Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/3-MFbTllXzneljepaLbLv1Ovuos.roa
File: 3-MFbTllXzneljepaLbLv1Ovuos.roa (raw, json)
Hash identifier: 0RHsVXWgk05SofJUNSQUDiUjCd9Gc8Y2oVgCICG3jF4=
Subject key identifier: DF:E3:05:6D:39:65:5F:39:DE:96:37:A9:68:B6:CB:BF:53:AF:BA:8B
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 330D3FAF
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/3-MFbTllXzneljepaLbLv1Ovuos.roa
Signing time: Sat 01 Jan 2022 02:59:12 +0000
ROA not before: Sat 01 Jan 2022 02:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31034
IP address blocks: 185.58.192.0/22 maxlen: 24
109.70.244.0/22 maxlen: 24
109.70.240.0/22 maxlen: 24
2a04:e101::/32 maxlen: 32
2a04:e100::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856506287 (0x330d3faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Jan 1 02:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfe3056d39655f39de9637a968b6cbbf53afba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:c4:47:7d:d8:44:44:d2:ef:6a:ca:24:a7:
f9:7a:37:49:99:7a:df:2e:f5:97:df:4b:02:6c:16:
6b:d7:75:98:ec:3d:4e:24:a4:77:a9:c6:da:26:cc:
38:61:9c:84:56:a0:02:2e:8a:e5:76:b7:a5:1c:3f:
1e:34:02:ae:c8:e9:a0:cb:6e:52:c0:cb:e7:4b:f0:
a2:83:1f:1e:60:81:4c:dc:ff:44:94:28:74:c7:ad:
ed:d5:be:3a:22:60:da:37:5e:f3:ee:3c:fe:df:4b:
c1:53:4f:42:12:66:47:fc:b7:a1:b5:4d:86:1b:70:
19:6f:ed:eb:cb:77:36:e9:e8:91:29:2c:73:17:60:
dc:2d:06:d5:22:f2:2b:51:eb:61:b5:0f:92:50:64:
c6:f7:c1:da:07:a1:8f:e0:a8:19:ce:48:fe:2c:55:
a8:a5:1e:fe:1f:42:9e:60:14:f0:dd:f9:c1:3b:c5:
21:5e:14:cc:5b:04:4a:79:b2:16:2f:47:70:3d:a5:
64:4a:2e:29:49:a9:53:24:39:50:f8:03:a3:86:e6:
97:2e:26:1c:b1:6c:e8:04:53:a2:6a:99:fd:08:41:
da:ea:97:9a:e0:f5:4c:8e:55:72:f0:8a:9d:3f:de:
4d:1e:98:fb:01:96:33:e9:4b:58:58:9c:72:88:e9:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E3:05:6D:39:65:5F:39:DE:96:37:A9:68:B6:CB:BF:53:AF:BA:8B
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/3-MFbTllXzneljepaLbLv1Ovuos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.240.0/21
185.58.192.0/22
IPv6:
2a04:e100::/31
Signature Algorithm: sha256WithRSAEncryption
31:bf:9f:43:e6:98:7d:25:44:d3:a8:bb:bc:30:36:ee:3b:b2:
e8:10:2c:4d:c6:6a:69:1b:3e:dc:0c:73:f7:4c:7e:6c:d3:54:
30:8c:f4:01:63:b7:3f:a2:e0:97:2b:d1:7f:ac:fb:3a:34:d1:
77:fc:4f:50:67:fe:db:f8:9e:ef:93:0a:54:9b:5b:e2:b6:a4:
28:97:fd:1f:fa:a2:72:ed:b8:96:97:a2:fe:00:6d:15:8e:05:
b6:22:57:0a:68:ab:84:3f:ff:39:23:b7:99:9d:fd:9f:53:84:
e6:98:d7:3e:0f:8e:37:69:05:9c:08:db:f5:96:51:88:81:2b:
a8:06:44:87:51:b0:1b:07:27:88:c3:05:28:dd:f0:20:fa:0c:
5d:5d:8e:90:95:33:21:30:7b:e7:65:b0:f2:a1:27:64:d3:f0:
10:18:87:f1:a0:70:1e:e7:79:28:55:f3:9b:2a:0a:79:e9:bc:
b5:a5:fd:28:c1:13:29:54:3d:e7:4c:2b:a3:5f:b4:02:ea:37:
65:11:ac:57:c0:e6:54:ef:53:59:84:5a:0d:22:f6:8d:80:b6:
a9:db:ca:01:10:b3:1a:74:89:d5:79:62:22:31:4d:46:f8:d9:
1a:55:5b:5d:40:2e:e7:93:11:01:57:b9:6f:a5:02:85:96:61:
9e:b4:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org