Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/3eCONXFZrre0Xm8qsrFn3Y2la-g.roa
File: 3eCONXFZrre0Xm8qsrFn3Y2la-g.roa (raw, json)
Hash identifier: DFI2Mit818AY/zRrWZPnZ2fF7Kd/EgOWnp+NowNfjEM=
Subject key identifier: DD:E0:8E:35:71:59:AE:B7:B4:5E:6F:2A:B2:B1:67:DD:8D:A5:6B:E8
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A08CA1D
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/3eCONXFZrre0Xm8qsrFn3Y2la-g.roa
Signing time: Sat 01 Jan 2022 14:00:41 +0000
ROA not before: Sat 01 Jan 2022 14:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201893
IP address blocks: 94.42.196.0/24 maxlen: 24
94.42.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973654557 (0x3a08ca1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dde08e357159aeb7b45e6f2ab2b167dd8da56be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:a3:39:b1:4c:3f:75:bc:36:f0:9d:21:6d:
2b:6d:70:2b:1e:a2:a3:4f:f2:01:bd:42:86:86:95:
b1:fa:26:57:ef:b0:a5:16:ad:66:f8:f9:c4:63:a7:
c4:35:a2:85:9c:40:d9:08:86:d2:0e:9f:77:78:7f:
53:fb:f2:90:17:5f:7c:fb:37:56:71:da:e9:cb:a1:
e0:a3:14:eb:fa:e6:35:fd:0d:c0:3d:42:cb:e1:03:
e2:b0:6b:b8:84:3a:34:26:3d:51:36:25:21:fc:a5:
da:3b:b8:60:27:52:9d:37:57:1a:44:b6:65:0b:7a:
dd:b7:35:4b:f3:68:e8:5a:2d:ae:a3:76:e2:90:d3:
7a:c4:a4:fb:e4:50:f1:94:ef:9e:68:03:6b:18:98:
c5:ac:5a:49:95:83:11:9f:bb:06:75:ab:d4:bf:f9:
72:e0:25:d6:64:53:26:89:e7:e9:86:ed:2c:b3:30:
d2:0f:42:4a:48:aa:b2:9a:62:13:2d:14:97:09:68:
d2:61:58:84:8b:7d:80:c7:1e:34:1c:9c:5d:ef:d9:
97:5c:46:9d:50:a6:f6:74:db:ac:f5:66:4b:cc:9e:
e9:fc:14:3e:2c:2d:9d:c3:4f:b3:27:cc:eb:2b:f8:
fd:75:d2:28:a2:f7:da:3f:0e:00:72:3d:77:79:eb:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:8E:35:71:59:AE:B7:B4:5E:6F:2A:B2:B1:67:DD:8D:A5:6B:E8
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/3eCONXFZrre0Xm8qsrFn3Y2la-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.42.195.0-94.42.196.255
Signature Algorithm: sha256WithRSAEncryption
68:be:39:e7:38:83:e0:15:17:ab:75:b5:19:15:04:92:b1:e5:
61:bc:15:10:e5:e2:be:96:18:98:7a:c7:aa:c4:fe:b6:0b:56:
05:aa:d2:46:42:3f:8e:78:aa:9b:23:7d:67:f3:e1:7f:b8:00:
4b:0e:f5:75:c0:fb:dd:09:11:b9:b6:61:ef:27:19:1f:60:2c:
24:0b:82:57:04:85:a9:94:d1:5e:7c:90:21:6c:2b:f8:85:b8:
79:f2:1e:68:14:f7:08:a8:96:9e:b5:df:d8:4f:07:bd:7c:4e:
e8:26:ef:72:25:b9:a0:b0:f9:37:af:7d:5b:c1:1c:45:11:18:
b4:83:a7:1e:ea:24:0c:26:a6:3e:b0:0d:48:27:63:1b:b2:96:
1c:53:43:46:46:08:fa:61:c6:39:ed:13:89:f7:80:fd:ce:4f:
e7:f6:f1:a8:b3:a3:29:67:36:01:18:6b:36:c8:aa:7a:83:2e:
ce:46:85:9f:6d:a1:77:24:33:7c:e6:31:8b:01:2c:e8:6d:4b:
0a:b9:f9:19:80:1c:87:b0:64:45:f7:12:2b:0f:af:3a:1c:68:
db:41:0d:cf:91:75:90:ae:be:32:c8:98:50:e1:fe:c9:be:02:
b8:fc:e4:d8:17:65:8f:53:ef:27:f2:62:70:7d:ba:84:ac:f8:
ca:2d:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org