Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/3ITSaaU9p9Eer3_lUaDBNmErGgs.roa
File: 3ITSaaU9p9Eer3_lUaDBNmErGgs.roa (raw, json)
Hash identifier: y4njVfmx+BKiFw+7EAfmsYM36jz+VQ4IUNfFUVWyJz8=
Subject key identifier: DC:84:D2:69:A5:3D:A7:D1:1E:AF:7F:E5:51:A0:C1:36:61:2B:1A:0B
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 018413FF58DC01354CA22E43F52CBDD9FEA8
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/3ITSaaU9p9Eer3_lUaDBNmErGgs.roa
Signing time: Wed 26 Oct 2022 11:13:32 +0000
ROA not before: Wed 26 Oct 2022 11:13:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16418
IP address blocks: 185.8.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:ff:58:dc:01:35:4c:a2:2e:43:f5:2c:bd:d9:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Oct 26 11:13:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc84d269a53da7d11eaf7fe551a0c136612b1a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:3b:ac:da:5b:c2:de:2f:75:ee:81:93:20:
d3:81:76:1f:b0:33:3a:21:a7:09:7a:01:e4:1e:46:
44:b0:b8:be:65:13:c9:05:7b:09:cb:07:13:0b:df:
d2:bc:27:23:57:13:1b:73:1d:3c:eb:de:49:b3:30:
5a:7b:73:e5:89:a2:34:ef:fe:f3:c4:48:89:8a:f0:
81:f6:4a:5f:0e:62:b0:ed:2b:c3:94:3f:09:34:fc:
89:df:f8:77:95:df:81:f5:05:00:df:d1:36:dd:c1:
42:41:61:3e:f8:db:c7:2e:0e:ce:6f:de:29:82:d8:
82:f8:88:f4:6a:c4:b5:31:3d:d1:06:39:b0:35:11:
bb:78:67:7c:73:20:ee:76:7d:b4:00:ad:96:4b:6a:
c4:e3:6c:bf:7b:49:fc:2e:9f:bc:54:c8:46:00:7e:
92:59:a7:ff:08:f5:78:8f:4b:cf:ce:00:67:6c:f5:
64:c0:e5:7a:99:bf:ea:23:a7:78:50:30:c2:55:a0:
30:24:dd:a2:59:f9:37:74:58:9b:1f:1d:fb:f8:df:
42:3d:42:98:4b:90:82:4d:2a:30:19:76:7a:06:34:
b8:ab:38:0b:0e:e4:69:33:4a:36:c8:2c:76:7a:0c:
e9:20:53:ec:ab:6f:28:83:8d:c2:89:b7:f6:55:8c:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:84:D2:69:A5:3D:A7:D1:1E:AF:7F:E5:51:A0:C1:36:61:2B:1A:0B
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/3ITSaaU9p9Eer3_lUaDBNmErGgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:14:1b:e3:4a:2c:85:f0:d4:bf:94:2f:2f:97:a1:cb:0b:e8:
8e:01:4a:b6:d9:d2:de:e7:49:de:f4:64:3a:7c:64:b4:18:c3:
e4:35:23:88:07:69:92:35:f1:8a:7d:62:f8:97:22:e6:04:af:
91:42:85:72:a4:a8:98:8b:61:1c:f8:26:04:19:02:92:64:9b:
46:c3:d1:30:76:5d:80:ea:ca:48:ea:81:2b:c1:4f:03:09:4e:
5e:64:e3:af:30:f7:88:c8:32:9f:48:e1:8a:79:0c:4f:a4:9b:
49:d9:64:8e:f1:a5:96:f0:0a:56:4c:22:75:4a:93:d3:44:62:
71:df:6e:6c:3a:b1:59:c9:5a:ae:08:6d:a6:d2:7e:79:75:f0:
42:5e:5f:60:ed:44:83:6a:25:91:7b:3b:61:b3:b2:b1:14:11:
84:db:ea:ea:5d:10:b0:ec:3d:d9:9c:ec:aa:97:68:2c:eb:2f:
c1:1e:17:e4:d8:18:a1:be:3d:4d:29:c8:d4:82:87:12:dd:d7:
50:dc:28:c5:88:55:98:b3:d2:b7:61:b6:ac:8e:5a:86:40:06:
25:64:fc:b2:74:d3:52:b6:df:1d:2e:46:b8:ea:68:75:80:27:
6d:50:c8:65:f0:e0:c7:0a:90:3c:e1:fc:4b:63:4b:3b:d9:14:
8c:26:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:41 2024 by rpki-client on console-ams.rpki-client.org