Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3WI0GjzTwesBRmkI7r3_sanCMAM.roa
File: 3WI0GjzTwesBRmkI7r3_sanCMAM.roa (raw, json)
Hash identifier: LBje+Pejw1osJHFRQf4/d6GiOGU2Wwa0zUOl4A4K3BE=
Subject key identifier: DD:62:34:1A:3C:D3:C1:EB:01:46:69:08:EE:BD:FF:B1:A9:C2:30:03
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42AB25F2E3920E2C9C860DD25CF8E0
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3WI0GjzTwesBRmkI7r3_sanCMAM.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 94.131.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ab:25:f2:e3:92:0e:2c:9c:86:0d:d2:5c:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd62341a3cd3c1eb01466908eebdffb1a9c23003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:df:59:d4:f6:88:61:86:2f:38:2f:af:12:
6a:50:48:e0:f8:c2:91:eb:d7:49:ee:cd:09:e9:98:
15:42:75:d4:54:ad:81:2e:0a:ae:b1:40:99:c8:77:
56:fa:d3:a1:8d:14:46:d4:62:48:0c:8a:34:13:39:
77:90:c8:30:44:b2:8c:07:6c:be:d5:6d:20:75:5a:
46:73:89:33:40:ca:c4:bd:14:45:5c:9e:1b:75:8b:
5c:d0:48:5a:ac:2a:60:1b:7b:8b:99:75:23:14:fe:
99:5a:d2:2c:7e:e5:8b:e1:50:50:80:b4:87:eb:bb:
66:9a:71:4c:c8:b1:d4:05:1e:23:a5:b6:33:09:b9:
9c:fd:50:c3:f4:fc:7d:a5:61:9b:2f:50:9c:73:7d:
5c:ab:a6:36:e4:79:b5:3a:44:59:a4:62:ea:e9:b1:
92:92:e5:9a:88:90:a6:70:9e:a0:f0:03:90:33:77:
16:54:57:4e:6a:c5:7f:0c:36:64:f5:2e:cf:3b:3c:
12:9a:21:62:47:71:0a:82:64:e4:cd:c9:09:73:38:
84:ee:82:cb:e3:a7:d4:a8:de:77:e2:09:d1:34:c5:
f6:d6:02:a0:f0:eb:40:2e:ba:80:6b:91:b3:e1:62:
96:71:60:24:98:01:5b:4a:c3:88:1b:9c:a6:a8:08:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:34:1A:3C:D3:C1:EB:01:46:69:08:EE:BD:FF:B1:A9:C2:30:03
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3WI0GjzTwesBRmkI7r3_sanCMAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a0:70:28:64:4b:90:34:f9:f1:e5:ca:da:30:7d:a8:cd:51:
54:ca:06:f5:88:ca:1d:fb:89:c5:1c:92:d2:67:43:b4:d6:57:
22:71:4b:68:15:d5:b7:17:03:6e:c6:b8:eb:8c:63:cb:80:ec:
28:28:3b:de:b0:54:0b:20:38:75:97:8d:88:fc:25:4e:94:0c:
76:95:fd:4d:75:9e:de:bb:ed:29:89:d4:7d:8b:a3:be:55:e4:
f3:7d:9f:eb:22:87:03:b2:f2:d7:f8:6a:89:9c:94:5c:40:dc:
f9:8e:f4:f6:17:9a:fb:b4:d0:29:eb:2c:f6:ff:71:e9:53:a2:
f8:c6:38:8e:fb:67:9c:df:44:ea:cf:66:95:10:e8:f7:a8:0a:
1d:30:a5:d8:af:cd:84:54:9d:f6:8b:8a:c4:a6:77:19:64:62:
d2:da:0f:56:54:cf:4d:04:08:6d:41:40:eb:a1:60:b0:40:5a:
b9:e7:e2:f7:31:51:fa:b7:95:61:58:de:4e:c5:13:fd:66:0d:
de:7c:47:0d:4c:e0:d2:59:3f:8c:9a:d4:d5:eb:de:3f:7c:1c:
be:fb:eb:86:ea:3e:55:43:f5:4b:c0:29:35:c8:0b:f7:84:a2:
cb:58:6d:97:03:61:7b:4c:01:30:75:0d:15:84:0d:3a:72:e4:
81:a1:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:40 2025 by rpki-client