Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/3c0kXX6Q8F3vJVgCw1P6o79KqYA.roa
File: 3c0kXX6Q8F3vJVgCw1P6o79KqYA.roa (raw, json)
Hash identifier: 5nbNyxsBiSPU34MG0XYXamjvilYOWKWiyNLip2j6U8M=
Subject key identifier: DD:CD:24:5D:7E:90:F0:5D:EF:25:58:02:C3:53:FA:A3:BF:4A:A9:80
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 0182CA5135B9B69B1928E8FB71B6C8E068D0
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/3c0kXX6Q8F3vJVgCw1P6o79KqYA.roa
Signing time: Tue 23 Aug 2022 10:48:15 +0000
ROA not before: Tue 23 Aug 2022 10:48:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 94.142.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:51:35:b9:b6:9b:19:28:e8:fb:71:b6:c8:e0:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Aug 23 10:48:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddcd245d7e90f05def255802c353faa3bf4aa980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:9c:5d:1d:76:82:21:fc:d8:e2:41:9f:ac:
94:5e:ea:8b:02:08:99:c7:ed:1f:2b:f1:3e:31:a3:
b9:88:a2:a7:a8:27:fa:19:eb:d0:53:19:1e:6e:bb:
91:5a:59:21:69:71:45:db:08:81:00:ed:b7:19:8d:
e5:8c:ae:2a:c6:c7:f9:1e:52:30:62:0f:68:27:22:
4e:23:f2:34:61:2e:7d:ed:07:b0:24:60:0c:bf:93:
3e:83:13:63:cf:39:ee:72:43:f9:e8:96:6a:a9:a3:
84:2d:ba:6a:31:28:33:51:d8:5a:07:ab:82:a4:47:
e7:38:c0:db:59:9e:40:4a:41:0a:ad:ad:e1:14:9d:
fe:f4:8c:34:b8:86:ea:37:58:17:f2:7e:d2:e9:6d:
42:c2:40:88:5b:c3:63:bc:03:e5:19:cb:d3:0c:cf:
91:7d:04:20:58:69:ff:3b:61:c2:f8:10:02:76:3c:
be:64:c0:5f:c2:33:23:ff:f8:a5:93:e4:e3:b4:7e:
2b:e9:26:85:de:8a:d9:89:77:1c:03:17:d5:3c:01:
2b:64:78:c6:bc:53:16:aa:af:a1:ac:ab:26:d2:2e:
8d:cc:4d:d0:5b:23:67:17:96:2b:ba:89:4a:b2:06:
d8:67:f4:75:b3:d8:b8:27:13:80:68:7c:35:05:35:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:24:5D:7E:90:F0:5D:EF:25:58:02:C3:53:FA:A3:BF:4A:A9:80
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/3c0kXX6Q8F3vJVgCw1P6o79KqYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.252.0/24
Signature Algorithm: sha256WithRSAEncryption
84:39:88:a7:b6:b5:6c:7c:d7:5a:53:02:b4:ad:58:ec:3b:7f:
ce:bb:c0:e3:c3:e1:0c:47:12:08:01:40:95:e5:82:33:5e:e5:
74:51:1b:9a:a8:6e:0f:c4:03:c8:b5:c0:b8:46:89:da:34:ce:
51:aa:fb:89:a0:e8:8e:d5:a9:ec:f5:dc:88:b6:24:9c:d9:9f:
b6:6f:c9:32:bb:70:79:16:90:85:83:6c:6a:5f:c0:ec:50:6b:
6e:cb:25:e1:59:b1:2e:26:c7:d8:42:16:a7:35:85:67:d2:3c:
57:6c:c3:9e:e9:f0:ec:b8:71:07:db:25:fb:20:db:a7:77:30:
ef:31:ed:65:ed:26:bc:16:e6:a6:40:dd:05:07:dd:c7:fa:00:
8b:be:58:d5:9f:65:a8:dc:7c:10:59:a8:fa:94:ea:d5:dd:ef:
a2:36:f6:f4:bd:80:6b:b2:e6:87:bf:5b:1d:2d:31:0d:3b:8f:
3e:ac:7e:68:d3:57:13:9f:31:2a:32:2b:26:1f:7b:b7:15:76:
ee:64:70:9e:09:6e:0d:dc:13:be:d5:26:1d:a7:13:8f:27:a6:
52:be:4c:19:4c:16:13:18:62:2f:64:26:76:ea:88:cc:3c:30:
3e:62:c5:9d:b3:90:9b:f6:83:81:c1:ed:24:c3:a9:ea:26:ca:
a9:a9:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:50 2024 by rpki-client on console-ams.rpki-client.org