Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3DKJm7UCdzMcf0QHJmGHlagqMik.roa
File: 3DKJm7UCdzMcf0QHJmGHlagqMik.roa (raw, json)
Hash identifier: d3uQ59QEDt7NP4LI3CNBN3ZRKKwiBr12zzix6yIRuHU=
Subject key identifier: DC:32:89:9B:B5:02:77:33:1C:7F:44:07:26:61:87:95:A8:2A:32:29
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F21304E
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3DKJm7UCdzMcf0QHJmGHlagqMik.roa
Signing time: Thu 24 Feb 2022 19:33:39 +0000
ROA not before: Thu 24 Feb 2022 19:33:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62436
IP address blocks: 80.232.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253833294 (0xf21304e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:33:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc32899bb50277331c7f440726618795a82a3229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:3e:4b:4d:34:52:6b:45:1b:86:85:e9:21:
6a:82:34:ba:06:bd:33:aa:a6:92:b6:1f:f1:8d:a7:
4b:fe:92:15:42:ba:18:7d:98:01:a1:3d:b9:9b:81:
8c:ae:3b:a7:19:76:9a:0e:25:62:9a:7f:e7:c0:d3:
f4:66:ac:e5:93:70:62:2c:3f:ec:ad:a0:8d:71:ec:
4d:9a:52:be:e8:16:cd:47:5d:fa:9d:15:4c:ed:8c:
1e:31:5f:21:da:88:ab:8c:d8:e0:a4:4c:95:a7:8e:
6f:92:a8:38:7a:93:96:29:61:19:42:e5:e0:3b:ac:
9c:f8:fa:27:ed:96:11:3b:6a:6f:6b:d9:d9:62:1e:
b7:f2:25:87:59:af:fc:ad:26:f4:09:9e:91:aa:ef:
a0:d7:36:f6:91:2e:89:be:bd:38:44:68:4d:4b:ca:
17:52:3d:86:b7:1f:b9:9f:04:de:2e:83:dd:86:ae:
87:7a:37:68:77:82:ff:a4:1c:65:22:8d:05:6f:85:
c8:75:3c:e9:e1:aa:03:0a:28:12:25:70:59:96:72:
08:87:03:73:98:72:36:1a:65:51:ba:30:06:ed:4c:
55:09:f2:01:6c:19:1b:ea:92:c3:9f:a1:71:9c:c0:
e6:63:2f:05:5b:43:ba:ae:82:1f:59:8c:94:d2:60:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:89:9B:B5:02:77:33:1C:7F:44:07:26:61:87:95:A8:2A:32:29
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3DKJm7UCdzMcf0QHJmGHlagqMik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.215.0/24
Signature Algorithm: sha256WithRSAEncryption
29:be:59:be:a0:2e:b6:47:16:79:20:86:4c:33:01:b7:66:79:
1e:f6:21:51:fb:30:10:cb:49:5c:1d:ad:b0:cc:50:28:94:a6:
a5:98:73:ed:b9:13:20:19:f1:7c:c8:d1:cf:6e:99:3a:37:2d:
fc:62:d3:d4:ea:df:e3:d8:7e:29:28:ea:a0:82:80:a5:93:68:
8d:fd:7c:38:95:c1:23:8c:30:04:4b:9d:2a:3d:e4:f0:48:54:
5c:54:6b:d4:ab:7b:94:db:e8:6e:d2:1e:a5:42:2d:28:db:d5:
df:34:fa:e0:5d:9f:3e:e2:60:d2:0d:28:cd:3c:55:90:b6:66:
0a:f3:97:38:be:d4:66:3a:76:65:dd:76:42:fd:d2:eb:0a:74:
8d:54:71:72:58:f1:9d:1e:02:04:29:e4:6b:fa:78:33:a6:42:
3f:f0:33:9b:1b:97:a8:03:80:98:c0:4d:d8:ca:26:0a:97:fe:
eb:20:7e:33:f9:48:e8:14:eb:f0:28:a1:cb:66:82:80:ed:47:
11:c8:39:6a:e6:c1:c0:c7:30:97:4d:19:dd:80:80:72:e2:a0:
f1:08:a4:a9:83:a6:3a:e1:4d:1e:11:df:81:47:ac:18:63:7d:
d6:28:5e:b4:96:d5:43:5e:6e:1a:fb:ba:b3:34:fd:34:ce:97:
9c:e9:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org