Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/2-Gy3YWpSB3EmI8jVzAjmIvb_tM.roa
File: 2-Gy3YWpSB3EmI8jVzAjmIvb_tM.roa (raw, json)
Hash identifier: DZcJ+NLW6HkE7Ff/NTqJgPFfF4Zx3zPPZNSOSd4Ydqs=
Subject key identifier: DB:E1:B2:DD:85:A9:48:1D:C4:98:8F:23:57:30:23:98:8B:DB:FE:D3
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 03E3CB9F
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/2-Gy3YWpSB3EmI8jVzAjmIvb_tM.roa
Signing time: Sat 01 Jan 2022 06:57:57 +0000
ROA not before: Sat 01 Jan 2022 06:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35423
IP address blocks: 82.194.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65260447 (0x3e3cb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 1 06:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbe1b2dd85a9481dc4988f23573023988bdbfed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:0f:b3:e4:cc:e4:04:30:66:8f:aa:0e:76:
58:97:25:20:d0:d3:74:4a:91:56:a0:2a:2a:b5:bd:
1d:9f:7f:ac:55:95:72:1b:a6:32:bb:0d:c1:e5:60:
74:ca:60:a9:62:78:ba:51:06:3f:52:a7:f0:9b:47:
86:f4:33:40:b3:65:c2:05:71:e5:41:2b:56:92:1f:
92:75:86:96:75:b7:24:d2:26:a7:1a:aa:e7:ba:d0:
b1:49:68:a6:cd:59:a9:bc:20:b1:c7:ce:a4:ac:db:
df:ab:63:83:f8:5c:83:02:70:ea:fa:89:af:79:56:
28:cd:66:0c:b2:56:4a:3d:34:5c:58:bc:e6:9e:a1:
7a:83:8a:66:85:cb:ea:9e:35:87:4a:ba:8a:bb:39:
a1:32:d6:79:16:85:90:5d:8e:77:2c:73:bf:95:da:
58:15:5f:03:99:c7:e9:b7:0e:f9:42:5f:9b:56:e4:
7d:96:e0:4e:6c:7f:a3:28:61:66:b1:ae:d2:d5:24:
2a:8c:e5:36:88:2d:2d:c6:99:d1:68:4b:77:b9:0b:
1a:3a:0a:8e:6e:04:d1:b2:f9:cd:f5:d6:17:51:c2:
5a:4a:97:4b:a0:3c:70:2d:d0:2c:66:f6:08:b6:03:
04:de:df:f4:8b:d7:c7:93:1e:1b:2d:32:ff:e2:f3:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:B2:DD:85:A9:48:1D:C4:98:8F:23:57:30:23:98:8B:DB:FE:D3
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/2-Gy3YWpSB3EmI8jVzAjmIvb_tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.231.0/24
Signature Algorithm: sha256WithRSAEncryption
08:19:1e:53:79:96:b3:ef:87:46:eb:92:36:04:5e:76:d3:d2:
ab:65:41:8f:86:94:00:5c:30:23:bf:d0:c4:0d:f4:71:c1:b2:
6d:93:58:3b:df:86:8d:a3:bc:3a:63:a9:3c:de:85:00:3b:72:
af:c6:9a:69:b6:0a:5a:59:bd:fa:c1:81:0e:c4:4e:c0:15:76:
e8:0b:9d:0b:f4:91:73:65:3c:b5:e0:d3:9c:da:95:88:f6:ca:
83:6c:d3:cf:d0:0a:c1:51:71:ad:29:f7:16:d4:2b:05:76:cb:
83:f5:e8:f6:c8:d0:1c:ad:ad:ab:98:51:9a:19:ea:4b:ec:78:
d2:4e:4a:9a:dd:21:48:6b:de:53:c0:54:83:cf:40:81:22:39:
a4:62:a6:62:5c:32:1e:b1:ce:3e:86:b8:26:d6:77:48:4d:f5:
52:64:bb:a0:24:5a:03:0b:5c:86:a4:77:e7:9d:b1:8b:2c:f1:
7d:d0:4c:55:fd:5f:a2:e2:e8:de:02:e3:df:ea:df:d8:db:bf:
13:07:f8:56:89:fe:1e:6f:79:3e:c4:bd:a9:84:bf:80:85:8b:
1d:8c:7f:a9:b1:0e:d6:ee:e0:95:7f:93:64:d5:44:20:13:3a:
40:8f:86:4a:e3:21:10:47:82:84:30:c6:26:33:c8:78:ea:d3:
1d:e6:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org