Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3EhnGsHe7OPd0dvZnEWoe9p-8pI.roa
File: 3EhnGsHe7OPd0dvZnEWoe9p-8pI.roa (raw, json)
Hash identifier: HVDw/lZz4Yll8E47wOUS2Amx1M5fei3FY4YES2RjvnE=
Subject key identifier: DC:48:67:1A:C1:DE:EC:E3:DD:D1:DB:D9:9C:45:A8:7B:DA:7E:F2:92
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01849AC77E327982AF5A8BBB080A1ECAFC9F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3EhnGsHe7OPd0dvZnEWoe9p-8pI.roa
Signing time: Mon 21 Nov 2022 15:21:16 +0000
ROA not before: Mon 21 Nov 2022 15:21:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 213.209.129.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:c7:7e:32:79:82:af:5a:8b:bb:08:0a:1e:ca:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 21 15:21:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc48671ac1deece3ddd1dbd99c45a87bda7ef292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:d7:14:2f:10:8f:df:4d:3e:6b:ca:02:28:
1d:75:4a:b1:b1:45:b0:d2:06:52:6d:d0:4d:fd:a7:
99:bc:76:be:13:ba:4c:98:1a:90:d9:16:05:06:67:
7c:c8:4a:90:76:fb:1b:fb:1c:c2:87:c7:31:0d:45:
03:70:fe:b3:b1:9f:9c:b5:21:30:0c:49:56:fe:be:
52:13:4c:0b:e8:7d:66:df:cd:a4:48:6a:8d:1d:fa:
a9:8e:c8:8b:73:dc:53:ba:93:eb:85:7d:ae:a1:a0:
a2:b3:c2:3e:ba:57:77:7d:7d:17:0b:a5:dc:3b:7e:
48:96:fd:57:2c:b9:d0:0e:47:56:d5:10:fe:ec:c1:
c6:3e:50:b4:ca:f4:75:3b:e1:a6:a8:c8:27:05:52:
60:bf:bb:95:36:4b:c7:e5:03:7e:e9:ab:24:94:09:
24:9f:86:cc:31:22:69:ce:db:d7:b6:72:d8:66:cc:
71:0b:2f:01:f8:54:dd:71:94:08:ce:b9:9f:7f:d6:
d8:6f:59:e3:5f:3d:da:93:1c:a2:b6:80:f4:17:9e:
51:66:47:1f:9b:30:d5:3c:9d:ed:9e:f4:0f:22:e6:
7f:f4:9b:2c:00:2c:f7:9d:16:a8:c7:32:ce:28:86:
e5:fd:ae:9e:d3:29:ff:a8:99:8d:8a:4b:27:9e:7f:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:48:67:1A:C1:DE:EC:E3:DD:D1:DB:D9:9C:45:A8:7B:DA:7E:F2:92
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3EhnGsHe7OPd0dvZnEWoe9p-8pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.13.0/24
213.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
31:dc:a0:5e:2b:64:01:63:83:98:4a:93:85:9e:c0:9a:05:d1:
c1:a9:50:c4:cc:db:4c:d0:d3:6c:32:5c:2e:c5:cc:13:1b:39:
63:62:cd:3c:f8:bf:cb:11:be:ac:13:b4:19:7a:1f:4c:a5:af:
5d:cb:e4:78:c2:1b:2d:88:8a:72:a8:0a:3d:76:e3:50:24:5d:
55:ad:42:ef:ca:af:72:eb:e3:58:e8:df:b7:8f:7a:3d:c0:c2:
62:3a:57:2d:ce:ac:64:ce:7a:ff:80:e2:9e:df:87:14:73:d9:
7f:75:d6:a2:ad:56:b6:67:e6:d5:8e:e3:64:82:22:0f:e7:58:
fc:f6:b0:9a:75:de:95:45:af:6a:09:0c:bf:5a:87:a3:33:b7:
51:83:f6:1b:95:b5:51:26:b4:a9:91:e5:d2:b5:23:b5:4e:dc:
b3:2a:cb:ed:9c:db:f8:c2:df:5f:6b:79:f0:e6:03:e8:a1:06:
09:41:5c:c4:fb:81:00:2b:57:3c:3e:ca:54:7d:83:eb:13:29:
2e:5b:83:8d:a5:81:43:bf:2e:4b:44:76:2e:4e:db:70:e4:7f:
68:ba:0e:9d:22:f1:6e:58:04:17:91:2f:c6:0d:7a:67:c1:a5:
9a:0f:1d:1a:2d:2e:bc:44:eb:84:9a:3b:32:4c:a6:51:16:15:
93:72:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org