Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/3XgMSqYtF0KuK0YwGHEvFuEnEU4.roa
File: 3XgMSqYtF0KuK0YwGHEvFuEnEU4.roa (raw, json)
Hash identifier: 0GbiYWjcSLy8wBfYiDooxAkAxx6OobQ48XD1/oTcpPg=
Subject key identifier: DD:78:0C:4A:A6:2D:17:42:AE:2B:46:30:18:71:2F:16:E1:27:11:4E
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 0475D683
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/3XgMSqYtF0KuK0YwGHEvFuEnEU4.roa
Signing time: Wed 19 Jan 2022 07:05:02 +0000
ROA not before: Wed 19 Jan 2022 07:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212403
IP address blocks: 149.226.252.0/24 maxlen: 24
2a03:cc00:fc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74831491 (0x475d683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 19 07:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd780c4aa62d1742ae2b463018712f16e127114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:72:eb:00:06:02:89:6b:cf:7f:d0:5d:f3:
fc:04:67:88:a6:ee:85:e2:47:d3:e7:5e:cd:75:47:
ef:0c:a9:81:39:1a:1a:80:f5:04:08:cd:f2:9b:76:
da:25:d8:58:24:5f:98:12:a2:f5:3f:5d:10:10:ca:
e0:9e:14:48:9d:84:30:ce:84:6c:cf:27:b3:85:5f:
00:f4:58:18:1a:26:ad:8a:b7:4d:55:b4:76:18:c5:
58:e9:b6:2a:4f:ce:1c:47:9c:cc:82:f9:b6:32:40:
a7:c2:8a:95:22:40:d8:0e:ce:e9:b8:8d:67:1f:06:
74:7b:4c:5b:8e:0b:5d:8d:b3:6c:bb:40:9e:68:25:
51:68:18:64:1e:ab:31:f9:0b:8d:c9:38:c7:38:76:
26:a2:d1:d2:ae:85:fe:46:fe:42:1b:96:3c:49:ca:
0f:3f:e7:22:3d:08:51:42:db:44:b8:89:2e:68:85:
ee:06:09:de:aa:e5:fe:06:c2:3f:de:ce:47:00:80:
5a:1d:05:0a:c5:19:45:a2:ce:34:76:71:2d:5b:2d:
d1:a7:10:be:5b:0a:58:9b:3a:e9:a0:be:5e:c2:40:
ab:1e:d3:90:75:08:57:74:dd:ea:6a:43:49:5d:43:
c1:dc:d3:11:a5:f7:73:58:f5:dd:a5:ba:6b:3a:3b:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:0C:4A:A6:2D:17:42:AE:2B:46:30:18:71:2F:16:E1:27:11:4E
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/3XgMSqYtF0KuK0YwGHEvFuEnEU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.252.0/24
IPv6:
2a03:cc00:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
68:6b:fb:d6:46:58:29:a2:bb:dd:b4:fc:d5:47:15:33:f3:0f:
82:92:d9:bb:d9:be:2d:83:5f:cf:76:27:c7:d8:c7:f0:9a:38:
99:70:19:6e:8a:45:1a:ad:38:fb:77:ee:37:42:a6:c5:e0:ba:
5c:2d:01:2e:16:e2:2b:ca:2e:d4:55:5a:c3:5f:43:cd:ff:c6:
67:46:91:0a:c4:a3:be:0f:23:90:1a:0a:03:f4:c2:dc:bb:e7:
1f:7d:b8:cd:95:cc:94:d1:0f:0a:2c:e8:ef:90:3a:22:6e:ba:
b1:63:41:27:1d:c7:6e:ca:7b:bc:3d:bd:cb:b1:77:15:4e:7e:
15:3b:3d:a2:73:15:ae:4d:7e:9a:ac:d0:c7:f6:1a:d2:ab:ea:
c7:4f:cc:eb:03:38:80:e1:72:29:23:9a:b8:19:d7:77:2d:cb:
44:d6:b6:56:f1:22:1e:75:f1:e2:51:bc:78:f4:22:1f:df:6d:
93:73:a6:6f:06:33:1f:b3:00:7f:19:35:29:0d:25:be:73:f9:
be:e3:df:11:3f:ad:5f:e4:57:fb:d4:e0:41:b2:f5:ab:2c:6b:
d1:9e:93:4c:65:bb:0e:01:8e:23:20:da:3a:37:28:05:da:d3:
65:01:83:83:2f:65:9b:3a:fb:ff:3a:95:c4:22:6f:b7:75:cb:
f7:a9:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:05 2024 by rpki-client on console-ams.rpki-client.org