Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/3NwkStimSjFNge0aZ9NaUS5giFg.roa
File: 3NwkStimSjFNge0aZ9NaUS5giFg.roa (raw, json)
Hash identifier: PPwLZ4AnC6UKu85NGMP0rz0aNkxac7tG0MgXSbfpewQ=
Subject key identifier: DC:DC:24:4A:D8:A6:4A:31:4D:81:ED:1A:67:D3:5A:51:2E:60:88:58
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 02DA61D8
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/3NwkStimSjFNge0aZ9NaUS5giFg.roa
Signing time: Tue 12 Apr 2022 15:49:34 +0000
ROA not before: Tue 12 Apr 2022 15:49:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.46.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47866328 (0x2da61d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Apr 12 15:49:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcdc244ad8a64a314d81ed1a67d35a512e608858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:35:2d:74:85:71:cd:e2:94:1c:d6:66:1e:
5a:4e:67:4c:55:06:99:36:83:29:87:91:db:73:fe:
d5:5f:a6:87:83:3d:4e:15:0b:8b:b6:7a:a8:77:ca:
ff:7b:b2:62:60:af:0f:56:ff:5e:6b:43:f3:58:bb:
7c:cd:e4:d8:3e:51:dd:6b:67:65:81:b3:ae:51:b3:
79:63:c9:f9:a4:1c:3a:c2:00:7f:67:11:e8:30:93:
5d:03:47:fc:9e:6b:73:65:12:73:fa:53:bc:45:c3:
20:98:a6:e9:67:04:e7:37:88:bf:27:d6:2f:27:2b:
84:24:ac:eb:9d:db:97:22:3d:3e:55:47:de:b3:f5:
28:c3:62:9a:3b:f4:66:2e:8d:62:e7:81:cf:dd:c1:
d7:a1:80:07:a4:18:7a:3d:5f:ed:34:d6:70:5e:33:
9f:5e:64:4d:b2:10:7d:80:3e:2d:c9:64:4e:08:f9:
35:2a:b2:ef:3c:c6:22:f1:c0:8d:82:63:b2:f7:84:
4f:a4:6e:19:bb:72:2d:e1:2c:df:ab:67:de:ed:52:
86:f1:57:05:2d:7d:c1:73:40:4b:70:7b:cf:70:23:
91:5e:f1:d6:87:1b:4f:51:f5:c4:66:91:39:ba:5f:
31:da:c7:e3:93:2b:d3:c7:86:6b:4a:6e:bb:bb:d3:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:24:4A:D8:A6:4A:31:4D:81:ED:1A:67:D3:5A:51:2E:60:88:58
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/3NwkStimSjFNge0aZ9NaUS5giFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f3:12:8d:34:a8:bd:c0:e3:51:76:b9:f7:eb:3f:fc:75:8b:
3c:28:21:e9:09:f1:56:a5:1d:2a:72:8f:88:db:a0:ca:b2:03:
a8:2e:51:e9:c3:e2:43:ef:98:f6:d3:4b:09:51:fc:cb:6c:5b:
ba:bf:62:3b:be:f2:1b:11:2f:53:05:bb:13:4a:cf:d2:cf:f0:
8f:69:d4:ac:ac:f9:af:33:16:83:71:7f:a9:29:b4:0a:62:91:
f6:cc:eb:e7:d9:14:d6:7f:c2:74:65:9d:e4:44:e3:e6:76:d0:
61:5e:8f:20:f0:d6:9b:59:0d:5c:94:59:54:2b:3f:88:61:bd:
6f:78:0a:1e:45:59:32:68:e0:ad:15:57:c3:fd:b7:b4:f7:0c:
1b:1c:0d:2d:5b:51:f2:c5:8a:db:9b:77:35:9e:29:40:81:a0:
81:74:21:69:b4:80:89:2c:3b:20:af:85:58:39:43:58:cd:09:
1b:fc:b9:ba:de:6e:4a:d0:6d:69:bc:ba:40:b5:c3:58:8c:a6:
74:58:88:bb:bd:cb:59:d0:97:87:af:14:33:99:a0:af:76:5a:
51:eb:42:d2:6e:fb:be:b1:96:59:a7:90:77:86:94:7f:77:f2:
f1:88:ef:bd:2a:a2:56:ca:22:e3:c3:64:de:e5:08:3a:19:9e:
0f:e8:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:13 2024 by rpki-client on console-ams.rpki-client.org