Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/3MttjLClnBA5nSiH5l9CSiiK7Vo.roa
File: 3MttjLClnBA5nSiH5l9CSiiK7Vo.roa (raw, json)
Hash identifier: pD2sbr9R39GvWxQf3j108jpqvwSesT3mEl70Vdlfw7o=
Subject key identifier: DC:CB:6D:8C:B0:A5:9C:10:39:9D:28:87:E6:5F:42:4A:28:8A:ED:5A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 08CF9052
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/3MttjLClnBA5nSiH5l9CSiiK7Vo.roa
Signing time: Sat 01 Jan 2022 07:02:07 +0000
ROA not before: Sat 01 Jan 2022 07:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205679
IP address blocks: 92.118.164.0/22 maxlen: 24
88.218.252.0/22 maxlen: 24
185.210.36.0/22 maxlen: 24
2a0b:51c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147820626 (0x8cf9052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Jan 1 07:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dccb6d8cb0a59c10399d2887e65f424a288aed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:b1:ca:1e:ba:52:6c:50:a3:d1:da:82:cb:
1f:39:f1:95:64:dd:a6:03:bc:54:16:4c:1a:6b:90:
17:f5:d7:70:d3:ad:c6:73:eb:b0:b0:bd:76:60:a7:
fc:15:5a:c0:b3:41:5a:97:a7:15:68:38:31:6c:1c:
40:5c:46:49:4c:10:5f:e9:9b:78:cb:db:c1:e9:b4:
73:f2:10:78:c8:58:c6:0c:50:1c:4e:8e:aa:59:b8:
8a:c1:0d:c9:de:3e:23:2a:d8:e9:be:6b:48:d8:8b:
54:36:86:d8:96:ca:28:0f:dd:97:e5:79:9b:b1:82:
d2:3a:1f:d8:84:c5:f9:68:3e:f8:2e:7b:87:77:f3:
60:75:34:4c:14:06:3f:cd:45:10:e2:9a:00:3f:9c:
c0:60:58:09:a2:42:5c:5a:0c:28:e8:e2:ca:09:5d:
ed:b2:6a:30:e3:39:48:91:f2:80:14:e2:f4:77:ac:
1a:cf:b2:a9:e1:ff:91:4b:92:4c:83:8b:91:69:fb:
29:fd:9d:af:b8:11:03:70:3f:14:3d:dc:d3:fb:a6:
c1:fb:7e:c2:f3:85:cc:d9:1d:c7:fc:63:ca:bb:21:
1e:04:a8:dd:8c:85:4c:ff:54:6c:f8:be:2b:53:f3:
ce:68:64:1d:9e:da:92:20:60:32:9f:5a:e0:78:26:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:6D:8C:B0:A5:9C:10:39:9D:28:87:E6:5F:42:4A:28:8A:ED:5A
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/3MttjLClnBA5nSiH5l9CSiiK7Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.252.0/22
92.118.164.0/22
185.210.36.0/22
IPv6:
2a0b:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:5c:62:b1:e1:9d:04:98:8c:f4:37:aa:66:fd:c3:ec:c0:59:
77:ca:46:cd:be:e6:50:32:e0:b9:90:46:de:84:14:49:24:4e:
12:ea:14:0d:fb:7b:6d:e0:7c:4f:3d:c0:ac:a9:fa:4e:3a:bd:
3d:52:9b:61:78:ec:58:d5:9c:b8:2e:0a:90:0e:23:2d:cf:fd:
07:2f:99:60:21:20:5c:b9:ce:da:47:9e:f4:b4:97:2c:f9:43:
6f:3c:b8:bd:77:5d:9d:6b:75:d5:65:be:af:43:ab:b8:e1:4b:
a1:34:6a:a2:7c:03:d0:7f:93:ad:f9:aa:8b:e7:d9:a3:9a:3c:
9f:92:d5:09:76:b4:4f:ba:63:ca:08:7d:d6:f1:73:1e:c3:ee:
21:e9:f4:7b:b7:7d:70:96:75:3a:21:35:b1:6a:8e:3b:c6:96:
91:2b:ee:af:5b:31:9f:0e:ea:7c:c0:11:03:dc:f8:72:3f:7a:
ef:dd:13:34:50:69:65:fa:d3:5c:4d:c7:cd:20:26:16:c7:d7:
e1:48:70:44:f1:3e:a7:3a:00:4d:b9:8e:ac:e6:32:0a:e3:fb:
d2:40:52:54:55:5d:fe:fa:09:3b:15:ac:13:e0:77:36:7e:a5:
e1:38:1f:e8:37:88:1f:f7:97:4f:12:0e:44:c7:16:83:68:98:
81:cc:ac:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:13 2023 by rpki-client on console-ams.rpki-client.org