Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/3yss4k0ueos5L3JWyf0NkWwIyrE.roa
File: 3yss4k0ueos5L3JWyf0NkWwIyrE.roa (raw, json)
Hash identifier: OVjO5SR0bePnM9m4rIcfSG4glsduD00VRKy8XYRGBIk=
Subject key identifier: DF:2B:2C:E2:4D:2E:7A:8B:39:2F:72:56:C9:FD:0D:91:6C:08:CA:B1
Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial: 0169EF02
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/3yss4k0ueos5L3JWyf0NkWwIyrE.roa
Signing time: Tue 21 Jun 2022 09:55:44 +0000
ROA not before: Tue 21 Jun 2022 09:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207655
IP address blocks: 194.36.0.0/24 maxlen: 24
2a12:3840::/32 maxlen: 32
2a12:3840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23719682 (0x169ef02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Validity
Not Before: Jun 21 09:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df2b2ce24d2e7a8b392f7256c9fd0d916c08cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:3d:09:b0:53:00:cf:6c:9f:d7:08:09:9d:
82:2b:07:1f:af:da:c1:d9:c6:bb:98:72:57:72:29:
b9:09:8f:12:d7:75:23:2b:6f:bf:5d:71:47:6c:65:
05:01:be:28:5e:a8:90:96:1d:05:af:19:a8:d0:f8:
93:9e:fa:54:36:e4:fc:cc:80:01:81:2a:e6:91:09:
a2:fb:e2:87:c8:2a:bb:1f:e4:21:60:63:26:58:fe:
e2:d6:18:e2:a8:b9:13:f4:49:09:d7:9b:c8:af:cf:
0f:a3:93:93:44:85:4c:89:f8:e6:86:15:d9:ba:51:
cf:59:04:e1:39:8b:90:f9:8b:66:b8:59:44:64:f1:
1e:17:f8:fa:3e:07:7c:7a:d8:e7:e5:af:14:66:a2:
98:e7:05:33:56:e0:1f:6a:dd:b8:61:37:9e:f9:bc:
ca:f3:4d:28:b3:5e:5c:4a:4c:04:71:59:cf:f0:c4:
d9:9f:23:3a:64:05:50:db:15:fd:42:de:c4:31:4c:
07:d2:69:3e:e1:ed:f3:1b:12:b4:70:1a:ef:0d:3a:
02:dd:18:2d:5c:63:52:5a:cb:fe:6f:17:c4:c7:04:
9d:2f:ad:ef:d0:35:d6:99:ad:12:76:d6:a0:f6:d5:
ce:7a:b2:17:9b:4a:04:23:bb:09:01:63:08:41:63:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:2C:E2:4D:2E:7A:8B:39:2F:72:56:C9:FD:0D:91:6C:08:CA:B1
X509v3 Authority Key Identifier:
keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/3yss4k0ueos5L3JWyf0NkWwIyrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.0.0/24
IPv6:
2a12:3840::/29
Signature Algorithm: sha256WithRSAEncryption
35:e8:1b:7e:a7:1c:ad:07:db:23:88:82:b8:cd:9c:5a:d1:66:
4b:78:84:9f:00:59:ed:21:3d:09:d0:fb:18:a4:82:c4:1e:3c:
33:13:0f:25:79:26:e8:bb:13:b0:5c:33:6f:98:a2:5c:cc:fe:
f9:e1:79:44:a5:d1:c2:c9:fa:32:e2:94:bc:16:0c:dc:f5:5b:
7f:e5:15:96:ca:13:26:b8:9a:d1:19:af:3d:3f:76:3b:0f:e1:
21:20:98:c5:a1:85:b3:be:b6:19:51:b5:63:86:15:24:55:4e:
d7:91:a4:f0:0d:3b:7e:0a:be:bd:4d:53:f6:4d:e2:e9:35:b8:
f7:8d:1d:d0:a0:55:c4:0f:7b:40:1d:7b:a8:20:6f:35:95:61:
b4:7b:b2:09:f9:1a:c4:d6:43:e5:cb:d0:60:00:b3:ee:ff:b3:
b3:62:a6:ad:2b:ee:61:68:f2:df:f2:bf:3d:9b:28:46:7a:e7:
47:9c:bc:a9:d1:b4:72:c9:00:59:80:20:f6:5b:32:20:37:c3:
88:18:06:a8:9c:fd:59:eb:2f:85:73:28:09:35:f6:26:96:52:
d6:c3:f7:48:07:a1:01:fa:a0:42:6b:1e:2b:74:e8:bb:4c:01:
6f:2c:ba:2d:01:1e:0c:c1:76:1e:61:a9:f1:24:e2:77:46:c6:
2c:4a:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org