Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/3S-NG5UdfWtcp36MKqicXHIAY_4.roa
File: 3S-NG5UdfWtcp36MKqicXHIAY_4.roa (raw, json)
Hash identifier: euww58tvTaNttwevV+aFAfxMWHc+3B1jrbBxHeU8Fq8=
Subject key identifier: DD:2F:8D:1B:95:1D:7D:6B:5C:A7:7E:8C:2A:A8:9C:5C:72:00:63:FE
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 05719BED
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/3S-NG5UdfWtcp36MKqicXHIAY_4.roa
Signing time: Sat 01 Jan 2022 06:53:15 +0000
ROA not before: Sat 01 Jan 2022 06:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.123.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91331565 (0x5719bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jan 1 06:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd2f8d1b951d7d6b5ca77e8c2aa89c5c720063fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:79:95:bb:99:52:13:9e:a9:cb:3e:94:50:
6f:98:fa:b4:d8:c2:89:24:ce:bf:96:7d:36:bc:25:
5d:ad:b0:52:72:90:3e:54:e5:9a:77:6b:4d:4a:ed:
17:eb:4b:ef:b8:51:80:21:19:af:95:4e:23:2d:1c:
44:cb:bf:f6:c6:6f:78:b0:1e:82:4e:cb:a7:c3:9d:
95:f4:21:bc:fd:a8:95:33:fb:aa:e2:3f:d3:72:7e:
a5:c8:c4:c9:34:f7:7e:db:c0:4e:6c:23:68:42:d7:
a2:da:7d:f3:b7:ad:cc:7e:e2:d8:51:7d:92:40:71:
49:a3:19:26:50:dd:bd:48:2c:97:f4:dc:28:20:40:
ac:54:13:08:56:2a:f5:b4:d3:a7:78:cd:e0:24:67:
f9:33:9e:e7:da:c2:03:ba:9d:71:d8:de:96:1b:53:
64:a7:bd:c6:52:84:9d:58:ed:85:3f:7a:18:04:79:
7a:9f:d5:d1:9a:02:13:4a:80:dc:f6:19:c0:af:0e:
f1:40:e1:20:33:da:d0:07:0d:cd:86:20:13:36:e3:
b8:03:01:48:01:46:8d:33:2e:ee:06:10:3d:a5:76:
46:d9:d3:2a:19:88:7e:cb:d5:e5:22:0d:bf:f9:65:
8b:b5:6c:24:0c:a3:7d:e2:35:81:2b:c8:07:2d:49:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:8D:1B:95:1D:7D:6B:5C:A7:7E:8C:2A:A8:9C:5C:72:00:63:FE
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/3S-NG5UdfWtcp36MKqicXHIAY_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
78:10:55:33:6c:81:a7:00:e7:e9:ff:4e:10:0b:48:5e:66:6e:
b2:56:e6:2f:22:bc:50:58:bc:59:78:fe:47:c9:99:d8:e6:0b:
c8:17:67:a0:6b:33:33:bb:ed:9f:d7:02:12:13:42:85:ed:72:
bd:92:7b:b6:8f:b9:df:cb:f7:59:8d:0a:a8:d9:1b:1e:d5:ed:
bf:46:e6:fe:fb:ec:c5:99:a7:00:ce:c8:29:27:3f:44:cb:08:
88:d8:00:73:9b:ed:e5:ff:28:be:18:53:8f:18:0b:2e:2e:1c:
69:dd:46:10:36:42:d5:37:0a:1a:94:54:2f:63:a5:79:fc:86:
1e:1c:61:e4:12:a9:a3:57:cb:9d:8b:a6:9e:28:61:4f:37:85:
41:80:e8:42:50:16:a9:25:c8:2f:45:10:9d:68:61:b6:e8:73:
cb:5b:f3:f7:47:be:aa:58:29:e7:90:e1:56:af:7c:17:74:19:
c6:35:b1:95:35:fc:45:64:f0:3b:6d:53:4d:ec:76:b8:46:ab:
2f:b9:3c:e6:70:ca:52:f5:98:25:29:1a:d7:28:5e:56:54:6a:
da:f2:39:a1:6e:ed:9b:26:14:b7:71:74:4f:40:d8:8d:bd:00:
70:14:50:a0:0e:e2:cf:a1:50:4b:a8:c5:ac:a4:c9:cc:d1:8c:
3e:92:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:24 2023 by rpki-client on console-fra.rpki-client.org