Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/3FFvT4hyNM4CNmjPSybuK7Q7ii4.roa
File: 3FFvT4hyNM4CNmjPSybuK7Q7ii4.roa (raw, json)
Hash identifier: gxxkPPYKYsID6zyjr+QJAP5r1kM5s72m/W0onSyXCL4=
Subject key identifier: DC:51:6F:4F:88:72:34:CE:02:36:68:CF:4B:26:EE:2B:B4:3B:8A:2E
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 018236060FF5ED1C8BBAF58AC540A3DC359D
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/3FFvT4hyNM4CNmjPSybuK7Q7ii4.roa
Signing time: Mon 25 Jul 2022 15:42:23 +0000
ROA not before: Mon 25 Jul 2022 15:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206922
IP address blocks: 185.171.246.0/24 maxlen: 24
185.171.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:06:0f:f5:ed:1c:8b:ba:f5:8a:c5:40:a3:dc:35:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jul 25 15:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc516f4f887234ce023668cf4b26ee2bb43b8a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:71:6c:03:0e:d7:8d:73:bd:0e:78:5a:ed:
bb:19:9f:16:ce:4d:56:ea:b1:9f:d6:e5:17:7a:0b:
51:88:ee:a6:5d:d2:fc:1e:21:18:69:7c:93:ef:eb:
a5:b0:c7:a9:1e:7f:44:f2:f6:bc:02:dc:40:fa:54:
a2:0f:23:2e:60:5f:7c:14:57:88:6a:8f:92:79:4b:
89:cd:c3:58:0a:89:f5:dc:5c:fd:02:6b:51:ca:7c:
d8:9e:66:09:09:31:97:f1:f0:15:19:6b:b8:aa:f4:
71:6c:b7:91:e1:6c:81:11:a5:14:67:88:34:2b:3e:
f0:62:67:c2:18:4d:59:0a:6c:22:ed:02:c4:e3:40:
e1:83:78:fc:7c:34:bb:1e:b5:53:e2:40:dd:e2:59:
44:45:7c:67:e5:81:8d:c2:dd:e8:10:84:0c:2f:ee:
7c:75:ca:43:38:29:b1:1c:f5:f3:0c:b0:48:2e:e8:
11:01:a5:c2:c3:dd:88:0f:48:17:74:03:9d:9d:67:
77:bf:ac:44:e8:3b:39:71:81:25:e5:01:6e:93:87:
52:3b:2b:56:94:7e:c5:56:ef:b7:5b:9f:84:43:61:
9f:a3:0f:15:a4:13:4b:52:da:17:58:ee:f1:25:5d:
a9:05:0e:14:89:27:af:72:fd:98:fd:ee:d9:18:ed:
3d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:6F:4F:88:72:34:CE:02:36:68:CF:4B:26:EE:2B:B4:3B:8A:2E
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/3FFvT4hyNM4CNmjPSybuK7Q7ii4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.246.0/23
Signature Algorithm: sha256WithRSAEncryption
76:78:82:50:e7:e3:ad:22:ea:ca:d7:a7:f4:2a:f3:e3:ae:61:
a6:88:47:8d:03:c6:6a:1e:6c:0a:97:a9:08:f3:37:b7:e0:1e:
55:6a:e0:d0:09:3f:14:de:67:24:3a:ac:a2:72:db:74:76:e1:
cc:93:98:bf:13:c8:3e:73:5f:8a:13:cd:f2:bd:42:e5:ac:6c:
f6:8a:79:0b:72:17:cf:e9:28:e1:18:89:f7:05:c9:53:8c:48:
3b:92:b4:cf:c8:9e:35:4b:08:ef:f4:d4:33:cb:5f:e2:e2:63:
68:1f:40:fe:16:96:ae:53:2f:32:ac:d6:09:f5:9e:2c:7d:6a:
d8:72:48:87:44:d1:7d:a0:1e:f3:88:0f:ef:28:23:e4:5d:cd:
1c:a1:f4:57:2c:24:ef:32:4e:b6:4e:f9:23:22:08:e3:dc:af:
96:47:aa:0c:ee:e1:8e:e5:7f:7d:d5:41:a0:1f:15:c5:b7:02:
4d:4e:64:f9:fa:aa:53:ce:00:6f:8a:e0:4e:be:02:b8:21:30:
5a:a1:61:96:8b:c4:3b:de:c3:54:52:e2:4d:bd:b6:b4:a2:eb:
f0:2f:2a:d7:39:c8:18:66:67:6e:54:e2:26:58:52:02:54:39:
df:ed:3c:d3:d1:a4:7b:53:4a:e6:bc:46:72:76:cd:9f:4b:79:
4f:26:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-fra.rpki-client.org