Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/3kgC-67BNO_9iUkXBnIt4zkJhHs.roa
File: 3kgC-67BNO_9iUkXBnIt4zkJhHs.roa (raw, json)
Hash identifier: B7ruIL46CR79jU38+qe+IMwIdNq0tScrGa+iLM8U2lI=
Subject key identifier: DE:48:02:FB:AE:C1:34:EF:FD:89:49:17:06:72:2D:E3:39:09:84:7B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09B01885
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/3kgC-67BNO_9iUkXBnIt4zkJhHs.roa
Signing time: Fri 17 Jun 2022 08:34:47 +0000
ROA not before: Fri 17 Jun 2022 08:34:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 91.186.220.0/22 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162535557 (0x9b01885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 17 08:34:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de4802fbaec134effd89491706722de33909847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:52:49:70:b1:0a:64:c9:65:c7:c6:2b:95:
65:68:ee:d9:ea:f8:f0:29:0b:2d:d1:44:bd:d8:43:
1a:3c:c9:d8:ef:15:b3:7c:f3:07:ab:c9:a8:c4:29:
35:49:58:c2:5b:ad:0f:f9:89:5e:4b:48:74:96:e7:
1e:3e:54:38:73:26:03:37:f6:f5:ed:46:6c:25:a3:
0b:b1:3e:e5:64:4e:ae:94:5b:65:3f:0f:d7:a8:02:
02:96:b1:b1:b8:17:bc:23:b8:3d:78:01:84:e3:7f:
a3:c7:8a:98:30:9d:41:b4:f2:79:4b:db:ab:67:c8:
be:ea:16:4a:4f:2e:18:7f:21:48:a0:a1:4f:7b:37:
9d:a5:c5:ea:b1:5b:d0:36:18:8b:f4:53:08:13:40:
36:e8:76:e1:05:81:ff:01:ba:a9:dc:ec:16:9a:24:
c9:2b:a7:23:d4:78:f4:a0:47:da:fb:36:5b:08:e3:
e6:2f:c8:90:99:4a:d1:5c:f2:aa:3e:1d:1e:94:cc:
03:df:5f:8a:f5:88:a5:d2:b9:ef:ba:78:5e:72:3b:
60:9c:d7:38:dc:f7:a4:7a:a8:56:8f:66:36:6d:59:
cc:dc:4f:51:4a:5b:0b:05:33:20:48:9a:69:0b:4e:
9b:c1:a9:8c:a4:e8:83:ac:6f:77:8d:00:2e:ae:7d:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:48:02:FB:AE:C1:34:EF:FD:89:49:17:06:72:2D:E3:39:09:84:7B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/3kgC-67BNO_9iUkXBnIt4zkJhHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.220.0/22
178.253.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:76:dc:6c:b1:3d:3f:22:0a:e9:b1:79:e6:06:84:d2:88:c1:
9e:22:0a:bc:9b:9c:61:db:11:54:ed:84:a7:ff:25:d3:86:0e:
d6:e7:19:c0:cc:dc:9b:f8:42:16:82:93:8d:2d:e6:98:bb:09:
dd:22:31:27:9a:3a:35:bb:d4:fa:d7:e5:a1:4d:4f:97:d4:b8:
14:42:1e:af:bb:24:22:13:24:98:98:d6:cc:56:8e:f9:65:b0:
10:d1:4e:06:4c:ea:bb:20:46:0f:34:88:ea:c9:fe:20:89:26:
e8:21:45:63:35:7d:d6:8f:5c:06:ca:fe:08:35:5a:10:49:77:
57:93:93:1d:6b:f7:34:26:32:ed:ff:1c:92:e5:06:9d:ff:42:
04:d6:5f:62:2f:e2:06:8c:25:83:32:a3:c9:70:1e:c5:94:d0:
90:1c:a4:c3:fa:98:85:fe:4f:68:27:52:dd:7a:21:96:49:aa:
05:35:26:b5:95:26:49:47:4e:44:bb:44:70:24:fc:97:06:14:
3d:df:9b:82:f1:35:22:e0:2b:98:6b:49:c1:5d:cf:b9:1a:b9:
b5:1f:ec:46:0c:be:b3:02:88:10:48:52:d5:a0:c2:f2:38:f7:
30:f2:94:29:be:c3:00:01:af:c0:30:aa:de:7c:87:ab:4d:2f:
b0:b8:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org