Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/3p8sf2BayDnkbtzY2INyM9qMgkU.roa
File: 3p8sf2BayDnkbtzY2INyM9qMgkU.roa (raw, json)
Hash identifier: w1bXbnvjZ4zM6EULFPmbUDF+wglbOt19VWpQd895CEo=
Subject key identifier: DE:9F:2C:7F:60:5A:C8:39:E4:6E:DC:D8:D8:83:72:33:DA:8C:82:45
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 0ACB4C0B
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/3p8sf2BayDnkbtzY2INyM9qMgkU.roa
Signing time: Wed 04 May 2022 19:48:45 +0000
ROA not before: Wed 04 May 2022 19:48:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8468
IP address blocks: 93.95.8.0/22 maxlen: 24
93.95.12.0/22 maxlen: 24
151.236.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181095435 (0xacb4c0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: May 4 19:48:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de9f2c7f605ac839e46edcd8d8837233da8c8245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:5a:b9:3f:b1:ac:b1:a7:25:b7:b1:70:6e:
cb:11:fa:e2:01:00:c9:d5:93:e3:57:b7:91:62:07:
d2:72:b8:29:be:c7:cd:3f:54:2e:ee:53:40:df:6c:
b8:7a:32:86:6f:af:b6:ed:df:d2:9e:70:09:e6:9f:
53:e8:4c:2a:41:bb:e0:40:97:6c:9f:61:42:da:e8:
10:18:6d:e0:60:3e:2a:54:02:94:bf:7a:18:90:98:
4a:8e:c6:70:7e:a9:e4:c5:2a:30:16:d5:ff:b9:46:
b2:38:b2:f7:99:12:2e:ab:bf:2a:c1:f9:40:b5:8f:
51:58:6c:da:47:dc:46:91:34:bf:7a:87:42:3d:f8:
b0:37:cf:74:e5:af:80:7d:ad:66:1c:39:11:5b:d4:
2b:6c:5d:e1:23:95:da:83:a4:49:97:84:87:40:b6:
8c:35:f1:6f:3f:0c:d6:9f:f3:69:4c:b0:6d:3a:f2:
37:b1:cd:f0:9c:5d:30:7b:de:94:50:6b:d3:68:65:
61:a5:93:e8:42:e9:b7:4f:73:20:24:55:61:b6:97:
ef:fd:4f:5a:a0:ea:3f:1d:77:b5:e5:ec:60:42:81:
ee:40:81:05:3a:45:21:da:a0:dc:8f:0e:d4:31:f0:
22:3f:44:a2:b2:82:b1:f6:af:09:e9:4f:86:2a:0c:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:2C:7F:60:5A:C8:39:E4:6E:DC:D8:D8:83:72:33:DA:8C:82:45
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/3p8sf2BayDnkbtzY2INyM9qMgkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.8.0/21
151.236.208.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:4e:eb:39:4d:a9:a6:d3:d0:3e:50:75:ce:d6:b8:5e:73:7d:
13:10:15:52:a7:eb:09:6a:73:2f:d3:cb:19:48:b4:05:bf:32:
e3:10:8c:c2:b4:b8:2d:28:f1:3b:6b:00:e7:b6:86:63:2e:b7:
9a:92:cc:0d:61:37:bd:52:cb:30:93:bd:fe:59:44:d3:14:7b:
40:ed:9f:b7:2e:6c:b9:8f:9f:b5:65:6c:5e:37:be:6b:57:25:
d2:40:17:75:d0:8a:21:97:7c:ea:d2:3b:31:dc:dc:05:f2:82:
99:98:ca:e4:73:f4:1e:ba:94:35:ab:36:9c:22:2b:fe:38:ca:
5c:c1:b5:16:e3:65:f0:22:b8:e4:40:96:50:7a:69:ed:8c:cb:
c2:1d:61:56:97:49:d8:83:41:0a:76:78:e7:45:9e:0e:34:b2:
e7:28:8b:1a:69:63:48:a5:c7:a3:ad:65:02:f6:50:44:ea:b0:
34:d4:23:54:62:75:10:ba:ab:a9:10:70:d9:a7:bc:c5:5b:89:
dc:c8:0c:5a:67:4e:a5:2d:38:14:20:2c:a2:31:1c:e0:ef:b3:
70:3e:1b:09:58:3f:cc:05:71:3f:1b:0d:df:4f:ee:c2:b0:a1:
a7:22:a4:32:c3:01:78:0c:d8:43:24:74:1a:9a:e7:de:69:31:
76:a5:d2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org