Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/dz3Os_VZa_R2rmrvGyTohqK2JhU.roa
File: dz3Os_VZa_R2rmrvGyTohqK2JhU.roa (raw, json)
Hash identifier: AReY6umfVDuYLwUksK9Z5vvPOY40W1fraxL5Jve4vfI=
Subject key identifier: 77:3D:CE:B3:F5:59:6B:F4:76:AE:6A:EF:1B:24:E8:86:A2:B6:26:15
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 045CDD9C
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/dz3Os_VZa_R2rmrvGyTohqK2JhU.roa
Signing time: Thu 03 Feb 2022 11:39:44 +0000
ROA not before: Thu 03 Feb 2022 11:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11325
IP address blocks: 139.28.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73194908 (0x45cdd9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Feb 3 11:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=773dceb3f5596bf476ae6aef1b24e886a2b62615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:5a:62:ed:b4:a1:04:11:d3:7e:71:2e:6f:
df:eb:be:c7:bd:e1:6f:38:fa:4d:93:82:01:cf:30:
ba:68:c0:91:5f:b6:5a:b2:fe:7f:e5:25:a4:e1:7c:
6e:b0:31:1a:a5:89:e2:08:e5:d2:fa:18:b8:df:1a:
24:1d:0f:a7:fd:38:15:89:ad:86:ca:74:ff:b2:b0:
86:4e:80:41:d1:7d:e3:96:5d:f7:fe:0e:99:18:ee:
18:48:1d:d2:4f:f2:c3:8c:52:87:b2:2f:29:f4:db:
dd:88:f6:5a:14:9b:7b:c9:92:20:6a:12:3f:30:32:
28:93:da:0b:85:b7:61:aa:14:19:8a:47:f9:22:ec:
4e:8e:ba:e8:14:f9:4c:29:15:67:71:69:05:ae:a6:
b3:12:b8:df:d8:66:77:1e:2a:dc:f3:54:e9:55:22:
b5:0a:b8:1b:c1:d4:59:69:05:76:4d:7b:d1:9b:b5:
2a:0d:13:0e:00:aa:d6:d8:3b:3c:78:09:43:29:d5:
36:e4:56:d2:74:b1:12:18:3f:c4:7b:ad:aa:aa:8d:
63:a1:36:1a:17:a2:49:83:74:d7:3c:f5:70:42:a6:
9e:2e:25:05:a5:0e:3c:76:36:b2:37:b7:f0:ae:1b:
18:8c:e8:20:c4:e2:2f:d5:26:42:41:f2:69:21:64:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:CE:B3:F5:59:6B:F4:76:AE:6A:EF:1B:24:E8:86:A2:B6:26:15
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/dz3Os_VZa_R2rmrvGyTohqK2JhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.227.0/24
Signature Algorithm: sha256WithRSAEncryption
51:47:c0:07:aa:ee:06:98:b2:a0:b3:16:92:f0:a6:d2:0f:d1:
f8:60:7b:5a:3a:d9:45:85:db:79:09:a7:12:fd:b5:e9:6b:ef:
af:77:29:07:43:54:80:c1:93:a8:42:ab:6f:c9:c9:1c:09:c4:
91:d4:46:eb:d0:ed:bd:10:90:d0:3f:7a:7b:49:33:32:9b:6b:
f2:f9:6b:5a:c4:49:89:01:43:f1:9b:da:56:a7:22:27:26:8f:
d0:52:ba:38:c1:50:a2:77:25:c6:33:2c:3c:a5:50:38:88:5c:
50:2a:d3:6e:65:4a:d7:ea:09:b2:92:43:40:1b:be:55:69:b6:
d1:84:22:55:61:a0:bd:66:a3:41:a1:64:72:5e:0e:9e:64:15:
04:d9:b2:5d:2b:2d:39:b4:e1:77:68:24:c8:ac:6b:b9:d6:f4:
03:2e:5a:d6:70:94:d9:20:44:4f:28:72:d3:a8:98:5c:ef:d2:
95:46:25:d4:fb:5e:99:63:81:fa:1c:db:60:52:ef:36:1a:a7:
0e:a3:20:ff:34:44:fc:cc:54:e6:73:0f:c3:18:fc:90:fe:2d:
ee:1b:78:ec:44:85:0b:bf:84:2a:2f:ac:9e:44:a0:c0:2c:d9:
95:a7:62:55:c1:00:b4:89:ec:26:30:25:76:33:e1:75:72:de:
4d:a0:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:30 2024 by rpki-client on console-fra.rpki-client.org