Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3s_XtFml4YTX5e1e4ndzLK6lMgM.roa
File: 3s_XtFml4YTX5e1e4ndzLK6lMgM.roa (raw, json)
Hash identifier: yKRvS3zphFlOLAf8UCdqjVEPZeSDtxpzHw60LugGdwk=
Subject key identifier: DE:CF:D7:B4:59:A5:E1:84:D7:E5:ED:5E:E2:77:73:2C:AE:A5:32:03
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17FB8786
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3s_XtFml4YTX5e1e4ndzLK6lMgM.roa
Signing time: Sat 01 Jan 2022 04:00:26 +0000
ROA not before: Sat 01 Jan 2022 04:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59620
IP address blocks: 90.154.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402360198 (0x17fb8786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=decfd7b459a5e184d7e5ed5ee277732caea53203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:f1:59:ee:1e:e2:53:9d:5c:bd:b6:1f:5d:
9b:10:2a:6b:09:d6:59:45:94:15:1e:89:08:24:0d:
4b:cc:f4:59:a6:69:de:07:81:eb:4a:d0:31:93:bc:
b9:86:7a:d0:f2:27:94:4a:1d:76:33:33:f2:2a:76:
60:20:c9:f2:db:e2:c0:c6:93:f0:22:54:93:7e:58:
b2:bc:f8:94:d7:38:07:b5:13:a4:f6:db:b3:b5:de:
29:fa:a7:64:a5:35:34:e4:cd:33:52:0e:24:61:6c:
57:ec:68:40:f5:84:37:78:88:a2:bf:61:c7:13:15:
d2:3c:51:e7:90:75:c7:53:35:bf:0d:02:f8:db:ff:
0f:b6:4c:e3:ef:25:d3:30:f0:fd:c5:aa:24:c9:62:
e8:83:27:37:68:8d:3d:7d:21:8c:f7:ee:fd:f8:e8:
85:b8:92:59:2a:34:30:6e:cf:47:a7:8c:57:a7:74:
24:6f:cf:3e:35:4d:2f:d5:8f:2c:f1:62:6e:a4:66:
31:86:62:b8:15:bc:2b:72:b5:20:7b:c6:83:0d:d1:
24:6c:f3:c3:38:c8:74:df:0d:52:8f:7d:89:5e:db:
de:09:ab:10:ec:ee:42:59:c7:53:a8:59:cc:61:25:
e2:1f:3d:20:bb:f1:18:4f:fb:9c:6e:aa:aa:bf:84:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:D7:B4:59:A5:E1:84:D7:E5:ED:5E:E2:77:73:2C:AE:A5:32:03
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3s_XtFml4YTX5e1e4ndzLK6lMgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ee:8c:68:df:f2:60:16:df:17:65:95:ea:6a:de:15:bc:21:
90:f3:e0:39:b3:b7:72:f0:01:74:21:bc:c8:ca:a5:b2:98:d8:
8f:76:6f:86:14:36:03:a3:de:c8:34:67:fd:44:1e:42:ce:79:
17:19:e6:ba:16:ce:44:71:4d:56:20:bf:9d:16:c2:d5:ec:5b:
78:ca:61:07:b8:5d:3e:d0:36:f4:cd:94:91:36:bd:50:7d:aa:
8f:42:51:f6:76:31:b9:76:c2:8f:42:5c:f1:15:82:80:da:74:
1b:b7:57:e8:8a:3f:3f:c8:f1:03:fc:e4:29:5f:8f:a0:be:ef:
bc:16:dd:7f:ac:f5:f2:2e:76:21:8b:80:7c:76:17:52:77:e4:
b4:84:a7:ff:b4:d8:7b:67:22:9b:72:51:1a:f2:70:9a:84:41:
c9:72:9f:35:07:91:d2:0f:52:e9:81:c9:11:14:df:8f:37:4f:
1d:a5:24:a9:98:e2:3b:ce:1a:54:f5:72:5f:4a:39:d8:1f:28:
4d:f9:78:a9:ea:d6:fb:b6:f9:84:47:c9:d6:be:5a:f4:8d:bc:
d8:3e:d8:94:93:ce:fe:05:a4:f6:c2:6b:1c:2f:f2:b9:f5:53:
c0:ad:fb:9e:a0:e9:c0:dc:40:28:bf:c8:08:bf:e5:38:56:bc:
2f:6e:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org