Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3hxHeE1H8woL-aBx86Gt5EJBCKc.roa
File: 3hxHeE1H8woL-aBx86Gt5EJBCKc.roa (raw, json)
Hash identifier: ldy9GJk+QfUOlWgkAVQ6vBOU6148mVpLLh8TcjrxQiw=
Subject key identifier: DE:1C:47:78:4D:47:F3:0A:0B:F9:A0:71:F3:A1:AD:E4:42:41:08:A7
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 44995822
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3hxHeE1H8woL-aBx86Gt5EJBCKc.roa
Signing time: Sat 01 Jan 2022 03:58:43 +0000
ROA not before: Sat 01 Jan 2022 03:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212709
IP address blocks: 194.51.187.0/24 maxlen: 24
81.252.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150900258 (0x44995822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de1c47784d47f30a0bf9a071f3a1ade4424108a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:d0:bd:60:cd:f9:38:07:7c:7d:0e:c4:b4:
27:f0:0e:30:40:c0:ab:fb:4a:4a:ca:4c:99:9b:bf:
1f:73:39:52:eb:8f:20:72:ce:7b:79:31:6b:1a:57:
df:07:37:cd:84:27:ec:18:d8:10:b2:64:fd:f1:7d:
1f:d1:05:e1:4e:74:60:92:8a:59:92:d2:39:1e:46:
09:56:a3:98:12:f5:be:85:40:fd:04:96:04:f8:44:
cd:1e:cb:dc:3d:b9:36:1f:7a:9c:71:8e:0f:71:66:
0c:31:47:89:d9:66:2d:be:64:91:72:90:20:7f:76:
d7:f2:e9:75:d4:64:91:5e:16:76:19:fb:33:90:3d:
ff:80:bc:4c:be:8f:d7:e8:03:3c:a9:61:b8:38:20:
3f:1b:52:fd:e9:93:0c:82:61:93:58:c2:7a:a8:27:
7c:f8:36:62:63:85:b8:91:5d:93:78:3c:8e:73:0b:
e3:00:ea:94:61:f0:8f:c6:be:08:2a:1e:2f:fe:e7:
c3:65:c3:e1:00:8f:59:f6:b4:77:f0:31:36:a7:88:
98:97:a5:a8:8a:89:a7:e4:d6:10:45:c2:e5:b5:b5:
54:79:3f:a8:cc:2d:78:6e:15:3d:28:06:56:10:75:
ee:b5:de:f9:82:ff:03:22:52:c6:f7:97:69:2a:fb:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:47:78:4D:47:F3:0A:0B:F9:A0:71:F3:A1:AD:E4:42:41:08:A7
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3hxHeE1H8woL-aBx86Gt5EJBCKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.252.189.0/24
194.51.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1c:6e:26:cb:0e:f0:f5:0e:85:9e:4f:74:fd:b4:cc:4b:c6:
2f:47:25:bd:18:62:ac:27:ae:17:b4:47:03:1d:4b:03:55:27:
09:69:cc:33:f2:9f:57:83:1a:16:bb:64:7a:c3:a4:3b:c5:2d:
ff:02:8f:e9:c5:9b:8a:54:bf:4e:d9:90:0c:87:d0:2f:15:e7:
b4:cd:d4:a9:7c:18:22:dc:4a:ec:14:5c:50:aa:97:81:57:67:
61:78:23:3e:0d:8d:0d:bc:13:b4:86:fb:1e:88:f5:b3:52:fd:
95:61:3f:dd:3c:6a:d5:4b:14:af:bb:e3:95:d5:9d:a5:5b:1a:
3f:68:ee:07:67:c8:6f:b3:08:69:6e:69:9f:57:f3:4e:e8:94:
43:cb:e1:58:59:b8:f8:06:22:61:69:8a:36:db:f4:74:4a:71:
1a:1c:8a:a9:7b:d3:ec:59:4a:98:6a:a9:76:86:7c:47:e0:66:
8c:9f:8d:ac:60:d2:13:7a:50:40:af:c5:1f:dd:61:f7:ef:4f:
69:26:4c:a5:b4:8e:e4:0d:f4:42:53:1f:b9:27:d5:0c:98:b4:
fa:3d:3b:9e:87:0e:68:a3:37:7d:89:75:4c:c7:c6:28:d5:04:
6b:d3:e7:99:c0:b0:0c:14:a4:6e:ce:45:cd:5f:fb:f3:b0:c7:
d9:d0:f3:c1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIERJlYIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDEw
MTAzNTg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGUxYzQ3Nzg0ZDQ3
ZjMwYTBiZjlhMDcxZjNhMWFkZTQ0MjQxMDhhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKNu0L1gzfk4B3x9DsS0J/AOMEDAq/tKSspMmZu/H3M5UuuP
IHLOe3kxaxpX3wc3zYQn7BjYELJk/fF9H9EF4U50YJKKWZLSOR5GCVajmBL1voVA
/QSWBPhEzR7L3D25Nh96nHGOD3FmDDFHidlmLb5kkXKQIH921/LpddRkkV4Wdhn7
M5A9/4C8TL6P1+gDPKlhuDggPxtS/emTDIJhk1jCeqgnfPg2YmOFuJFdk3g8jnML
4wDqlGHwj8a+CCoeL/7nw2XD4QCPWfa0d/AxNqeImJelqIqJp+TWEEXC5bW1VHk/
qMwteG4VPSgGVhB17rXe+YL/AyJSxveXaSr7SfECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTeHEd4TUfzCgv5oHHzoa3kQkEIpzAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
LzNoeEhlRTFIOHdvTC1hQng4Nkd0NUVKQkNLYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFH8vQMEAMIzuzANBgkqhkiG9w0B
AQsFAAOCAQEAPhxuJssO8PUOhZ5PdP20zEvGL0clvRhirCeuF7RHAx1LA1UnCWnM
M/KfV4MaFrtkesOkO8Ut/wKP6cWbilS/TtmQDIfQLxXntM3UqXwYItxK7BRcUKqX
gVdnYXgjPg2NDbwTtIb7Hoj1s1L9lWE/3Txq1UsUr7vjldWdpVsaP2juB2fIb7MI
aW5pn1fzTuiUQ8vhWFm4+AYiYWmKNtv0dEpxGhyKqXvT7FlKmGqpdoZ8R+BmjJ+N
rGDSE3pQQK/FH91h9+9PaSZMpbSO5A30QlMfuSfVDJi0+j07nocOaKM3fYl1TMfG
KNUEa9PnmcCwDBSkbs5FzV/787DH2dDzwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org