Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3Yvqgi1EpEk8pqFT29jGb9TS5b8.roa
File: 3Yvqgi1EpEk8pqFT29jGb9TS5b8.roa (raw, json)
Hash identifier: ayTF1iDx5rdXKqOqn6h3thkSQmJZG6ES5iDH5uN9k94=
Subject key identifier: DD:8B:EA:82:2D:44:A4:49:3C:A6:A1:53:DB:D8:C6:6F:D4:D2:E5:BF
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4472CCDC
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3Yvqgi1EpEk8pqFT29jGb9TS5b8.roa
Signing time: Sat 01 Jan 2022 03:58:22 +0000
ROA not before: Sat 01 Jan 2022 03:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12826
IP address blocks: 194.250.211.0/24 maxlen: 24
81.80.237.0/24 maxlen: 24
195.101.157.0/24 maxlen: 24
195.101.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148374236 (0x4472ccdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd8bea822d44a4493ca6a153dbd8c66fd4d2e5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:ef:32:4d:ff:44:8c:d0:99:49:22:a4:f2:
05:47:ec:12:34:be:49:39:0c:37:67:a3:90:78:1c:
09:23:31:32:55:be:01:b4:3f:a9:09:bc:bb:1d:53:
85:f1:17:84:cb:01:54:31:a0:c0:a0:97:a9:b4:f9:
b3:27:7e:cc:80:32:76:c0:ac:c7:1f:ac:34:49:60:
f8:28:a5:8e:17:8e:93:cd:47:d3:33:c9:20:7a:b2:
b4:7c:9e:73:b3:1a:e5:c7:a3:63:04:e9:b3:00:db:
de:bb:f6:be:34:42:74:3f:aa:ab:8f:51:51:59:5e:
00:82:f5:eb:1c:2d:d2:9f:70:0f:86:3d:a9:a3:9b:
d9:f0:62:40:2b:33:25:42:30:e9:45:bd:0b:e4:4d:
b9:71:fb:72:77:dd:12:44:23:d7:5b:61:d0:98:34:
61:3d:6d:67:40:7d:40:98:77:8c:91:2b:cc:a5:a9:
d1:ad:81:d7:e8:ca:74:c5:c1:1f:8f:dc:93:2b:21:
dc:36:cf:61:02:4a:fa:fd:5d:26:21:1d:4c:7d:fd:
12:9b:20:c8:81:9e:a7:82:55:54:14:97:f5:bb:d4:
7b:68:09:a2:12:47:62:0c:ab:9c:3e:d7:24:41:44:
f8:56:9a:ad:fc:cd:f0:aa:2d:0d:58:67:b6:c4:78:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:EA:82:2D:44:A4:49:3C:A6:A1:53:DB:D8:C6:6F:D4:D2:E5:BF
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3Yvqgi1EpEk8pqFT29jGb9TS5b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.80.237.0/24
194.250.211.0/24
195.101.157.0-195.101.158.255
Signature Algorithm: sha256WithRSAEncryption
0b:60:e6:4c:c2:d3:b2:5b:c8:d3:50:7f:c5:82:6f:9c:c1:05:
21:d4:5d:99:73:11:da:2a:5a:fd:34:ab:0e:ba:63:41:32:9d:
ca:81:f4:90:ac:df:bc:2c:92:c9:bf:3c:88:b0:5f:a7:0d:73:
6c:b8:b0:9e:fe:54:d1:dc:33:d1:be:0e:4b:e7:50:21:e4:09:
1f:ef:13:dc:28:c2:d2:a4:9b:ed:0e:7b:03:28:73:08:78:6a:
0a:81:3e:3a:ea:b3:ba:4c:b3:46:f0:5f:ac:8a:38:08:2b:2d:
b0:d7:dc:93:9e:26:95:97:33:b8:c9:e0:d5:9b:c0:60:16:e8:
22:81:db:fc:15:60:fd:36:0b:0f:2d:22:94:43:00:21:c8:c5:
c7:69:0b:19:c0:6d:08:cd:1f:e5:58:b1:9b:90:e8:4a:be:e4:
7f:30:e5:4d:41:00:45:6e:c8:18:7d:c0:25:19:b0:d9:83:fc:
9c:2d:df:dd:f3:a2:b7:aa:82:3c:86:e9:25:a5:5b:b7:74:72:
ce:e2:e5:cf:1d:6b:ee:ef:05:d2:7e:88:d5:85:b8:ad:27:c2:
27:25:69:65:d4:da:4f:6f:75:a6:aa:d0:d0:62:19:b9:e0:29:
8f:75:e5:85:4d:a9:03:bb:79:18:ba:87:2e:02:2d:89:19:27:
71:f2:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org