Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x3TMRBjJDjlztI2A8iHXcTtDMdM.roa
File: x3TMRBjJDjlztI2A8iHXcTtDMdM.roa (raw, json)
Hash identifier: E3zoR4mlN4kH+DakLn+jYw4tubsK7MZhH1sFQX+cpUQ=
Subject key identifier: C7:74:CC:44:18:C9:0E:39:73:B4:8D:80:F2:21:D7:71:3B:43:31:D3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018533FC3BDAB2AA9DFCC9BFD9B7ED23DCB0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x3TMRBjJDjlztI2A8iHXcTtDMdM.roa
Signing time: Wed 21 Dec 2022 09:20:46 +0000
ROA not before: Wed 21 Dec 2022 09:20:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 82.153.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:fc:3b:da:b2:aa:9d:fc:c9:bf:d9:b7:ed:23:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 21 09:20:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c774cc4418c90e3973b48d80f221d7713b4331d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:6c:2a:af:cd:23:fa:d5:a4:7d:93:fa:62:
4a:e7:7a:41:7c:04:14:db:d5:5f:95:3c:97:c2:cc:
a9:fa:15:e1:ff:b1:cb:78:51:e7:f2:85:13:b7:20:
cf:a6:e7:aa:30:34:f5:88:b5:1b:73:a7:ea:7b:74:
7d:85:5a:bd:16:bb:3f:69:1b:28:df:2d:14:d0:98:
b6:35:dc:72:1a:7f:2a:5f:ba:70:a0:28:2a:6f:1a:
d9:b1:e3:f1:ff:cd:09:ad:07:64:14:8c:5c:a6:a5:
4f:4d:1c:77:27:7d:6c:33:3c:68:d4:7f:f2:96:df:
b5:60:7c:73:34:31:f3:85:a9:16:e8:fc:a2:54:ac:
9e:f9:34:61:e7:37:1a:5a:91:31:a3:6a:dc:ab:73:
92:6c:f8:c7:2c:6d:c9:27:96:30:ad:4c:0e:18:46:
a9:5e:55:ae:26:92:e2:9e:f9:f5:e2:93:09:44:2a:
20:5c:fc:55:64:b9:02:83:33:5b:54:31:d8:65:3f:
69:07:4a:d3:6c:57:35:ed:5e:a8:49:61:14:4e:e8:
63:b4:83:f3:ad:ba:24:49:76:26:89:d9:17:34:2a:
ac:34:4a:6c:66:0f:57:05:bb:2b:6f:d4:43:8e:21:
05:09:c2:5f:b6:18:bd:c9:04:a2:9e:9c:9c:f2:d7:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:CC:44:18:C9:0E:39:73:B4:8D:80:F2:21:D7:71:3B:43:31:D3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x3TMRBjJDjlztI2A8iHXcTtDMdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.242.0/24
Signature Algorithm: sha256WithRSAEncryption
70:26:06:93:ef:84:06:d2:8f:79:96:0a:04:0b:81:d3:eb:17:
b5:2f:98:cb:bf:1e:8e:d9:3d:d7:b1:40:29:ad:84:ec:f8:ad:
44:6f:6c:c7:08:f4:77:49:25:98:4f:ea:77:12:00:db:88:23:
4b:98:db:0b:99:9c:e6:e7:0d:0c:fa:de:ca:db:66:3e:d4:10:
fd:d7:f4:76:ea:db:02:9f:ee:09:20:98:ac:7a:f1:9c:df:94:
72:d6:e7:32:2e:09:f0:88:52:e7:be:19:4a:c9:ad:c6:78:81:
25:a6:17:10:7d:f8:21:5c:42:3f:a5:e7:52:7c:bb:e9:8a:c0:
09:80:67:5c:14:aa:41:6a:b7:8a:37:48:a5:24:d3:1e:27:98:
b2:a8:da:dc:0a:3a:80:a2:f5:67:82:d6:b6:a8:97:15:93:4d:
89:74:bf:5a:9f:c5:76:ec:e5:66:91:a7:45:92:ea:87:e8:ed:
f9:d8:54:66:3d:c1:6e:05:91:4c:49:c3:eb:86:b4:ea:5a:ea:
95:5f:2a:24:b4:6d:5f:56:d9:f4:51:09:3a:9b:5f:7d:49:9c:
a7:33:30:13:ae:7d:fd:e8:d8:ae:5a:2f:23:58:55:b5:15:27:
65:68:b1:6f:d8:ef:a2:84:3d:d3:05:32:80:9a:7f:9d:1e:5f:
8b:6b:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org