Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/3ajmkRaiFD8WbESmHfqsZOwCbzc.roa
File: 3ajmkRaiFD8WbESmHfqsZOwCbzc.roa (raw, json)
Hash identifier: 8UcKxD3Af8PItcz260fi8TrHYkUSsYp6hbkvrKpXmtc=
Subject key identifier: DD:A8:E6:91:16:A2:14:3F:16:6C:44:A6:1D:FA:AC:64:EC:02:6F:37
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 37769095
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/3ajmkRaiFD8WbESmHfqsZOwCbzc.roa
Signing time: Sat 01 Jan 2022 14:03:56 +0000
ROA not before: Sat 01 Jan 2022 14:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60261
IP address blocks: 178.79.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930517141 (0x37769095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 1 14:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dda8e69116a2143f166c44a61dfaac64ec026f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:66:48:b2:1c:0f:c8:08:3d:5c:2a:93:52:
7a:92:1a:2e:f8:93:6c:06:d9:c3:a0:ec:70:aa:d9:
50:a0:ae:43:b0:93:c1:43:5d:7d:d0:7b:ad:44:50:
18:5e:eb:25:08:69:0c:fa:1c:0b:1c:f0:de:3f:5e:
b9:2a:5b:40:be:93:94:91:e5:0d:90:a1:43:1f:61:
6a:5a:74:a0:06:e6:ba:61:52:54:f0:12:9b:45:ba:
f5:ba:a6:1c:81:c9:71:a2:01:3f:6d:4f:f0:87:5d:
e0:c6:77:e3:49:91:a3:b7:c0:5d:b1:3b:2f:e5:40:
c7:76:ee:42:b7:61:cd:ea:17:71:17:52:de:1c:46:
3c:a5:a8:59:c4:f8:33:25:b4:2e:79:e7:4e:bd:a7:
4b:02:2e:7d:0b:3a:a5:1a:a4:fa:11:52:6a:57:0d:
4f:f6:63:11:da:c1:94:e3:38:9d:2a:f7:a9:23:4e:
4b:ed:8e:1a:07:b0:da:e9:7c:3b:21:4c:2e:07:b6:
5c:14:7f:e6:62:3d:36:4a:e2:94:bc:d8:dc:69:69:
a1:28:55:31:6c:80:33:ba:b8:8b:7e:5b:04:55:bd:
a8:db:eb:90:32:c5:8c:35:a6:d9:71:87:6c:fe:06:
cd:46:d3:d1:b2:7a:40:e3:1a:1b:90:97:3e:87:a1:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:E6:91:16:A2:14:3F:16:6C:44:A6:1D:FA:AC:64:EC:02:6F:37
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/3ajmkRaiFD8WbESmHfqsZOwCbzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.79.216.0/23
Signature Algorithm: sha256WithRSAEncryption
af:09:25:b9:fe:85:2e:b0:f7:1a:4e:a1:67:15:3e:2b:21:93:
d4:4b:b1:57:74:65:e2:0f:e3:73:ac:dc:66:e2:ce:14:88:d9:
4d:08:5c:5c:f0:6d:35:8d:9f:fb:5d:13:1a:9d:63:2c:f4:93:
d0:5f:83:ca:ed:55:4a:61:31:58:86:9a:33:30:49:34:2a:3c:
d2:79:35:d4:b6:a3:55:fd:8b:01:41:88:88:74:42:33:27:56:
8d:02:c9:fb:c4:ef:b4:72:44:91:08:c4:7c:37:c3:3b:65:70:
d5:b5:9e:83:70:1a:b7:ff:47:48:d6:bd:f1:d1:c8:2c:8d:c1:
c9:ba:79:ea:b4:ba:d5:76:24:1d:39:4c:14:fa:20:27:36:b2:
26:5e:d4:d6:92:52:c3:87:15:3e:2b:4f:1e:c7:2a:6b:39:63:
d1:9a:65:7d:d3:a2:83:25:56:9d:94:4e:cf:79:8b:18:97:d6:
bd:a6:b4:58:d0:29:7d:71:6c:04:c6:56:17:ef:63:f8:45:c3:
ed:eb:a6:2a:c9:a8:ed:d3:55:ac:de:34:3c:6e:a4:53:8e:83:
d6:eb:49:d3:7f:c1:60:48:d4:94:7d:ad:de:dc:9b:22:d3:e4:
5f:6a:52:da:1b:65:b4:2f:6d:9d:3a:70:15:67:d0:ea:3e:fd:
65:71:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org