Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/czGsLFSK2hph9BDslVPVMphS6pA.roa
File: czGsLFSK2hph9BDslVPVMphS6pA.roa (raw, json)
Hash identifier: Ar3z6T8AhXs5KZkQL0w1Wzgy9GmeOVQZqbjUCQWuRDk=
Subject key identifier: 73:31:AC:2C:54:8A:DA:1A:61:F4:10:EC:95:53:D5:32:98:52:EA:90
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 177DB660
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/czGsLFSK2hph9BDslVPVMphS6pA.roa
Signing time: Sat 01 Jan 2022 12:56:18 +0000
ROA not before: Sat 01 Jan 2022 12:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43870
IP address blocks: 80.245.80.0/20 maxlen: 20
149.3.184.0/21 maxlen: 21
79.140.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394114656 (0x177db660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 1 12:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7331ac2c548ada1a61f410ec9553d5329852ea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:29:bb:42:1b:b0:fd:2c:ef:1a:6c:4e:4f:
57:7e:a5:e0:2f:f1:e3:03:98:86:8a:3a:72:5a:3c:
55:96:14:4f:12:ec:53:8d:81:14:47:d5:8c:61:46:
51:d5:62:02:7b:93:e4:21:9c:b7:57:e0:93:4d:d0:
23:4b:da:15:c0:9c:dd:b7:f6:17:13:e8:fd:51:52:
66:21:14:6a:6f:98:ef:5a:4d:da:2b:bf:bb:58:04:
65:a5:c5:e9:0d:fd:b0:66:d1:39:78:ae:c9:51:2d:
47:f5:5e:08:19:bd:00:44:f9:26:ee:c0:4f:46:0e:
f5:a7:be:4a:eb:40:2b:4c:30:59:8b:c3:a3:d3:72:
cf:0b:5e:5f:c3:1e:fc:33:24:cd:e0:0a:ec:a4:65:
95:38:a4:43:0e:70:56:61:ba:69:cc:2c:d7:4e:ef:
ec:64:d4:7d:b9:16:f6:d6:24:3d:17:e0:d5:47:f6:
ef:42:78:11:e7:2f:61:65:d6:15:ad:9e:dd:d8:33:
4b:05:84:e2:c8:45:cd:fb:7e:e6:12:01:ee:05:b9:
db:8d:9a:99:d3:d3:70:1b:63:56:b0:35:e9:a1:02:
49:c5:8e:c2:44:9e:4f:88:c8:e5:bf:ac:fb:cc:9b:
3f:b3:24:b6:26:c3:1a:36:06:51:b5:08:47:0e:5b:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:AC:2C:54:8A:DA:1A:61:F4:10:EC:95:53:D5:32:98:52:EA:90
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/czGsLFSK2hph9BDslVPVMphS6pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.160.0/20
80.245.80.0/20
149.3.184.0/21
Signature Algorithm: sha256WithRSAEncryption
71:2f:f0:13:0f:22:39:ad:a7:a8:be:61:91:76:49:fb:28:f7:
dd:c2:9f:4f:8a:7c:cb:2a:9e:d4:ec:99:8f:79:ff:61:a9:5e:
63:44:63:3d:ee:44:b2:98:6a:f3:55:d4:df:23:0d:0d:40:aa:
6f:7e:7f:65:c9:dc:95:7a:cc:a5:90:14:1d:f8:a4:63:34:7f:
dd:83:29:80:30:7c:2f:d8:c7:81:46:85:58:45:1a:e9:3e:b2:
6d:e6:ef:7d:71:68:2b:e6:b7:3c:2a:fe:d8:b3:bd:53:54:8d:
04:ca:c0:f2:fb:b5:d9:47:13:f6:3d:fb:24:b4:01:4e:5d:75:
e9:41:19:85:5c:48:60:e3:aa:f4:43:bf:ad:99:64:87:cc:61:
11:04:36:41:cf:9a:22:cd:e8:4e:91:03:39:71:2c:b9:a1:bf:
a1:2a:09:15:76:2d:44:30:3e:7d:7a:f3:79:2b:36:c1:36:c3:
c4:ce:de:72:df:ab:69:fe:32:ef:72:88:9c:d1:44:28:6a:b7:
8c:14:0f:d9:e3:cd:b9:28:b6:2f:54:bf:4d:c8:c8:9a:4c:3e:
04:3e:ed:fa:a1:e6:26:ed:b7:a0:9d:3e:a1:c7:ae:e4:c4:50:
83:4d:ed:fd:db:ff:1d:5c:2f:24:6c:12:dc:c9:13:b2:b2:26:
b3:ef:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org