Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/3xpm7AFPwzh1uCLUfJfQpbjACnY.roa
File: 3xpm7AFPwzh1uCLUfJfQpbjACnY.roa (raw, json)
Hash identifier: Q5INh39O1dsgrRMtiXEECg34+teZCnqoCqmpvEEn6qA=
Subject key identifier: DF:1A:66:EC:01:4F:C3:38:75:B8:22:D4:7C:97:D0:A5:B8:C0:0A:76
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 06329E50
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/3xpm7AFPwzh1uCLUfJfQpbjACnY.roa
Signing time: Thu 19 May 2022 12:57:29 +0000
ROA not before: Thu 19 May 2022 12:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59816
IP address blocks: 194.70.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103980624 (0x6329e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: May 19 12:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df1a66ec014fc33875b822d47c97d0a5b8c00a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:52:a2:02:01:43:44:aa:5d:08:c7:21:11:
64:4c:35:6c:5f:95:75:d5:49:58:83:08:95:62:62:
51:e2:03:a4:7c:91:c2:ba:8c:04:a1:02:e2:17:ad:
3e:34:86:41:dd:0c:f0:d8:6d:1a:a8:a6:53:3d:6c:
79:be:0d:db:69:cc:15:51:7c:4f:59:26:dd:7f:2d:
e6:3e:86:97:77:a0:97:25:d2:55:fd:ae:67:a2:d2:
61:e4:79:35:46:d5:89:7d:67:08:0c:8c:f3:5b:b2:
d1:c8:5a:b1:ba:d0:ac:9f:b4:d8:ad:68:66:84:54:
01:10:5a:c5:a8:1b:2d:e5:a1:a5:6f:87:06:f2:77:
ed:14:5d:b8:ea:c6:fb:3c:5d:5f:8b:7e:01:2f:a2:
a5:68:e2:dc:4d:7b:0b:24:ab:3d:a5:d0:c5:0e:7c:
d4:e8:88:49:82:5b:c5:19:4a:38:b8:0d:79:04:87:
da:16:40:f1:4f:fd:81:d9:89:ed:e2:22:26:b9:c1:
ab:62:26:a1:67:8d:cb:7c:2b:f1:f7:94:32:c0:69:
0c:33:76:2a:ea:8b:71:87:c1:e7:18:ba:7b:79:c9:
31:b0:a6:41:4f:9f:c7:10:99:71:0d:89:c2:a7:94:
ad:9d:a4:d5:1c:8c:45:1c:92:38:8f:30:7e:cd:8c:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:66:EC:01:4F:C3:38:75:B8:22:D4:7C:97:D0:A5:B8:C0:0A:76
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/3xpm7AFPwzh1uCLUfJfQpbjACnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e0:4e:d7:b8:76:a7:5b:cc:cb:a9:21:c4:d6:f2:af:01:26:
ce:f4:bc:66:e3:9a:fd:5c:8c:85:6b:a9:e6:81:fe:9a:c6:dc:
27:2f:dd:12:2e:78:1a:e4:d2:4c:83:e9:62:c7:1a:1d:27:46:
51:85:5d:84:81:13:89:3f:24:98:5e:43:36:18:2e:b9:65:a1:
23:a8:ad:a6:89:f1:3f:96:90:86:3e:11:52:ba:02:6e:28:6b:
a6:49:d2:70:1c:26:30:70:b5:e8:e5:18:6c:0e:b5:d9:0f:cc:
97:91:6d:8c:a9:fd:47:ea:09:06:f8:10:a2:bb:80:80:5f:7a:
05:e9:58:76:f8:b8:d5:8d:ee:a2:d3:8d:c9:ba:47:11:2c:fe:
6c:b6:e9:84:71:d7:d1:c5:22:2a:ac:ee:51:0f:a7:62:ee:9c:
25:06:8e:67:26:b5:ba:8e:7a:54:29:4f:1a:02:37:d3:25:31:
42:53:89:73:ee:cc:d7:2f:ff:0e:77:90:97:d5:c0:36:8d:81:
ff:42:b7:5f:b0:07:e6:ef:b3:31:cc:d5:53:90:01:ac:07:64:
48:55:6a:89:ca:9e:b1:bf:ca:0f:5f:e5:15:f1:ed:0e:5d:90:
e2:70:4e:37:62:cf:8e:13:93:eb:a2:21:0a:26:91:8b:6d:17:
8d:ce:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:10 2024 by rpki-client on console-ams.rpki-client.org