Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3_xoFdjzQQkcI-2LdD7HguoddYg.roa
File: 3_xoFdjzQQkcI-2LdD7HguoddYg.roa (raw, json)
Hash identifier: lFfgj5JuXZ4RB6K7iNRhrrwcsTdQOH0Kt9F3fRa5zS0=
Subject key identifier: DF:FC:68:15:D8:F3:41:09:1C:23:ED:8B:74:3E:C7:82:EA:1D:75:88
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 0584979B
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3_xoFdjzQQkcI-2LdD7HguoddYg.roa
Signing time: Sat 01 Jan 2022 06:04:27 +0000
ROA not before: Sat 01 Jan 2022 06:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51167
IP address blocks: 45.92.31.0/24 maxlen: 24
45.92.30.0/23 maxlen: 23
45.92.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92575643 (0x584979b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 06:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dffc6815d8f341091c23ed8b743ec782ea1d7588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:0b:3a:ca:5f:fd:0d:45:ee:99:20:f8:47:
43:a7:5a:4e:7f:bd:97:be:d6:79:48:79:3d:4b:6d:
34:23:32:8c:b3:4b:08:72:57:2c:94:91:c0:72:5a:
47:43:6f:06:44:46:56:11:3a:ac:4a:a5:cd:38:55:
4e:e9:35:78:39:d8:cb:82:b8:cb:4d:71:cc:1c:4d:
47:83:0b:21:29:dc:96:38:96:29:44:cd:3b:44:05:
4d:01:61:ec:55:bd:da:6b:2c:ce:58:91:80:9a:f0:
d4:eb:4b:21:03:5d:fa:16:86:67:69:52:52:81:27:
fa:63:7e:2e:5f:23:cd:d6:e4:4f:28:20:9c:17:28:
6b:af:56:ec:1e:2a:e9:3e:08:8c:9a:41:29:39:dd:
bc:55:83:68:34:21:70:2f:58:a9:32:72:a0:97:74:
df:b3:cd:39:36:5e:bf:4a:82:9b:b8:a8:fd:b5:eb:
6f:60:b4:91:54:d3:06:17:ab:e8:d2:54:db:8b:62:
ac:aa:24:8e:45:7e:ed:59:2d:7f:52:2f:3d:8e:4a:
fc:0e:68:05:ce:64:02:c4:3b:20:67:73:c8:00:52:
d1:cd:b7:f6:3d:66:1d:95:bd:8f:9f:47:11:ea:80:
11:1e:ec:ad:6d:6c:e2:fc:d8:98:18:16:5b:60:82:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:68:15:D8:F3:41:09:1C:23:ED:8B:74:3E:C7:82:EA:1D:75:88
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/3_xoFdjzQQkcI-2LdD7HguoddYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.30.0/23
Signature Algorithm: sha256WithRSAEncryption
23:d4:1e:45:d8:0c:18:26:31:94:73:d9:a7:41:21:2e:de:ee:
27:36:60:6d:69:17:db:07:c6:02:34:fd:b3:9e:cc:05:a7:74:
c1:83:46:31:6b:57:9e:85:01:ba:c2:03:53:26:fe:22:1c:41:
da:bc:09:b3:50:25:d1:77:34:91:eb:ac:f6:63:19:cb:8d:59:
19:68:cc:1f:8f:36:d5:69:c6:83:dd:ed:3b:75:22:9d:f8:5e:
b7:6f:52:23:12:c2:a8:92:cf:ab:85:4c:4d:82:b4:41:c8:8a:
a9:30:cb:8c:cb:2a:dc:e0:ba:b8:b3:aa:75:88:a6:00:1c:f6:
56:6b:85:b9:cd:51:e7:9f:e4:f1:a4:44:fb:0d:65:51:ce:74:
c2:bb:11:a9:3b:26:14:ac:3a:a5:47:4e:76:9e:ac:8f:48:68:
2b:59:b6:ce:b4:d2:79:44:a8:d7:f0:a5:f1:1e:f8:30:66:76:
37:38:b6:3e:60:0f:e0:b9:4c:72:73:e2:08:37:5a:cf:83:ff:
be:af:8f:ab:72:69:a8:a6:66:b8:67:40:08:c7:ad:6e:74:14:
e3:f1:94:93:45:7d:58:37:0a:73:2d:e6:39:c9:68:9c:02:e2:
60:23:cf:b0:8e:55:ac:87:0a:06:4e:30:e2:95:8f:81:e5:49:
93:c6:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org