Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3baBH_65cxlM3-WqIGKhsE6fv8s.roa
File: 3baBH_65cxlM3-WqIGKhsE6fv8s.roa (raw, json)
Hash identifier: bxhC3/xwsrVWByv4vyOcO+DjYGrMmNR8s0s8jCbR9rs=
Subject key identifier: DD:B6:81:1F:FE:B9:73:19:4C:DF:E5:AA:20:62:A1:B0:4E:9F:BF:CB
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 16149039
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3baBH_65cxlM3-WqIGKhsE6fv8s.roa
Signing time: Wed 16 Mar 2022 13:57:10 +0000
ROA not before: Wed 16 Mar 2022 13:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42549
IP address blocks: 45.82.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370446393 (0x16149039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Mar 16 13:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddb6811ffeb973194cdfe5aa2062a1b04e9fbfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:f6:17:cd:d9:a5:2a:18:a6:49:48:cd:fe:
ce:85:c4:32:74:90:7c:dc:17:f9:f7:be:47:42:18:
62:c2:27:17:f4:a0:1e:e3:bd:fc:05:8d:91:43:99:
b6:ac:75:a0:da:80:92:db:8e:05:c9:9b:95:bf:46:
02:30:6a:e5:d4:46:ff:b2:1f:b9:58:51:b3:2b:ec:
42:5a:f8:50:a5:70:a3:c5:bf:ac:5b:b5:5d:fc:e1:
83:1d:8b:b6:63:fe:b8:ff:ca:31:49:a4:fc:23:c6:
14:80:72:10:7e:dc:f0:bc:30:81:b7:96:f5:c2:6a:
83:62:8a:a8:2b:aa:ef:a0:34:72:60:ac:cd:01:6d:
7d:0b:da:25:ba:73:5c:84:b5:60:b1:1b:0c:b7:8f:
78:c5:d1:9a:3e:00:b4:13:97:ee:be:e2:2f:bd:4f:
1f:e1:41:cb:e5:6b:6a:06:60:c4:04:83:9a:ed:6f:
0c:55:b8:8a:5e:99:be:dd:89:c8:c8:a5:48:34:d1:
c3:2b:7a:aa:f2:ff:f0:51:45:b5:bf:ba:60:03:90:
ba:bf:3a:17:3e:16:30:27:03:60:0c:d3:9f:14:42:
7e:fe:82:d5:ef:eb:c8:73:76:df:7e:ab:08:9d:e8:
78:9b:fc:7a:f0:ac:bb:16:0f:87:24:70:a1:77:74:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:81:1F:FE:B9:73:19:4C:DF:E5:AA:20:62:A1:B0:4E:9F:BF:CB
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3baBH_65cxlM3-WqIGKhsE6fv8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e3:d3:32:3d:0c:07:ad:cb:07:3f:f5:61:f3:8a:f9:f8:03:
23:ef:a7:d5:15:1e:07:9d:01:42:eb:4e:b4:62:2b:5f:64:09:
32:69:49:1d:60:95:0c:5c:d6:6b:b3:ea:1b:89:47:a6:e8:bb:
54:a9:33:24:07:a0:c2:6d:c5:32:af:de:57:d5:ad:4f:d8:c3:
82:6c:b1:ef:16:6c:c1:0d:12:a9:a0:1a:ff:8e:a1:3e:ed:dc:
58:18:ea:7c:b9:1a:8f:1e:0e:4f:10:ca:28:aa:92:7b:e6:bc:
82:0b:f6:8e:85:37:55:a9:84:bb:4b:43:16:df:55:80:57:8e:
67:eb:d8:a4:c1:87:aa:23:07:38:94:5d:8a:f7:1f:76:83:8d:
5d:36:3c:1e:28:8f:d6:44:52:ad:fd:26:4b:80:fe:b3:e7:0e:
83:83:57:bf:1f:d6:fb:3b:45:1b:b2:39:04:65:de:14:71:6f:
a5:ce:78:b2:22:6a:d4:4e:fa:1b:db:59:a9:ed:90:95:1b:d9:
8d:69:f5:48:21:92:08:fd:64:94:12:73:fa:1c:87:9e:d9:e9:
77:16:a2:fd:71:e6:99:26:45:e5:da:d9:49:58:d3:72:ca:22:
aa:c2:0a:55:61:1c:6e:7d:15:68:09:29:6e:43:82:72:c8:78:
9f:9b:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org