Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/3xVaj1thr3rHh6kpuxQdpJVqjHA.roa
File: 3xVaj1thr3rHh6kpuxQdpJVqjHA.roa (raw, json)
Hash identifier: Tq7/bxA8exLujswQrSqo6KDwsJIqT2fnVSByRYNvwXo=
Subject key identifier: DF:15:5A:8F:5B:61:AF:7A:C7:87:A9:29:BB:14:1D:A4:95:6A:8C:70
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 018440A3
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/3xVaj1thr3rHh6kpuxQdpJVqjHA.roa
Signing time: Thu 24 Mar 2022 08:20:35 +0000
ROA not before: Thu 24 Mar 2022 08:20:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52139
IP address blocks: 91.222.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25444515 (0x18440a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Mar 24 08:20:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df155a8f5b61af7ac787a929bb141da4956a8c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:20:4a:67:99:88:55:f4:1d:63:02:6d:df:
f4:05:de:8e:f7:df:f1:02:85:65:d7:de:f3:56:8d:
27:b5:eb:ee:4b:e8:ba:eb:d2:d0:88:17:0e:77:8b:
ae:f7:21:ca:d6:59:dc:03:7e:80:03:a7:ab:8c:ac:
bb:3f:61:7f:5f:96:21:5d:1c:5f:b0:99:87:de:92:
7f:2d:12:a9:d2:2e:31:f1:58:34:32:f9:ae:a3:bd:
7f:2c:9e:2a:fa:9c:b3:95:7b:a7:f0:94:be:f1:2e:
ae:cc:ba:51:20:a6:21:38:1b:75:33:0b:64:cb:e3:
9c:d6:db:de:76:16:21:22:52:57:0b:a4:fd:9a:a7:
ec:fb:ee:22:fc:d6:17:3b:80:8d:43:ba:21:17:85:
21:db:da:58:f2:27:93:6b:4e:da:3a:13:47:fe:cf:
d6:21:0d:51:d2:b4:49:07:e7:05:7b:5a:26:45:a5:
33:f0:b9:a0:1e:b1:7a:14:86:53:1a:e7:8f:63:18:
d6:35:28:02:e6:10:fd:62:c9:20:bd:b8:82:c8:ac:
ba:16:da:0a:45:2d:59:7a:b3:99:a7:14:34:b1:83:
9a:31:77:a4:cd:17:43:ec:9e:49:63:13:0d:9c:a7:
62:ef:f2:5b:cf:ba:af:95:ae:08:3c:c4:51:4a:4d:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:5A:8F:5B:61:AF:7A:C7:87:A9:29:BB:14:1D:A4:95:6A:8C:70
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/3xVaj1thr3rHh6kpuxQdpJVqjHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:80:4d:de:24:18:61:d7:b1:54:cb:2f:23:45:71:b2:a3:2f:
2d:00:00:96:c5:4a:49:c7:75:df:85:20:5d:e6:65:e3:82:84:
f3:1e:92:31:da:00:39:a5:f7:06:7b:a1:2d:bc:71:be:fd:44:
da:2d:e7:0d:3a:4f:f5:9d:3b:2c:63:d3:53:6c:0c:05:a9:ae:
e4:5c:c4:bd:c6:fc:cc:aa:07:c8:bf:2b:2f:ea:39:e3:86:28:
08:a8:b3:86:61:b1:86:dd:30:37:08:cf:0f:52:9f:f9:76:5b:
5b:af:fc:24:14:ca:28:fe:dd:e5:fe:85:04:9f:d6:75:12:a4:
f2:d9:ca:80:f9:0b:de:ba:e0:a3:6c:cc:9e:35:6f:f3:90:61:
98:53:d7:74:d8:73:f2:c1:73:18:22:ba:85:ca:33:0d:c9:16:
2d:0a:10:a7:4f:71:df:ca:29:88:9b:e0:6d:0e:8e:05:07:b2:
31:dc:3f:6d:34:8a:f2:9f:c7:f3:5b:59:52:8b:27:98:b9:da:
fe:98:79:dd:b9:dd:82:bc:bb:7a:97:69:12:3f:4b:ce:dd:aa:
cb:b0:32:db:a9:97:55:42:e8:7a:15:75:cd:fd:67:1c:3a:3a:
02:c1:b8:cf:67:97:c6:8f:ab:7d:f8:30:11:65:d7:f6:93:fd:
37:f9:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:47 2023 by rpki-client on console-ams.rpki-client.org