Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3vP-0-1OEnTC61Tf5hnbCBAwfpM.roa
File: 3vP-0-1OEnTC61Tf5hnbCBAwfpM.roa (raw, json)
Hash identifier: 1YHBTP13i/rJ04he3uJr0PoUfrPHNZz4kI2Gqn3ffcA=
Subject key identifier: DE:F3:FE:D3:ED:4E:12:74:C2:EB:54:DF:E6:19:DB:08:10:30:7E:93
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B04E53F1666773F8ACBC666C432A4
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3vP-0-1OEnTC61Tf5hnbCBAwfpM.roa
Signing time: Sun 01 Jan 2023 13:35:05 +0000
ROA not before: Sun 01 Jan 2023 13:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41503
IP address blocks: 194.209.23.0/24 maxlen: 24
212.243.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:04:e5:3f:16:66:77:3f:8a:cb:c6:66:c4:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=def3fed3ed4e1274c2eb54dfe619db0810307e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:b9:dc:bb:1a:f8:e9:7c:cb:dc:07:6f:25:
72:c6:79:16:a0:7f:83:1b:d9:9d:34:c9:3b:0a:ae:
75:9c:36:b6:f8:69:d2:1c:e2:37:65:e2:a8:ab:29:
52:ec:ba:f1:c5:7b:66:fa:57:3a:c5:0c:8a:f9:c7:
b7:08:40:19:3c:b2:21:1e:49:0e:e1:b9:8f:02:50:
4a:2c:c0:1b:69:0f:0c:21:e6:d9:07:d6:dc:3c:53:
2e:28:79:32:8a:ea:f5:e4:4b:82:d7:42:ed:41:27:
a9:b8:03:77:4b:75:70:c8:9b:1a:ea:27:1f:dc:94:
3f:11:12:b8:37:9e:b1:69:62:6f:73:3a:a3:c5:65:
38:9d:4f:30:b6:20:6a:b0:4b:f6:c5:af:22:06:ed:
81:9f:ad:26:dd:cd:55:67:93:1d:f2:10:4d:b4:b9:
0b:cc:f1:d7:70:f3:9c:b9:22:7e:8c:7a:a8:16:43:
de:b3:33:12:ba:20:9e:90:3f:6c:46:cc:0e:f9:cd:
e4:20:c6:75:68:04:98:e4:84:cf:fe:69:b8:55:cc:
8f:cc:08:37:04:67:85:d8:04:10:f7:6d:fb:4e:c8:
94:ab:3f:e9:b1:2d:c0:a1:d4:49:23:f2:1f:a0:4e:
bf:fb:8b:76:d4:ee:da:db:9e:ad:c6:0f:19:dd:65:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:FE:D3:ED:4E:12:74:C2:EB:54:DF:E6:19:DB:08:10:30:7E:93
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3vP-0-1OEnTC61Tf5hnbCBAwfpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.23.0/24
212.243.33.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b3:c5:70:e9:3f:10:32:4e:97:18:9c:51:e6:24:21:51:0a:
76:73:39:97:4c:99:26:cc:6e:00:cc:5a:a5:5f:b5:d9:87:f2:
87:ec:f9:c1:cc:36:12:cc:9e:9d:48:5d:6f:d6:6f:81:76:49:
b8:d0:c5:b7:ee:76:a8:5b:f2:a1:92:fd:bb:41:e7:61:7a:83:
18:e6:17:19:68:a4:63:be:c3:e5:ad:0a:e7:ed:88:c9:90:94:
7d:ba:a1:9d:d3:cc:ef:f3:a3:85:95:0d:16:6d:59:ce:55:c1:
90:a6:8a:07:3d:3c:e8:56:5f:93:4a:7e:88:8e:19:9d:c6:b0:
c1:51:81:db:41:5b:ee:04:18:cc:e7:4f:8c:3f:c6:65:fa:4a:
27:29:1c:6a:18:cf:50:fd:1d:d8:91:fe:18:31:49:33:de:34:
91:10:6a:c7:12:31:91:6e:32:7f:fd:74:b4:ff:f9:82:b9:85:
33:7b:22:7e:4e:1c:a8:49:f2:3e:b6:75:6d:8b:5e:7b:bb:fd:
29:a6:24:46:4a:94:0f:f4:d4:65:f7:44:09:84:02:82:ae:b6:
bc:78:02:73:3c:04:52:de:d6:95:8f:11:ad:d7:e4:f5:0e:43:
4c:ed:ad:10:6c:df:8a:20:8e:18:d2:5a:92:f1:2f:68:3c:43:
3d:4f:69:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:34:27 2025 by rpki-client