Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/P3MwIKHHopMbzOTT3QhJXdDharU.roa
File: P3MwIKHHopMbzOTT3QhJXdDharU.roa (raw, json)
Hash identifier: 5ig4TfzudqsWe+pDkbYeaJNsvII/rGxl1Wrr7ZWoLbM=
Subject key identifier: 3F:73:30:20:A1:C7:A2:93:1B:CC:E4:D3:DD:08:49:5D:D0:E1:6A:B5
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 03A09F9E
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/P3MwIKHHopMbzOTT3QhJXdDharU.roa
Signing time: Thu 05 May 2022 14:02:35 +0000
ROA not before: Thu 05 May 2022 14:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.69.220.0/22 maxlen: 24
80.90.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60858270 (0x3a09f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: May 5 14:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f733020a1c7a2931bcce4d3dd08495dd0e16ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:5e:f6:8d:40:60:e4:12:83:05:e5:be:39:
ec:88:29:d1:94:9d:10:b2:90:b8:e9:10:38:f2:29:
54:9d:9d:ad:59:44:3e:25:69:3f:2f:70:d0:3b:07:
d6:fe:c4:4e:89:53:2a:74:9d:e4:9c:42:d0:ba:ad:
bc:02:5a:eb:ba:09:9c:e6:50:40:5f:c4:58:61:38:
68:ed:25:65:b6:0b:42:3e:49:1a:7e:be:d4:c4:ae:
77:b0:a4:85:55:47:42:96:6b:81:54:65:62:4f:da:
8b:e8:7e:4f:c9:f6:c5:a9:81:91:2b:51:16:0b:a7:
21:17:90:38:91:a8:d6:6e:07:63:68:27:19:26:a1:
28:a6:9d:25:75:00:83:d4:0d:9a:8e:f2:fb:b7:80:
49:6b:ae:fc:e3:93:4e:fa:3b:af:a8:4c:07:f6:bd:
97:80:e9:85:1a:e4:a4:99:9f:f6:53:f8:42:b9:fc:
08:5e:af:45:c8:5e:50:de:b2:10:3c:db:b4:d4:5e:
c9:48:cc:c6:b9:4b:36:62:dd:4a:73:35:02:4e:30:
08:2d:45:ab:8e:7b:68:fd:63:2d:44:55:16:5d:49:
43:68:88:db:20:5a:20:38:37:e3:b0:2c:37:d9:01:
59:44:f3:54:7c:34:15:2c:03:1a:73:e1:a2:f5:04:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:30:20:A1:C7:A2:93:1B:CC:E4:D3:DD:08:49:5D:D0:E1:6A:B5
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/P3MwIKHHopMbzOTT3QhJXdDharU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.184.0/22
185.69.220.0/22
Signature Algorithm: sha256WithRSAEncryption
45:af:46:60:04:43:9e:05:ab:cf:33:09:c8:49:9e:ef:c0:e7:
47:71:f2:c5:d2:c3:88:e9:ef:fd:11:3f:4f:49:ef:de:83:3f:
de:49:c1:4d:24:17:1c:84:34:ee:d1:b4:42:8b:5a:3e:6e:e5:
f7:98:24:8d:d4:a0:a2:a8:7f:45:46:bc:2a:37:36:17:1c:1f:
0e:3f:7e:3f:43:02:78:6e:d1:cf:67:21:66:3d:a3:e6:ec:db:
1d:9f:0e:c4:84:9f:42:61:c7:b3:6c:a9:3d:f8:7d:db:87:24:
14:33:b3:75:b5:1f:d8:92:6a:0e:97:25:69:e6:ff:b3:76:d0:
66:b4:22:63:75:f6:a9:e8:ec:2f:e4:ab:f9:4c:ce:20:04:82:
b5:a1:48:c6:99:be:8f:3b:15:df:54:f3:3c:c3:63:ba:72:16:
0b:0d:c9:9d:ae:c4:6a:db:be:17:ec:1c:e8:6c:21:50:83:eb:
4d:43:fa:f3:97:70:22:4e:61:43:71:03:b6:a4:3c:3f:f9:16:
9b:d7:25:c1:a5:d3:26:c1:1d:7b:f2:fb:bc:b3:51:4b:f5:5d:
72:60:3e:dd:4c:7e:67:71:47:57:b9:2a:98:9c:e5:2b:26:b5:
78:c8:ad:44:aa:ad:05:28:2d:28:7f:ee:6d:46:13:24:7c:d9:
8e:c4:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org