Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/3JiRiuGIqxAd3ocDWf3qZuPCmno.roa
File: 3JiRiuGIqxAd3ocDWf3qZuPCmno.roa (raw, json)
Hash identifier: hq0iXspauKHFLyEEl0pWMc7t503hDnAUT6EVpY0W658=
Subject key identifier: DC:98:91:8A:E1:88:AB:10:1D:DE:87:03:59:FD:EA:66:E3:C2:9A:7A
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 101D9C02
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/3JiRiuGIqxAd3ocDWf3qZuPCmno.roa
Signing time: Wed 09 Mar 2022 23:25:07 +0000
ROA not before: Wed 09 Mar 2022 23:25:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205896
IP address blocks: 185.200.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270375938 (0x101d9c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Mar 9 23:25:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc98918ae188ab101dde870359fdea66e3c29a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:e5:a2:84:2d:16:10:8a:4a:b5:81:21:58:
10:40:a8:f0:72:01:ee:a2:4c:6e:08:99:35:8d:8a:
77:96:84:34:f8:fc:11:87:84:65:78:c7:07:cc:c7:
7b:7b:0c:15:1e:8f:75:ae:80:d2:4c:a8:49:90:85:
d9:5b:f8:ef:a8:c0:af:7a:a0:71:28:5e:83:73:ed:
5a:41:01:c6:17:65:a6:52:48:08:7a:4a:8c:4c:9d:
98:9f:f5:00:d3:31:f5:62:d4:cc:6f:c1:83:7a:37:
dc:a7:5b:7d:c5:34:4b:0a:bf:66:49:02:19:c2:6e:
e6:8e:bd:97:81:ce:75:45:30:dc:23:76:0a:c8:98:
fd:a9:73:9e:70:0d:c1:83:05:db:a2:3e:7a:7b:62:
47:78:51:6f:db:7b:bb:7a:ca:fa:26:88:6b:9c:29:
3f:9c:33:36:bf:72:48:2a:8f:26:80:f7:e6:59:aa:
35:44:ae:cd:ad:de:1b:70:3c:81:a4:28:43:36:cf:
23:9f:e0:01:5c:a2:11:15:29:ea:d6:f4:49:fa:19:
ca:d5:fe:80:fe:80:80:5d:79:7e:f9:49:eb:7e:12:
89:f0:6f:28:07:c3:6c:41:6f:0b:ad:b1:62:9c:6d:
44:5a:ca:4a:12:89:cb:4d:0a:d0:b8:03:6c:2b:71:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:91:8A:E1:88:AB:10:1D:DE:87:03:59:FD:EA:66:E3:C2:9A:7A
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/3JiRiuGIqxAd3ocDWf3qZuPCmno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.244.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a3:8f:07:41:e5:c2:d8:b9:9b:43:df:95:76:2a:3c:82:75:
02:a4:f1:e4:ce:19:a5:64:65:5c:ae:b3:3f:7e:be:96:36:a8:
8a:c8:c8:38:09:39:37:42:a8:99:f0:48:21:89:6b:6f:eb:d3:
54:cb:b8:4c:8b:0d:cb:29:51:72:a0:84:2d:a8:b2:52:73:5b:
23:5d:69:15:3c:c3:15:55:de:00:57:eb:02:94:9f:f6:9f:b4:
d2:a9:ce:cd:b2:ca:3f:54:0b:48:85:d6:9b:f7:6d:01:7c:e5:
76:7b:fa:be:08:f0:46:e4:a1:f5:3a:25:b0:8d:7d:a8:77:2b:
2b:67:0d:df:17:13:54:42:19:a6:5d:ce:36:16:d6:31:ac:40:
45:04:0b:b3:53:87:b9:75:a1:e4:70:e6:e8:fa:18:ae:e1:64:
13:4d:03:00:17:18:68:5e:8b:15:b4:c0:b6:0c:07:c4:e6:8a:
2e:88:c4:7f:49:e1:c1:8d:71:ad:38:36:9c:62:72:be:ae:08:
27:58:12:59:bc:e1:70:83:66:1a:11:80:3c:9d:4a:99:53:70:
f3:76:59:f6:0a:c0:ff:60:52:ad:40:4f:31:1c:da:97:6e:3f:
24:86:59:e3:1d:3d:a5:e8:6b:f4:da:d5:21:e3:e8:4e:08:cc:
5b:8a:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org