Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/3SCycLdVEjSoBCWSdNzEnYNbDf8.roa
File: 3SCycLdVEjSoBCWSdNzEnYNbDf8.roa (raw, json)
Hash identifier: 8ysT97n4aao3SmV94f0P0YSoyFSzh8WuqyjNvWhGB3E=
Subject key identifier: DD:20:B2:70:B7:55:12:34:A8:04:25:92:74:DC:C4:9D:83:5B:0D:FF
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 517D10
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/3SCycLdVEjSoBCWSdNzEnYNbDf8.roa
Signing time: Sat 01 Jan 2022 01:55:45 +0000
ROA not before: Sat 01 Jan 2022 01:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204357
IP address blocks: 194.114.83.0/24 maxlen: 24
194.114.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5340432 (0x517d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 1 01:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd20b270b7551234a804259274dcc49d835b0dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:d1:bc:de:40:a1:51:c7:88:62:68:46:40:
f0:c4:44:9a:71:f8:1c:4b:99:da:f3:6d:18:62:81:
73:61:d2:56:15:3f:72:0c:a4:67:e2:18:80:6e:b9:
d7:38:89:fd:a2:e1:a4:5a:34:34:e5:5e:f8:0b:aa:
a6:8b:e5:5b:ce:21:5d:b2:ab:df:7f:63:50:92:d7:
7a:d2:0d:9c:74:19:12:e9:02:59:aa:71:c6:24:cc:
41:60:7c:f5:ab:17:20:73:19:8b:67:ab:23:f2:07:
83:d5:4d:9c:33:cd:45:59:9b:d4:21:ca:84:42:20:
3f:2a:3b:d7:cc:5b:a6:20:de:60:4b:08:7d:d0:26:
4d:03:42:a6:f4:51:72:bc:49:39:2a:d2:02:02:09:
6b:39:54:da:22:79:ca:87:57:da:c4:7f:53:b1:11:
f0:d0:9c:cd:17:0d:51:ab:72:e2:c7:81:46:d1:b7:
7a:97:1e:b7:e6:36:d2:25:ef:b0:95:0f:73:58:e4:
99:49:ed:69:c7:2b:63:7c:eb:3b:1c:0a:8a:49:44:
05:70:85:62:2c:53:7b:6d:21:12:dd:8f:18:83:c2:
7a:f2:05:3c:16:b6:3e:7e:a4:6c:b6:5c:62:01:ff:
a3:e4:b6:9d:2c:c5:d7:f8:a5:fd:f1:48:0f:c6:7a:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:B2:70:B7:55:12:34:A8:04:25:92:74:DC:C4:9D:83:5B:0D:FF
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/3SCycLdVEjSoBCWSdNzEnYNbDf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.82.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:e7:17:69:f1:f9:42:a6:b1:fc:fe:37:c2:38:60:da:a7:2e:
09:9e:3d:13:a0:24:ca:77:c4:a8:0a:cf:a4:99:ec:b2:e5:bb:
39:73:04:ec:54:57:b4:39:97:b6:19:86:e2:58:48:c3:c8:0a:
15:ef:d8:ce:be:56:f8:5b:ac:85:27:bc:e0:41:2c:0e:30:8e:
41:a5:95:b4:0b:8c:9f:e0:17:db:93:50:e9:81:9f:c5:f4:a8:
74:0f:2d:88:76:a8:e3:9c:6b:65:53:ab:dc:43:24:a1:f5:5f:
17:42:ac:09:5b:08:1a:af:38:83:09:5d:f5:75:35:06:bd:ac:
8f:bc:da:0f:a4:84:7b:f0:77:53:7d:da:8a:bb:3c:8b:87:db:
80:06:ce:74:86:64:58:8e:ad:0e:bd:01:8f:bf:68:bf:de:d0:
17:19:36:6b:0a:90:9f:02:39:d5:70:7e:6b:96:da:05:96:e2:
b6:86:53:0f:79:9d:97:ae:a5:c2:fd:13:d8:14:2a:51:60:9e:
d9:41:0b:84:65:e4:f3:79:fb:3d:01:c3:b3:a3:37:13:b2:80:
09:27:ab:4d:e5:b3:84:a8:a4:aa:07:32:bc:1c:70:8b:40:42:
f0:87:fb:df:18:12:57:1a:4e:d7:a8:8b:a9:91:de:24:dc:1b:
67:8d:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:05 2024 by rpki-client on console-ams.rpki-client.org