Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/3sntnSkRCJ3Z0rhxURkQQaxbS60.roa
File: 3sntnSkRCJ3Z0rhxURkQQaxbS60.roa (raw, json)
Hash identifier: 0kpDj0D1VcjoPOe1Et9q02DA6Wp/mBdkZj+/Pj9ohKs=
Subject key identifier: DE:C9:ED:9D:29:11:08:9D:D9:D2:B8:71:51:19:10:41:AC:5B:4B:AD
Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial: 03DBAC3F
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/3sntnSkRCJ3Z0rhxURkQQaxbS60.roa
Signing time: Thu 24 Mar 2022 21:30:33 +0000
ROA not before: Thu 24 Mar 2022 21:30:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212752
IP address blocks: 45.90.80.0/24 maxlen: 24
45.90.83.0/24 maxlen: 24
45.90.82.0/24 maxlen: 24
45.90.81.0/24 maxlen: 24
91.240.165.0/24 maxlen: 24
2a10:b480::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64728127 (0x3dbac3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Validity
Not Before: Mar 24 21:30:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dec9ed9d2911089dd9d2b87151191041ac5b4bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:03:2f:6e:d0:f9:dd:67:9a:08:66:f5:61:
da:53:9f:b9:af:6c:8c:01:bc:85:65:f8:f3:ba:c8:
42:d7:95:a8:88:36:f4:84:c0:c0:15:10:7a:b3:40:
95:15:9e:13:4f:0b:e0:69:c7:68:eb:ea:a4:8f:32:
6c:0a:51:26:8d:ae:3d:d7:a7:62:f0:aa:30:42:f3:
cd:50:8a:18:25:a8:6f:44:75:0f:80:9f:a8:ae:02:
28:4c:6d:9d:4a:df:27:d4:ef:0b:d7:0c:f0:b3:ad:
0f:60:a9:6d:86:68:85:7f:52:fe:47:3e:5d:4f:df:
a2:69:86:fe:cf:4a:13:73:4d:ea:af:26:a2:48:66:
46:e4:0a:73:18:b8:2f:7d:68:52:c4:b4:f3:b7:bd:
19:f9:78:e6:06:97:fb:d2:92:84:7d:75:c1:77:d2:
f9:1e:a0:87:a5:95:ce:4a:9a:87:c4:35:01:7c:f5:
07:a3:c7:a7:a6:76:7d:a0:20:73:c1:c1:b5:0a:94:
95:9c:66:e6:68:8b:20:f3:73:43:f7:cd:1f:61:db:
a0:9e:ed:b7:14:2f:02:d7:81:52:77:2a:62:eb:08:
d6:1d:1e:83:e9:2c:5d:06:3a:4a:a8:e5:d9:ca:05:
a2:95:59:ff:bb:be:e4:de:61:a4:4a:82:89:7c:e2:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:ED:9D:29:11:08:9D:D9:D2:B8:71:51:19:10:41:AC:5B:4B:AD
X509v3 Authority Key Identifier:
keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/3sntnSkRCJ3Z0rhxURkQQaxbS60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.80.0/22
91.240.165.0/24
IPv6:
2a10:b480::/29
Signature Algorithm: sha256WithRSAEncryption
5e:eb:42:0a:0a:fc:f3:a3:aa:6d:4c:1f:7e:53:4e:a9:46:9e:
b2:85:a1:8f:1c:9e:9c:5c:82:14:44:ca:32:bf:fe:4e:8f:5d:
20:e7:12:04:6a:cb:5b:59:fd:6c:5b:fc:24:fd:31:d0:83:e6:
00:e9:c5:16:53:66:e4:69:c8:9a:25:94:78:6b:14:a4:59:e8:
4a:b2:89:98:76:eb:01:ac:51:78:f8:e6:5a:0f:66:0d:5f:76:
00:8f:bf:38:cf:eb:02:a2:2a:a9:d3:8e:4e:78:31:1f:78:e5:
03:83:99:25:cf:68:ac:b1:df:63:27:b6:87:65:51:61:77:52:
14:ee:a1:85:3e:2a:61:02:34:40:ca:c5:9a:bd:8e:ef:de:e2:
12:b4:c5:66:cf:d1:2b:2d:3c:d1:45:61:95:e3:18:d2:71:3b:
e0:97:00:dd:c7:03:1e:2a:99:bf:c8:4c:c9:26:9e:d6:3f:05:
fe:0c:ea:e5:03:12:a8:89:22:c8:39:61:fc:52:cb:a4:b0:f9:
98:d6:b5:ca:32:db:3e:e4:64:6a:79:c5:5c:ac:69:a4:95:65:
74:41:a6:c1:a8:5c:32:6c:58:63:b3:03:96:62:c6:17:fd:ea:
96:6f:ae:a8:bc:b0:96:7a:26:8c:24:86:5f:57:2e:e6:e9:da:
90:ce:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:55 2024 by rpki-client on console-ams.rpki-client.org