Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3DS-Kcc54kjFnwWv3fxPzaq8XMw.roa
File: 3DS-Kcc54kjFnwWv3fxPzaq8XMw.roa (raw, json)
Hash identifier: FFQtroSWc/PAswAC1UMPoTuUUYHpfomkU5f9u+QeOnM=
Subject key identifier: DC:34:BE:29:C7:39:E2:48:C5:9F:05:AF:DD:FC:4F:CD:AA:BC:5C:CC
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01890271C3F81B3149DE6DDD56FB5A104A3E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3DS-Kcc54kjFnwWv3fxPzaq8XMw.roa
Signing time: Wed 28 Jun 2023 14:39:17 +0000
ROA not before: Wed 28 Jun 2023 14:39:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.192.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:71:c3:f8:1b:31:49:de:6d:dd:56:fb:5a:10:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 28 14:39:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc34be29c739e248c59f05afddfc4fcdaabc5ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:d4:04:ee:8a:b7:08:e8:e3:3e:33:fa:59:
8d:d4:3a:bf:6d:65:43:ee:d5:12:01:76:f5:d3:50:
aa:00:82:ed:b4:b4:04:85:cf:2d:0d:6d:ab:56:57:
d5:25:4e:6c:ed:6c:e6:4a:b7:5f:92:2d:65:f5:61:
01:82:4c:7b:06:4f:47:b4:8f:ca:92:1c:f2:aa:47:
b9:3f:0e:db:20:73:05:00:6c:d2:06:af:02:f6:60:
bb:e9:ce:51:2a:7f:59:f3:80:e3:62:cd:e0:f0:f1:
d9:fa:0d:86:0b:f6:21:9c:aa:76:1e:be:38:00:36:
6e:1e:dc:6d:9c:4d:81:a1:b0:7c:6e:45:91:2a:50:
bb:78:64:7d:1a:1c:8f:74:5a:c8:0c:09:a4:b5:88:
c8:e2:38:bc:8d:ec:3b:cc:eb:f7:fb:d9:1e:98:0c:
5d:21:d0:a4:50:8a:76:f9:94:56:2a:13:95:8f:16:
aa:9e:2b:b8:70:ba:53:3b:4f:d0:25:23:06:00:15:
2a:12:da:dd:84:1b:69:f0:23:7a:03:e8:88:3c:37:
09:90:ab:4e:f8:b4:ba:15:67:d9:2d:53:b5:7d:ca:
1d:65:b5:6b:81:d1:b6:e8:fa:84:c8:aa:01:8b:ae:
fd:4c:55:28:06:4f:9c:36:d5:de:a2:39:d1:53:73:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:BE:29:C7:39:E2:48:C5:9F:05:AF:DD:FC:4F:CD:AA:BC:5C:CC
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3DS-Kcc54kjFnwWv3fxPzaq8XMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bd:f3:7c:2d:a8:2e:62:6f:3c:a8:2b:42:41:1e:e7:91:8a:
d6:6d:25:08:68:22:05:2b:4b:ea:5b:db:23:c6:b0:0d:79:84:
5e:f7:50:c7:d3:6e:74:d7:8a:b9:85:b7:d7:05:f4:64:d3:e0:
ed:7f:b4:42:d0:4e:d7:03:e7:bf:14:d8:16:21:c9:76:27:cf:
75:ba:c5:bb:ac:0d:d9:ec:8e:17:22:5a:c9:5a:07:97:23:dc:
54:3f:c4:ba:52:79:e5:cc:a5:e2:fa:b7:9d:31:c1:90:8e:70:
22:17:48:10:20:2c:3a:9e:e9:5c:9e:6b:16:ae:a5:9b:94:96:
0c:31:80:ea:95:c6:30:4b:46:02:be:8b:65:93:28:96:c4:28:
78:1c:35:64:83:21:5e:91:5b:dc:9e:42:f0:04:6c:0b:fb:d2:
76:e4:5f:a2:9f:0c:70:6f:40:a8:88:88:dd:0c:41:50:52:a8:
a5:cf:e5:12:ad:95:3d:24:49:c6:6d:95:73:ad:8a:a5:28:8a:
36:ee:49:90:17:fa:32:6e:03:4e:a8:df:69:ec:9e:b8:e8:ab:
04:4d:0c:f1:b4:38:c4:f6:ba:b4:e1:12:e8:8f:1e:ba:da:71:
9b:05:dc:e9:19:13:fb:09:32:db:ec:ee:10:63:4a:f6:09:4a:
3e:77:3e:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkCccP4GzFJ3m3dVvtaEEo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMwNjI4MTQzOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzM0YmUyOWM3MzllMjQ4YzU5ZjA1YWZkZGZjNGZjZGFhYmM1Y2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYvUBO6Ktwjo4z4z+lmN1Dq/bWVD
7tUSAXb101CqAILttLQEhc8tDW2rVlfVJU5s7WzmSrdfki1l9WEBgkx7Bk9HtI/K
khzyqke5Pw7bIHMFAGzSBq8C9mC76c5RKn9Z84DjYs3g8PHZ+g2GC/YhnKp2Hr44
ADZuHtxtnE2BobB8bkWRKlC7eGR9GhyPdFrIDAmktYjI4ji8jew7zOv3+9kemAxd
IdCkUIp2+ZRWKhOVjxaqniu4cLpTO0/QJSMGABUqEtrdhBtp8CN6A+iIPDcJkKtO
+LS6FWfZLVO1fcodZbVrgdG26PqEyKoBi679TFUoBk+cNtXeojnRU3N/4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNw0vinHOeJIxZ8Fr938T82qvFzMMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvM0RTLUtjYzU0a2pGbndXdjNmeFB6YXE4WE13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucD3MA0G
CSqGSIb3DQEBCwUAA4IBAQBbvfN8LaguYm88qCtCQR7nkYrWbSUIaCIFK0vqW9sj
xrANeYRe91DH025014q5hbfXBfRk0+Dtf7RC0E7XA+e/FNgWIcl2J891usW7rA3Z
7I4XIlrJWgeXI9xUP8S6UnnlzKXi+redMcGQjnAiF0gQICw6nulcnmsWrqWblJYM
MYDqlcYwS0YCvotlkyiWxCh4HDVkgyFekVvcnkLwBGwL+9J25F+inwxwb0CoiIjd
DEFQUqilz+USrZU9JEnGbZVzrYqlKIo27kmQF/oybgNOqN9p7J646KsETQzxtDjE
9rq04RLojx662nGbBdzpGRP7CTLb7O4QY0r2CUo+dz7k
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:37 2025 by rpki-client