Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3GR-zwGTviuSoIFDv__KFabPsZ8.roa
File: 3GR-zwGTviuSoIFDv__KFabPsZ8.roa (raw, json)
Hash identifier: qF0DrAVucAkjxcCM7+Kzs/HHWGYTOiqJDoc9dMyRhFE=
Subject key identifier: DC:64:7E:CF:01:93:BE:2B:92:A0:81:43:BF:FF:CA:15:A6:CF:B1:9F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 9A0FC3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3GR-zwGTviuSoIFDv__KFabPsZ8.roa
Signing time: Fri 08 Apr 2022 15:48:25 +0000
ROA not before: Fri 08 Apr 2022 15:48:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 88.216.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10096579 (0x9a0fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 8 15:48:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc647ecf0193be2b92a08143bfffca15a6cfb19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:ad:52:c6:ba:57:79:d9:27:39:bb:58:d7:
af:e3:20:20:68:a4:4c:0b:3e:bf:26:cb:61:b0:39:
17:2b:e9:1f:9c:4e:b7:8b:73:82:7c:e0:d4:f6:42:
5e:e6:46:6c:a3:3e:3c:13:d7:7c:7b:87:2c:f6:85:
d4:19:fe:3c:db:77:86:ea:1a:e0:c2:40:c9:f5:99:
b0:db:1a:76:c8:f3:1f:ba:c3:91:56:06:a1:e0:f1:
7a:a4:ca:56:99:18:f5:c9:18:24:97:79:7d:b2:a0:
24:b9:83:1e:31:5e:4a:25:b2:da:c4:3e:82:27:b4:
af:6f:bd:54:e7:25:11:12:03:12:1b:ca:59:94:99:
0b:ab:fc:a1:f2:51:87:9c:f2:34:73:05:6e:b0:0f:
de:83:2e:8b:4e:f5:56:7a:5b:d7:e9:da:49:a2:f4:
bd:d1:65:60:fb:36:f1:65:d2:91:c0:3a:8d:13:21:
98:b2:fb:9f:d1:56:54:f2:ff:da:2e:ef:90:95:ff:
0f:d7:ae:9d:84:4a:d8:62:36:88:b4:fe:fe:06:ad:
66:8d:87:e0:b5:f0:48:8a:79:1e:cb:48:35:8f:c5:
e9:ec:69:0b:73:36:3b:58:b8:0d:0a:ba:c2:01:35:
29:1d:85:98:40:02:cc:86:2f:b9:7d:49:a9:40:11:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:7E:CF:01:93:BE:2B:92:A0:81:43:BF:FF:CA:15:A6:CF:B1:9F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3GR-zwGTviuSoIFDv__KFabPsZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cb:99:c8:fd:d7:f1:e4:5f:0d:ec:8d:12:92:13:d7:b4:57:
02:6c:8b:7d:db:64:22:b3:f1:17:68:9f:b7:9d:1e:ff:dc:8a:
9b:8a:ff:9e:63:51:c3:9e:7e:2c:fc:81:a4:b0:b8:17:a2:51:
8c:fa:af:33:b9:6b:8d:22:e5:76:65:e3:d9:9d:53:48:d1:bb:
ad:9d:9f:36:99:0c:3e:25:8e:86:92:4d:0a:3d:41:91:32:6c:
5e:b2:d9:bb:e1:ac:39:59:02:3b:08:cb:4e:34:67:2f:b3:e4:
97:a0:78:6b:cc:cb:46:2f:9e:b2:50:d6:3e:58:43:5a:39:a4:
61:53:12:cf:fe:dc:a8:77:a5:7b:68:da:d9:67:77:00:76:d9:
88:cd:eb:b3:b6:c9:10:d4:57:e7:70:b7:44:a9:73:a3:6f:4a:
5b:32:d6:09:b0:44:2c:93:fe:8a:5b:13:43:34:17:8f:a6:e6:
9e:39:94:f9:c9:01:bf:94:fe:ab:a8:67:41:21:55:d3:ca:34:
c5:ac:4d:93:3f:02:55:4d:88:e7:0b:84:18:dc:bc:dd:9c:c9:
f9:ed:a7:bf:bd:d2:c1:4d:10:22:15:1d:a9:31:ac:25:b7:5e:
bf:2a:44:b7:76:ce:e2:2d:b2:1c:1a:d8:5d:91:14:a5:d8:c6:
16:94:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org