Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/3G_vBjJ3t-8EY3s4hT5fCKetirc.roa
File: 3G_vBjJ3t-8EY3s4hT5fCKetirc.roa (raw, json)
Hash identifier: 3WBjuZCCjCdJrFphIRRcN87Ny0rVH2d03HZpV2deUwE=
Subject key identifier: DC:6F:EF:06:32:77:B7:EF:04:63:7B:38:85:3E:5F:08:A7:AD:8A:B7
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018438B758B5D95FEE49073C789730730EC6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/3G_vBjJ3t-8EY3s4hT5fCKetirc.roa
Signing time: Wed 02 Nov 2022 14:20:50 +0000
ROA not before: Wed 02 Nov 2022 14:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:b7:58:b5:d9:5f:ee:49:07:3c:78:97:30:73:0e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 2 14:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc6fef063277b7ef04637b38853e5f08a7ad8ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:05:31:ee:3f:2c:e0:2a:b4:a2:59:c1:e2:
98:e1:a9:50:6b:f6:ef:aa:f2:d9:b3:e9:9a:07:11:
fc:52:77:12:63:59:12:dc:6a:0b:01:d2:e3:22:55:
3a:71:7b:b1:2f:e9:ee:41:d1:40:14:fa:95:8f:f2:
94:31:79:9a:cc:4d:eb:ae:40:1a:9c:79:cc:41:57:
c4:3c:bb:51:4a:15:c6:95:bc:03:c2:1c:8f:dd:bf:
76:7e:c4:07:26:35:48:5f:86:8a:29:ac:f7:2c:37:
47:52:7f:63:6e:b7:0a:78:54:49:06:50:45:22:1d:
9a:1e:0e:7a:c6:40:c5:1d:d7:8a:e9:43:ff:7f:d8:
c1:69:12:b2:cd:20:fd:f3:96:46:8b:8d:ec:4a:39:
5b:5e:f3:ab:f6:86:61:06:d9:40:14:73:54:c7:17:
d1:47:b6:99:c0:5d:db:0e:79:2f:c4:9a:6c:d8:20:
c5:48:76:7f:6f:c2:c6:8a:e2:5c:da:b1:3f:16:31:
33:3f:b9:41:57:11:ca:16:f1:2f:46:2d:bd:90:47:
c3:e4:49:ee:6c:13:99:e1:02:4a:a3:25:d6:a9:15:
1f:d1:0b:fc:c0:65:af:50:91:23:bc:52:fa:3a:17:
67:1c:66:ce:60:41:2f:9f:9d:63:23:29:6c:c8:93:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:EF:06:32:77:B7:EF:04:63:7B:38:85:3E:5F:08:A7:AD:8A:B7
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/3G_vBjJ3t-8EY3s4hT5fCKetirc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
48:87:be:ac:22:5d:4c:44:2f:77:0b:e8:b1:64:91:33:2d:a5:
33:19:d8:34:21:d9:da:1a:b0:2a:08:3f:c3:48:f1:58:19:16:
7d:bc:a5:8f:de:08:4b:0d:32:45:49:d1:89:74:b1:c6:08:5e:
8f:73:17:8f:b8:06:22:8a:7d:5f:d6:7b:14:f0:0b:2b:1d:20:
14:92:f5:72:b5:88:f8:b9:0c:4f:82:12:1a:b9:59:4c:e7:9e:
07:94:6c:ad:c0:33:17:c8:fd:a2:42:24:a5:fc:d0:80:6b:91:
a8:b2:9a:20:86:b9:7e:f2:1d:d8:09:30:d5:06:3a:c4:bf:22:
dd:6f:7c:55:02:24:ae:df:d3:3b:89:a7:d3:74:6b:6d:d1:10:
cc:68:4a:32:3b:51:3c:7c:83:c8:63:c5:2a:cb:69:6f:bc:ce:
b2:b7:34:13:65:8a:8b:08:ba:d7:08:73:4d:2d:62:74:0c:74:
db:85:5c:e3:91:97:7e:e2:00:46:7e:11:48:82:ff:11:1b:08:
f9:c6:2e:4f:9d:08:be:f9:d5:3d:f0:3e:f2:8d:8c:5a:d3:c7:
af:9b:a1:15:a0:ed:17:ad:a5:b4:81:cb:32:60:d0:19:9b:3c:
48:c3:ba:8a:9f:50:e8:8d:cb:2e:5b:f7:2b:9e:92:89:50:81:
78:47:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org