Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/3i7uIEIITkpN3iLBTtWNFWkEf2o.roa
File: 3i7uIEIITkpN3iLBTtWNFWkEf2o.roa (raw, json)
Hash identifier: 4ltz3zkySLUlTqwcIj5IZbcNQbfSgPu5y3mLotN7Rv4=
Subject key identifier: DE:2E:EE:20:42:08:4E:4A:4D:DE:22:C1:4E:D5:8D:15:69:04:7F:6A
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 13B9AE17
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/3i7uIEIITkpN3iLBTtWNFWkEf2o.roa
Signing time: Mon 04 Apr 2022 06:31:20 +0000
ROA not before: Mon 04 Apr 2022 06:31:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208482
IP address blocks: 45.84.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330935831 (0x13b9ae17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Apr 4 06:31:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de2eee2042084e4a4dde22c14ed58d1569047f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:15:1a:a2:5e:ab:62:27:91:81:e5:d6:c4:
08:f8:44:41:cd:df:e1:a0:2f:c7:6a:88:8a:bf:1d:
dd:07:53:72:2b:d1:31:48:36:d6:6e:a0:d3:0e:e5:
92:7c:ff:6f:cb:0a:8b:9e:5d:7d:c6:72:f6:ee:ca:
f2:f7:67:3b:ca:a4:db:50:6b:10:00:73:e6:59:43:
6a:10:09:63:be:79:73:b6:44:21:18:b5:4b:25:6a:
d6:a1:87:3f:24:48:2c:81:55:7e:38:a8:a0:0d:b4:
48:c1:90:c5:d9:46:a0:19:95:38:51:24:cb:f3:38:
61:77:ea:fe:9d:7d:2b:ef:38:33:1b:49:30:3e:e3:
af:4b:69:2a:3c:ca:2d:0e:3f:0a:7f:55:c5:1b:05:
1e:31:56:77:94:73:12:42:34:a0:13:65:e0:a4:b4:
9d:a2:c4:d4:a4:bf:ef:c8:33:a5:27:ff:fb:0c:1c:
1e:b7:33:12:da:0d:8a:25:13:2b:dd:cf:ff:e0:f5:
94:b2:82:63:26:9b:62:1b:67:b2:61:06:4d:3e:1e:
23:9a:c1:e4:33:f0:e7:ec:87:58:97:2d:49:66:4c:
4e:0b:6e:40:2e:d7:24:e1:8c:92:fa:0a:af:ad:e9:
09:b1:d5:df:fc:b5:ee:07:e8:66:8c:be:74:30:6d:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:EE:20:42:08:4E:4A:4D:DE:22:C1:4E:D5:8D:15:69:04:7F:6A
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/3i7uIEIITkpN3iLBTtWNFWkEf2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:3a:34:f3:91:91:45:3b:55:62:8d:36:90:71:14:da:49:5f:
8d:56:30:60:bf:4f:07:30:97:47:42:c9:6c:29:a3:fe:4a:e7:
ae:ba:29:ec:3d:8d:2c:e8:c4:a0:56:06:29:0a:20:ca:e3:17:
c4:c4:87:08:e2:1c:d3:e7:ba:32:ea:45:28:8b:cb:82:85:7b:
f2:32:1b:a2:5b:d3:fa:77:95:b5:41:9f:e7:7d:d9:06:b0:5c:
0b:eb:c1:26:a3:f6:5a:a8:5a:1a:6a:cc:24:8d:eb:ea:f6:ed:
58:41:c6:d0:0d:5c:44:e3:52:e4:7d:94:87:a1:d8:ac:d1:67:
0a:42:da:93:de:f6:69:22:9f:30:05:d0:56:14:12:4e:45:ce:
88:fb:5a:d1:17:73:f3:c7:e1:6f:1d:11:25:f0:81:f5:0e:02:
93:f3:fa:5d:1e:cc:03:13:2f:e4:31:50:b7:80:b3:f1:30:5c:
4a:bf:e8:cc:0d:5f:ac:11:3e:9a:9e:96:12:9d:ce:5b:2d:ce:
99:58:d3:07:43:6e:e7:e0:e4:3c:9a:9f:66:af:fb:f9:c1:31:
c1:ed:18:12:9a:ac:3d:67:6f:38:c2:9b:0f:c6:9e:83:4c:f2:
db:ac:8d:dc:fc:16:63:6a:25:8c:ab:42:21:04:81:b1:59:dd:
c9:c7:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org