Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/3Rq1rrvg4L5HVQxk1G9x80dtJVw.roa
File: 3Rq1rrvg4L5HVQxk1G9x80dtJVw.roa (raw, json)
Hash identifier: EbFA/ooWRPwfgREYbqPfXJ7AvJViO7XG9SscpaAEjqA=
Subject key identifier: DD:1A:B5:AE:BB:E0:E0:BE:47:55:0C:64:D4:6F:71:F3:47:6D:25:5C
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01850AB1595E3A807453C596FDE78816FB31
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/3Rq1rrvg4L5HVQxk1G9x80dtJVw.roa
Signing time: Tue 13 Dec 2022 08:54:32 +0000
ROA not before: Tue 13 Dec 2022 08:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 86.62.30.0/24 maxlen: 24
45.80.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:b1:59:5e:3a:80:74:53:c5:96:fd:e7:88:16:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Dec 13 08:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd1ab5aebbe0e0be47550c64d46f71f3476d255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:d2:35:2f:8e:39:ba:de:bb:e9:81:b5:2d:
a8:5b:d5:91:b1:91:d5:31:5d:89:a5:47:b5:f5:fe:
9b:e6:8e:7e:74:c4:cb:d9:7c:be:2e:4c:00:f8:bb:
50:4a:a9:53:bd:0e:4e:d9:6b:70:e9:ca:50:ab:38:
8f:56:ce:fa:32:8d:ff:05:17:a2:10:61:a3:dd:33:
f7:85:c4:41:7d:78:ee:98:23:d5:31:0d:3e:ad:b1:
62:92:53:ee:13:b7:e9:dc:01:8f:1c:5a:1b:c8:a5:
fd:69:55:e5:b2:a6:da:d4:a7:b1:91:4e:3b:15:e6:
08:1a:c1:33:ce:9e:c4:f5:80:40:7e:19:dd:41:c6:
99:f4:ad:10:0c:b5:8f:3a:0f:b6:71:2e:f1:35:ec:
7d:03:b8:f2:0d:4c:9b:cf:3f:bc:5c:1b:67:8b:e0:
2c:d1:bd:1a:c4:b8:14:51:56:f9:63:23:67:44:89:
2c:a1:87:59:3e:0a:5c:d6:02:3a:95:d3:8c:30:7f:
d2:21:b5:44:cc:11:43:12:87:de:a7:a8:1b:a3:1c:
c6:01:e8:64:b4:55:8a:c8:38:d9:6b:fc:d9:f8:fd:
a3:5f:04:09:e0:97:29:83:31:13:c7:b7:5e:e3:85:
c2:50:a6:ea:5b:4a:89:a9:7c:08:b8:68:7e:df:99:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:B5:AE:BB:E0:E0:BE:47:55:0C:64:D4:6F:71:F3:47:6D:25:5C
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/3Rq1rrvg4L5HVQxk1G9x80dtJVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c6:e5:fb:c0:16:2c:65:17:61:54:0a:10:d7:ab:10:c2:93:
82:c5:d9:3d:b5:fa:8c:af:ad:85:01:cf:94:12:84:58:c1:f0:
7f:71:69:f8:3b:fe:4b:81:10:62:e0:a2:c4:60:d8:69:29:3f:
81:5a:4e:61:7a:cf:5b:47:37:a6:7a:13:4c:0c:c1:1f:6b:0e:
75:f1:ee:a8:63:2b:d7:3e:dc:a5:e6:8b:b1:83:9b:d9:9d:e2:
36:fa:f4:69:e1:8d:8e:e2:08:45:c3:d8:03:33:c5:67:a3:80:
22:41:19:1c:97:9b:5a:6c:bd:cd:d1:0e:6b:5b:fb:ef:3b:45:
6a:6a:9b:24:fc:09:80:3a:69:48:68:fc:b4:06:74:cf:45:01:
6a:62:82:ec:46:d4:d6:cb:ba:3b:6e:4d:24:63:ed:29:9f:7e:
bf:ba:82:1f:ec:7f:f3:07:01:24:89:b7:d3:bb:32:0c:6e:7b:
a7:65:ac:4f:c8:40:e5:d2:d8:ea:e6:cf:d7:19:3d:d6:98:18:
e7:72:a6:7c:e2:3e:6b:46:63:ba:d2:3d:12:de:64:4a:b4:dd:
c6:15:ed:93:2b:8e:f5:77:38:9f:18:ad:a1:cb:c0:eb:e2:ca:
9c:65:30:fc:c7:b5:41:49:34:89:47:ab:57:6d:6d:66:71:c6:
c0:f0:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org