Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/3snhnk_NDAKGmnvG_GAYXZS9YOI.roa
File: 3snhnk_NDAKGmnvG_GAYXZS9YOI.roa (raw, json)
Hash identifier: aoN4fxUzug6Wh1auhaYWmKNmqtAc61H7Qsu/9kVC508=
Subject key identifier: DE:C9:E1:9E:4F:CD:0C:02:86:9A:7B:C6:FC:60:18:5D:94:BD:60:E2
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 05D2EA56
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/3snhnk_NDAKGmnvG_GAYXZS9YOI.roa
Signing time: Sat 01 Jan 2022 13:01:27 +0000
ROA not before: Sat 01 Jan 2022 13:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.151.99.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97708630 (0x5d2ea56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 1 13:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dec9e19e4fcd0c02869a7bc6fc60185d94bd60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:22:a8:90:e5:5e:7c:e1:0c:cf:f4:1b:fa:
96:00:9b:a9:03:8b:32:01:db:4b:67:c3:ec:3c:05:
1e:5b:5d:60:55:ba:c4:a1:97:57:f9:20:9a:51:d8:
c7:04:7b:f7:dd:e6:6f:c5:54:b3:26:4b:64:9c:e5:
3a:65:3b:a2:b9:db:fe:8e:cb:f2:c9:84:55:2e:1c:
03:83:29:61:63:43:f0:53:a5:e2:25:b7:32:b2:16:
dd:79:c4:ec:b2:71:5f:fb:a7:ca:89:a5:79:be:d5:
9c:91:3c:7a:d9:03:ea:87:99:09:ab:fc:1a:92:b5:
15:22:ee:9b:b3:9d:48:1e:dd:4b:0f:f8:ba:b5:e1:
ea:54:bb:41:56:0f:0d:8c:41:03:68:20:bf:8d:53:
ad:ee:ab:7d:6c:ba:53:01:60:d8:e4:53:4a:7e:75:
fb:75:76:fe:8f:36:b5:a6:b4:3e:4b:3e:ba:86:a8:
39:52:91:ca:ca:6d:d6:e6:b3:a7:61:4c:c6:25:ed:
ec:41:6f:b0:cd:0c:86:74:2a:4d:bd:81:1e:a9:63:
e2:f0:12:5f:4f:6d:cb:cb:93:7c:64:ec:6f:db:22:
80:b4:42:63:8b:b5:df:8f:0e:d6:3e:e5:8d:06:33:
79:1a:7f:6b:ec:9f:7e:57:36:73:d6:6a:b8:86:24:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:E1:9E:4F:CD:0C:02:86:9A:7B:C6:FC:60:18:5D:94:BD:60:E2
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/3snhnk_NDAKGmnvG_GAYXZS9YOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.99.0/24
94.137.72.0/24
94.137.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bd:ba:39:8c:16:7d:c9:2e:0d:e6:db:ce:5f:d4:49:39:cb:
9c:20:c2:b8:6f:35:27:21:f2:69:87:f2:1d:e2:11:d7:92:3b:
fb:18:0b:27:56:e1:c9:96:3b:3e:1f:22:48:38:de:fe:4d:50:
fc:ec:27:59:f2:a3:e7:15:b9:9d:56:99:4d:74:3f:e5:57:c5:
e8:5c:5b:2f:16:21:9d:40:f1:92:ba:4a:0e:16:06:75:93:c3:
88:f0:02:dc:45:3d:36:c9:9e:6e:16:e4:3f:49:88:5a:9e:7d:
13:1f:ba:49:dc:c1:db:a3:87:54:f9:6b:23:4c:bd:02:60:0b:
3c:4b:fb:dd:03:b1:e0:8f:f7:6e:2b:90:d9:ec:cb:9f:05:44:
99:80:78:38:70:21:2d:8c:d3:0b:ae:5a:2b:23:5f:8c:e1:15:
48:2f:db:c9:b4:19:56:7a:01:34:08:76:95:62:41:ac:6d:bc:
0d:06:a3:0f:40:3e:3e:9c:f4:d1:54:49:ec:2c:dd:96:df:51:
f8:c4:b0:6b:ff:50:eb:19:e7:0b:11:67:ba:90:02:64:0e:6a:
5b:e5:b0:ee:1a:f3:99:1f:52:af:db:9b:9a:6a:a2:c9:6e:16:
9a:6a:b0:c7:23:cc:88:1a:58:74:81:67:2a:11:5b:56:71:8a:
2f:25:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org