Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/b3FBTcP42aTWx9jvaZtAIvsASGM.roa
File: b3FBTcP42aTWx9jvaZtAIvsASGM.roa (raw, json)
Hash identifier: J1YIFdLcAaU7q0wjmSFFO3HiPuE9HsOwk0im5CAD+Vk=
Subject key identifier: 6F:71:41:4D:C3:F8:D9:A4:D6:C7:D8:EF:69:9B:40:22:FB:00:48:63
Certificate issuer: /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial: 0113B6
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/b3FBTcP42aTWx9jvaZtAIvsASGM.roa
Signing time: Mon 28 Feb 2022 17:54:28 +0000
ROA not before: Mon 28 Feb 2022 17:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.46.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70582 (0x113b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Validity
Not Before: Feb 28 17:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f71414dc3f8d9a4d6c7d8ef699b4022fb004863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:e2:e2:e7:5f:ef:b6:91:a8:03:b8:d8:65:
f0:ef:08:22:22:a7:72:a5:c9:94:83:40:cd:76:ea:
7a:2d:b9:25:b5:47:6d:71:09:73:5f:b7:28:e0:2c:
e9:4b:75:91:95:25:96:40:49:30:5c:44:ec:1a:69:
29:d1:f6:e2:3f:b9:35:66:ce:9d:7f:bb:a3:5d:cf:
e4:d1:45:64:a1:1c:5f:a9:65:df:1f:67:dd:88:eb:
b5:a2:a2:17:6e:1b:9a:02:cb:6d:17:ce:d8:fe:fe:
8e:a0:03:a5:e3:1f:5d:09:8e:15:f5:07:16:8a:4c:
82:46:1d:37:21:72:a3:d1:a0:b4:00:77:4f:cf:e9:
2b:e7:cc:e5:71:3b:54:68:e3:f1:5a:f0:64:6c:c0:
44:e3:54:bf:c6:a6:f3:d2:7d:6a:d1:c7:a6:1d:f5:
1a:ee:ad:6b:ad:2e:b8:75:5c:fb:d4:67:ca:27:ca:
97:60:63:e0:1e:6d:93:f8:56:d8:af:9e:77:c2:23:
19:0b:a3:a8:01:a0:e8:7a:41:23:e1:6b:f5:a7:8c:
96:68:ad:59:3f:e9:b0:0e:fb:33:78:79:59:4e:be:
67:c5:ee:1f:4c:b6:b8:02:18:6a:93:9d:20:ff:bd:
c1:15:fb:83:d3:94:fd:a8:62:8e:69:1d:d1:67:90:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:41:4D:C3:F8:D9:A4:D6:C7:D8:EF:69:9B:40:22:FB:00:48:63
X509v3 Authority Key Identifier:
keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/b3FBTcP42aTWx9jvaZtAIvsASGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fc:fc:65:7e:27:ed:df:80:29:f3:c5:b2:17:4e:22:e5:a2:
d8:6b:4c:3a:0b:84:16:2c:1d:6d:c4:74:05:88:fa:50:c0:a5:
fe:59:24:f5:1a:f1:f4:00:af:1b:a8:b7:65:9d:41:f3:d3:ab:
d3:17:e7:a8:57:a3:0f:92:de:fd:7d:b8:bd:b1:44:16:14:4e:
87:c2:24:77:9b:a4:28:aa:68:1c:42:b1:79:04:33:c8:ab:98:
c1:23:3e:77:5a:51:10:e4:a2:42:5b:62:12:da:68:08:89:61:
59:35:8a:65:31:46:45:f0:01:5f:20:23:fd:53:c1:ae:d2:d3:
d5:a3:7b:00:3e:2b:4b:cb:f9:72:a3:c6:da:ca:05:28:46:57:
f6:6a:81:c2:c8:18:f3:82:e9:e9:4f:ee:8a:7a:f0:3e:0b:2a:
5c:28:18:4a:2d:6b:9a:e6:14:32:24:3d:f7:bf:ff:90:da:e4:
06:98:ca:d8:2b:6f:d8:6b:84:36:bf:16:1d:b6:ec:26:3b:db:
7d:f8:20:0e:c7:57:df:d3:f6:bc:77:37:6e:2d:ae:cd:5e:43:
38:07:27:c8:18:e2:49:95:b5:db:38:71:73:bf:2e:c6:87:ff:
5f:7c:43:9c:a0:36:b9:e4:55:7e:0e:32:6a:31:a5:97:c4:7f:
ce:1c:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:28 2023 by rpki-client on console-fra.rpki-client.org