Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/3Gm-NO1GjnACRQ63ISsLyB24n-8.roa
File: 3Gm-NO1GjnACRQ63ISsLyB24n-8.roa (raw, json)
Hash identifier: J8PPw7PYoqw2MNXwWvuZdQpUdwEv+mtkBoXFBurfIr0=
Subject key identifier: DC:69:BE:34:ED:46:8E:70:02:45:0E:B7:21:2B:0B:C8:1D:B8:9F:EF
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 071A8ACE
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/3Gm-NO1GjnACRQ63ISsLyB24n-8.roa
Signing time: Sat 01 Jan 2022 04:52:46 +0000
ROA not before: Sat 01 Jan 2022 04:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204867
IP address blocks: 2001:678:b28::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119179982 (0x71a8ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Jan 1 04:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc69be34ed468e7002450eb7212b0bc81db89fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:a6:b4:fb:08:ae:bf:1a:86:23:65:ed:52:
a5:80:73:16:a7:4d:b9:69:28:61:d8:d5:64:d0:83:
83:0e:b3:ab:f4:55:ac:7e:f4:6b:39:91:1d:6f:64:
5c:59:ee:5d:71:73:3c:0b:9b:f6:c7:fc:a8:45:fc:
9d:a3:54:9e:fb:ee:aa:01:1c:8c:73:9d:a8:64:ba:
7f:b2:76:de:53:aa:74:8c:e2:ac:06:4d:ed:49:ce:
26:10:4e:f8:c6:c6:d0:68:6d:4c:69:ac:a5:16:fe:
37:fd:a7:52:6e:af:c1:79:8c:10:87:21:62:f9:90:
e4:97:5d:29:91:59:ed:89:c3:1b:8c:44:c7:f4:ff:
61:85:0d:fe:47:31:d1:48:a8:4e:8b:2e:5d:9e:47:
2d:7a:0b:69:0f:bf:a8:58:0a:00:85:30:5a:bb:cf:
09:78:ea:e3:44:4e:d0:0e:6e:e8:77:25:05:81:5b:
05:a1:e8:b7:53:d8:46:5d:ff:a9:15:1a:34:d9:e5:
d2:87:e4:56:ab:1d:87:bd:44:27:b9:4f:36:d5:ea:
3f:94:20:31:a8:f0:41:cf:ce:cf:ac:96:ab:f3:ec:
e6:0b:58:e1:66:02:e8:04:54:35:41:b1:f5:4d:1e:
38:8a:40:16:77:63:98:8f:76:90:65:ea:66:d6:e2:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:BE:34:ED:46:8E:70:02:45:0E:B7:21:2B:0B:C8:1D:B8:9F:EF
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/3Gm-NO1GjnACRQ63ISsLyB24n-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b28::/48
Signature Algorithm: sha256WithRSAEncryption
48:d5:3e:de:f1:fa:e7:8b:a4:25:8c:ec:dd:15:ae:3e:bb:06:
d8:d7:b2:a5:ab:d2:b9:0c:96:03:08:d1:ca:ef:87:36:b2:8a:
d0:d3:a2:84:15:2c:0e:90:a6:ba:5e:1c:10:56:4d:bb:86:aa:
ad:74:aa:53:7c:e6:32:76:4b:a9:b6:41:01:df:a8:9e:d8:86:
7b:ac:e0:b1:42:73:d5:1c:9e:eb:94:3e:5d:c7:37:df:ef:8e:
e0:49:41:c3:51:4e:3b:ac:b8:08:63:37:03:ab:7a:12:8b:6c:
bf:17:02:70:58:c8:2b:a0:cb:e7:12:a5:09:f4:bd:3c:9d:c7:
99:ab:1b:10:29:f2:1b:ff:f7:df:37:2e:27:9c:76:bd:da:df:
5c:ab:47:f7:7e:a4:78:b1:5b:ba:9e:d2:73:09:2c:ff:48:4c:
34:64:10:89:24:81:31:e2:fc:c7:12:5e:d7:45:85:13:24:5f:
00:d5:63:c8:f1:ed:0e:bc:36:0c:2e:29:6a:15:ba:5a:1b:c6:
b3:a1:89:59:a7:36:98:ce:b1:4b:f3:01:52:c3:38:24:6d:34:
59:2c:96:62:9e:74:3f:7c:93:91:a1:e5:36:ac:6e:58:41:6c:
04:cc:e0:22:60:b0:06:26:fb:cf:34:cd:a1:2c:37:50:28:50:
92:b5:ec:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:30 2025 by rpki-client