Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3sPU-lh4i7XR_u1EZRflRYsu4gM.roa
File: 3sPU-lh4i7XR_u1EZRflRYsu4gM.roa (raw, json)
Hash identifier: SttA73wao4NTHuod64mKeWSQ/5gwRU08Y7eIRk5YWrE=
Subject key identifier: DE:C3:D4:FA:58:78:8B:B5:D1:FE:ED:44:65:17:E5:45:8B:2E:E2:03
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14E6A606
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3sPU-lh4i7XR_u1EZRflRYsu4gM.roa
Signing time: Mon 09 May 2022 07:39:36 +0000
ROA not before: Mon 09 May 2022 07:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133206
IP address blocks: 188.214.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350660102 (0x14e6a606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 9 07:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dec3d4fa58788bb5d1feed446517e5458b2ee203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:e7:b1:31:8b:95:e5:e6:7e:3e:88:f9:c9:
34:37:90:ba:ab:6e:12:40:66:ad:ef:ea:bc:bb:4b:
96:f5:d2:ac:b5:06:a2:05:6d:af:bd:c2:01:bc:03:
77:ef:7e:5b:8e:08:2c:91:ad:99:09:13:b0:41:c1:
31:db:10:60:69:ae:b2:6b:e6:fc:83:dd:a9:3a:d9:
3f:51:55:ad:de:2b:b4:5c:47:4f:6b:ea:40:d8:d7:
87:03:01:8f:bd:4d:96:94:03:18:6b:b4:05:fd:d4:
b3:de:50:56:f0:27:ad:77:cb:38:5a:47:73:8a:9e:
17:64:2a:c2:8b:23:e3:ba:44:97:ef:36:69:51:d3:
b7:98:d3:fe:9d:38:22:40:3d:e6:e3:fc:02:7f:84:
a2:b6:81:0d:60:58:27:45:74:08:0e:fc:fc:54:ae:
fe:39:27:ac:c3:f6:29:a7:e1:0c:27:a8:d0:00:08:
95:af:e1:06:2e:06:fb:d0:e3:fe:33:35:a4:a6:51:
4a:49:b5:6d:df:6e:a8:72:07:61:52:91:30:67:3b:
73:f2:33:a0:18:bd:24:75:73:c1:7b:47:60:b9:f4:
d3:2c:3a:eb:25:e1:fe:a4:44:f9:57:68:85:8c:b5:
8b:c4:fc:79:bf:c9:df:79:11:86:2c:4c:1d:ae:61:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:D4:FA:58:78:8B:B5:D1:FE:ED:44:65:17:E5:45:8B:2E:E2:03
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3sPU-lh4i7XR_u1EZRflRYsu4gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.236.0/22
Signature Algorithm: sha256WithRSAEncryption
74:91:10:a2:be:8e:e0:14:c4:69:86:7e:40:ff:44:49:99:ca:
76:5e:2e:cc:0a:d9:1c:01:94:4b:f8:ae:68:c7:df:6a:f1:ab:
1f:c0:de:cd:c4:33:b6:16:b9:11:21:70:9c:0d:25:ae:1c:bd:
5a:67:58:44:aa:cd:d4:cf:36:8e:2b:5f:4a:cc:da:b9:45:a0:
f3:e4:e6:24:e1:7b:61:03:ca:cb:c8:89:3c:a8:ff:6c:06:a6:
be:71:66:47:c4:4e:fb:aa:b0:78:7c:88:e4:ee:7e:b1:f5:f0:
71:e1:3d:f6:84:a1:33:36:a2:46:a1:1d:e3:d5:de:61:c8:8f:
9b:0a:47:70:c2:b7:b1:7c:7c:49:bd:8a:0c:17:33:f9:76:b3:
b3:83:ab:79:ce:85:f0:61:0f:33:a6:53:1b:ba:da:a7:55:bd:
75:b5:92:4e:32:d5:be:29:86:54:d6:f2:c5:60:1a:c9:76:66:
43:0c:88:e7:9f:d0:ac:b1:6c:4a:58:87:ae:dd:1b:20:e0:37:
01:24:dc:d5:66:35:e0:3e:12:d5:2b:cf:ad:df:e7:97:a4:69:
7e:0d:98:de:5e:06:14:ae:8e:7a:ad:b6:3e:dc:cd:88:ae:0d:
1e:80:34:af:21:fb:5b:73:0e:29:6e:49:99:9a:5e:85:6f:85:
2e:b7:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org