Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/3B2dp_M3cBS8O8LRq4fH6JlxmJs.roa
File: 3B2dp_M3cBS8O8LRq4fH6JlxmJs.roa (raw, json)
Hash identifier: XkpCNG5rQUojbbmKwyUftfYGKTm+IsTQ6mxSSi2UTiE=
Subject key identifier: DC:1D:9D:A7:F3:37:70:14:BC:3B:C2:D1:AB:87:C7:E8:99:71:98:9B
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 06EA284E
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/3B2dp_M3cBS8O8LRq4fH6JlxmJs.roa
Signing time: Sat 01 Jan 2022 05:01:46 +0000
ROA not before: Sat 01 Jan 2022 05:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208134
IP address blocks: 45.92.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116009038 (0x6ea284e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Jan 1 05:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc1d9da7f3377014bc3bc2d1ab87c7e89971989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:fd:f8:1e:25:a9:f4:94:05:de:f9:b5:59:
a9:6f:ec:0a:5a:7e:46:84:eb:fa:3f:fe:eb:dd:ef:
9f:a7:51:f8:21:ca:d9:ca:de:0f:f4:19:ad:53:3c:
e6:fb:b9:67:5d:35:d6:54:28:1c:1e:4a:24:f6:59:
9e:fa:01:09:14:54:b2:ab:d4:94:2a:e3:da:7d:f6:
a4:25:82:26:67:9d:92:2a:81:60:72:39:c6:44:50:
fb:a8:07:8b:99:31:e5:a8:2c:13:e7:38:97:1f:67:
0c:26:7c:01:52:d6:0c:46:da:fc:73:f5:7a:46:50:
27:97:d7:f9:bd:80:f1:0b:6a:76:36:06:9a:2b:6c:
b8:90:05:7c:e1:28:03:00:62:3a:d5:4e:c6:68:2b:
26:c0:e6:9f:af:3f:13:2d:a8:f7:6c:63:25:2d:f7:
8b:fe:d5:88:71:96:7e:42:eb:8c:1c:0e:3a:07:28:
ce:fb:12:e3:87:34:42:b8:91:a6:21:b0:e3:ce:58:
97:a7:10:65:68:dc:27:6b:44:4f:76:0f:22:6c:31:
fd:49:64:ce:22:63:af:bb:89:86:67:48:d1:f5:9c:
2a:1d:5c:07:c9:3b:f7:da:ce:12:53:f6:a5:63:ae:
af:e7:88:9b:ab:a2:9b:38:93:a7:76:3f:c6:e1:82:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:9D:A7:F3:37:70:14:BC:3B:C2:D1:AB:87:C7:E8:99:71:98:9B
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/3B2dp_M3cBS8O8LRq4fH6JlxmJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.136.0/22
Signature Algorithm: sha256WithRSAEncryption
26:ce:37:08:b5:cd:1b:bc:e2:d3:a1:c0:6e:b6:a3:da:3b:1b:
29:3c:58:8c:57:a0:e5:90:4b:5c:98:e6:91:5f:6b:87:24:98:
ce:30:ed:ec:02:79:e2:1c:2e:70:6c:41:39:16:f0:bb:96:d4:
1a:e4:eb:e9:17:c8:27:4f:cc:29:97:3a:69:ce:ef:0d:54:ac:
b2:94:44:cb:bd:71:44:76:29:be:05:67:f3:28:4c:96:26:f4:
9e:e4:68:ab:ab:96:cc:0a:78:12:ef:00:2d:85:4d:a3:59:9c:
fc:14:2f:16:1c:1d:93:c1:74:a1:3f:5e:f8:21:85:3d:0b:b3:
25:39:dc:ee:74:23:98:8f:33:f2:03:8c:8a:89:a7:e5:72:33:
2c:62:3d:77:cf:25:72:43:8e:5b:8b:e2:1a:df:32:91:b1:74:
fa:87:10:de:c3:c6:86:3c:e3:cb:d9:67:22:a3:65:0c:50:ec:
f3:69:54:fc:1e:6f:cd:6b:ef:60:8a:62:fa:6b:57:49:3c:ff:
1e:cf:0b:3c:33:e5:7e:39:72:27:00:8b:6f:1a:fa:ed:33:20:
34:de:d5:84:d1:0d:44:b6:02:dd:b7:00:be:25:eb:12:0e:5d:
c9:ea:1e:de:87:6b:44:33:ba:f4:db:b4:ed:2d:94:c2:55:b6:
85:45:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org