Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/3cgOys4x6xuzETCWV9pSiC7wUPI.roa
File: 3cgOys4x6xuzETCWV9pSiC7wUPI.roa (raw, json)
Hash identifier: oMZjm2oqg2mS+5Hxr/T9zxjrDIVoVhQHoM8822jvraM=
Subject key identifier: DD:C8:0E:CA:CE:31:EB:1B:B3:11:30:96:57:DA:52:88:2E:F0:50:F2
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 061CFC18
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/3cgOys4x6xuzETCWV9pSiC7wUPI.roa
Signing time: Sat 01 Jan 2022 01:58:36 +0000
ROA not before: Sat 01 Jan 2022 01:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62064
IP address blocks: 185.47.32.0/22 maxlen: 24
188.213.8.0/21 maxlen: 24
188.209.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102562840 (0x61cfc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Jan 1 01:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddc80ecace31eb1bb311309657da52882ef050f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:a3:c3:b7:a8:7c:e4:64:30:49:b3:52:8a:
c7:02:a3:36:b9:20:f4:49:c3:15:09:cb:66:5f:ce:
e2:68:ec:ac:5e:63:c4:5d:a4:ce:30:a4:6e:33:7c:
52:95:4c:a2:c5:19:47:41:c2:d1:ab:3d:16:7a:98:
fa:8b:b7:7f:f4:f2:26:98:1c:13:39:78:9b:2b:5e:
08:8c:5e:59:04:62:60:1b:8e:78:de:f9:81:01:c7:
d1:f3:07:29:dc:30:7b:db:21:57:39:bb:f1:3d:56:
1d:fe:e1:64:41:d7:16:15:75:9a:59:cd:89:0c:be:
28:15:8e:37:24:10:3b:bd:4b:21:3a:da:76:8a:7e:
56:a0:c9:20:06:7d:6c:f2:4a:2c:ed:41:66:c2:42:
e6:bc:32:e7:78:7f:6a:e6:37:c9:19:4a:5b:82:bd:
46:48:ec:d4:e7:75:30:c8:54:5a:aa:d0:85:42:3b:
f9:b6:2d:76:26:e3:e1:b7:bb:7f:11:2c:f5:df:dc:
e0:87:c9:b8:de:9a:63:d4:b6:30:44:79:a1:08:e9:
3b:66:de:ff:75:9d:5b:7c:40:2a:ce:81:5c:22:c5:
ac:03:b1:7a:12:c0:10:01:ad:7e:7a:1c:1f:4d:5e:
06:6a:51:ad:ad:f5:a4:40:90:de:c2:a8:d4:1a:6a:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:0E:CA:CE:31:EB:1B:B3:11:30:96:57:DA:52:88:2E:F0:50:F2
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/3cgOys4x6xuzETCWV9pSiC7wUPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.32.0/22
188.209.112.0/22
188.213.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:30:41:90:4a:e8:7d:d3:2b:d4:b1:cd:8f:f8:a2:bc:00:e6:
e0:a9:ba:ad:13:14:c6:88:5e:dc:0b:17:cb:31:3e:0e:b4:89:
5f:6c:e7:8d:7f:11:34:78:b3:92:8d:96:d4:31:7c:32:83:bf:
22:be:91:85:6b:4e:f6:cb:8f:3e:7b:8d:e7:74:23:f9:38:ed:
9f:30:f7:34:5f:9e:51:b2:28:cd:c7:83:66:e8:2f:44:1d:03:
d4:3d:a0:62:a5:aa:be:b8:bf:64:26:b1:a0:37:d2:4a:69:9f:
47:8b:fa:bc:6d:58:20:c4:dd:09:82:9b:60:37:55:ca:b1:9d:
be:77:c4:0c:b3:77:bd:d0:5b:f8:f1:67:eb:4e:60:a6:ec:67:
19:cb:77:16:f0:2f:6e:f4:c5:37:4f:1d:14:30:e3:0e:d5:d2:
25:c9:4a:2a:80:2d:64:db:60:01:fd:ba:c6:8e:31:09:28:af:
ea:a5:9d:5c:a8:5b:73:e4:16:e5:44:e3:0d:ee:17:f7:bf:3e:
09:98:4e:c2:9b:4a:28:a3:69:de:45:db:8b:cb:11:a0:1c:a5:
79:63:3b:d5:1e:d8:6b:b4:4b:15:5e:76:a1:62:b3:33:61:07:
de:b5:ac:a7:5e:73:94:31:00:cb:77:22:d1:36:f8:cb:1b:e0:
8b:1c:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:33 2023 by rpki-client on console-ams.rpki-client.org