Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3LftVC7DJwCRtvTsvoCDTsCWSGQ.roa
File: 3LftVC7DJwCRtvTsvoCDTsCWSGQ.roa (raw, json)
Hash identifier: fp9HSJYl9+9YM3oGbZpeTXq6AqZ2knI0HY9nr8u4gV8=
Subject key identifier: DC:B7:ED:54:2E:C3:27:00:91:B6:F4:EC:BE:80:83:4E:C0:96:48:64
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 174394FC
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3LftVC7DJwCRtvTsvoCDTsCWSGQ.roa
Signing time: Sat 01 Jan 2022 16:03:46 +0000
ROA not before: Sat 01 Jan 2022 16:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39277
IP address blocks: 188.210.224.0/21 maxlen: 21
89.32.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390305020 (0x174394fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcb7ed542ec3270091b6f4ecbe80834ec0964864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:1a:b5:dd:e7:a3:c0:ed:fe:bb:5e:5d:eb:
dc:45:0c:c4:36:ad:33:af:0d:f4:7a:92:f2:81:a7:
7c:10:36:29:d3:1d:d6:58:f1:70:d9:f1:e9:76:cd:
f2:6e:76:ce:7a:8c:b0:59:11:3f:a0:36:ce:fb:62:
18:80:f6:fc:be:80:09:2a:1f:ea:54:67:96:87:87:
fc:f7:ef:04:3b:d4:ed:84:b4:27:d8:74:1f:1f:fa:
f8:12:04:b2:d4:b2:76:0b:12:0b:87:68:1a:b5:4a:
f1:07:20:44:cc:2c:ae:be:85:c1:d0:20:f4:b3:74:
cf:43:04:9c:bf:f8:76:8b:65:1b:16:96:64:2d:cf:
a0:81:46:da:e5:1d:9e:60:6d:c4:bc:c8:5b:03:59:
dd:4c:84:7a:f6:a0:8e:21:84:a1:3c:7c:be:33:c4:
15:86:a3:80:fe:43:61:05:a6:d8:49:ea:6c:52:41:
38:05:40:10:3b:48:28:03:d4:33:f3:b7:eb:d9:73:
bd:c7:4e:a9:e6:92:10:d2:bc:70:ec:a3:20:b5:3f:
63:a2:aa:4f:4c:4b:5e:92:e3:c6:11:4c:8c:31:9c:
56:69:f7:8f:2e:86:33:e4:b5:8f:4e:7d:b1:91:eb:
99:db:62:22:6c:5f:85:b3:c7:fc:bf:77:54:45:c1:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:ED:54:2E:C3:27:00:91:B6:F4:EC:BE:80:83:4E:C0:96:48:64
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3LftVC7DJwCRtvTsvoCDTsCWSGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.216.0/21
188.210.224.0/21
Signature Algorithm: sha256WithRSAEncryption
74:31:4b:47:61:85:e0:c4:17:9d:76:e5:ac:c5:a8:98:6e:9c:
5b:75:ac:05:e1:bd:04:e7:12:b3:81:77:31:a8:87:2d:eb:d4:
de:c2:65:6c:9d:23:7c:84:0e:39:fb:4b:95:25:39:06:61:c6:
02:27:79:ab:91:57:73:c4:8e:b5:38:b7:2c:4b:9d:0d:00:df:
71:26:55:ed:37:eb:92:8a:f4:33:33:b8:52:0a:6d:5f:20:01:
96:ae:16:e3:06:78:f9:cd:a2:8a:0d:9c:dc:5b:f5:cf:fd:82:
f8:f1:85:a2:cf:da:5b:e3:f6:cf:57:19:d0:62:27:f3:8a:70:
b6:5e:e4:27:59:ca:fa:9c:da:d2:4b:1d:e3:c2:cd:4f:72:82:
03:d4:9f:a4:4b:23:d9:e6:0f:39:3b:7e:5f:80:98:38:c3:f1:
65:08:86:8b:9b:f9:ae:e7:7e:82:16:c4:42:c6:54:4b:0a:0d:
6f:6e:85:37:cf:72:84:2a:d1:a1:e4:87:e1:98:58:2a:65:db:
c4:d8:26:20:62:45:b9:67:be:38:37:1f:3d:6c:26:54:eb:d8:
ce:92:15:f4:d4:17:be:57:17:26:1b:f8:4c:04:96:da:3c:ea:
7a:fb:c4:a4:0b:f5:6c:29:fb:f9:b5:45:f9:16:9f:1e:a7:25:
57:ce:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:34 2025 by rpki-client