0f:f6:a1:
32:6a:b3:34:df:95:0a:27:55:f2:9d:d2:6a:0b:f4:5c:c5:64:
2a:8f:3f:d0:1d:ec:85:73:0c:a7:78:32:da:00:8a:6d:69:ab:
38:93:cb:50:c6:11:93:cb:8d:97:f7:fa:eb:a5:66:ef:bc:3c:
cb:ee:fe:d4:b9:b2:cd:b2:c4:35:64:9d:29:50:40:5a:a9:04:
96:c3:11:ce:5b:0f:1c:64:e4:1e:64:63:4b:01:64:28:3c:f8:
39:cb:0a:9e:41:35:0f:ed:1c:fd:71:1d:85:3c:7f:1f:7c:ad:
f1:d2:63:bb:6c:ff:e3:bb:c0:4d:31:53:80:b2:77:39:2b:14:
fe:b5:4b:1b:2a:7d:96:c7:e1:1c:c9:36:ee:69:1b:6c:60:18:
de:e0:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:50 2025 by rpki-client