Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3PIwaBhQyDUQ8iq4IH21tI00mSY.roa
File: 3PIwaBhQyDUQ8iq4IH21tI00mSY.roa (raw, json)
Hash identifier: Cel9qki/I45gxIqq7JnAbqoLgnOIdsKUv6uOy44g75w=
Subject key identifier: DC:F2:30:68:18:50:C8:35:10:F2:2A:B8:20:7D:B5:B4:8D:34:99:26
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01829D919BF908B152079977B67F0F1CAE70
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3PIwaBhQyDUQ8iq4IH21tI00mSY.roa
Signing time: Sun 14 Aug 2022 18:15:41 +0000
ROA not before: Sun 14 Aug 2022 18:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 31.43.164.0/23 maxlen: 24
195.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:91:9b:f9:08:b1:52:07:99:77:b6:7f:0f:1c:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 14 18:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcf230681850c83510f22ab8207db5b48d349926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:63:ce:67:c5:c2:05:5e:73:b9:40:b9:e6:
fc:f7:7e:1f:40:25:92:75:11:af:5b:45:95:d1:82:
cd:49:83:3a:5b:70:a7:69:a5:3f:16:05:44:c8:31:
4f:e2:b3:fb:38:ca:cb:6f:75:b9:fb:73:86:6a:72:
7e:b3:80:b6:09:36:85:86:a8:cf:8a:95:c6:59:71:
67:6b:c3:7a:30:0f:66:3a:ee:83:5c:db:d8:ab:ed:
bc:34:2c:7d:f8:62:7f:cc:e3:6a:af:6b:9f:5a:75:
3b:02:02:36:eb:d4:de:e2:ce:85:38:4b:f3:06:ea:
29:ed:6c:b9:9c:90:b5:bf:69:09:8f:e5:69:e1:cd:
e7:11:ac:70:b0:d9:5a:a3:27:c1:a0:62:62:eb:d4:
2a:47:f9:b5:b4:51:32:6c:53:7b:3f:4b:4f:0e:36:
eb:0b:0a:27:e4:f2:9f:82:02:4c:a8:7c:c0:f1:c3:
f3:bd:e6:de:62:20:5b:de:3d:3a:51:45:d2:fc:73:
04:ca:d3:03:26:88:0d:e7:6f:9a:09:23:90:bd:d0:
78:f2:c9:e6:02:34:1a:29:98:70:86:b5:70:50:f3:
a1:e1:4f:82:97:74:83:de:e7:b9:40:5f:29:9f:ce:
fc:bf:01:47:57:86:c9:3d:57:ae:e2:95:e0:9e:52:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:30:68:18:50:C8:35:10:F2:2A:B8:20:7D:B5:B4:8D:34:99:26
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3PIwaBhQyDUQ8iq4IH21tI00mSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/23
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:21:97:19:e5:a3:35:8c:97:bb:56:35:83:16:5e:b8:88:db:
6e:d7:20:c5:41:27:ee:dc:02:e4:bb:16:68:b6:90:26:97:c5:
44:cc:61:3f:dd:3c:72:02:28:60:fb:4b:9b:2b:52:71:28:74:
67:1c:79:25:d8:f7:44:c0:ef:6b:3c:cb:f2:65:c3:0b:b7:fb:
86:fd:f0:f1:3b:f8:a8:76:90:7f:db:be:b5:91:17:81:dc:4c:
ab:69:50:c6:16:45:08:26:31:af:c8:23:c3:58:75:df:51:fa:
31:95:df:5d:5d:7a:bc:78:8f:c7:43:6b:b0:a2:c2:37:b9:e9:
6b:5f:c6:72:ea:70:42:b9:eb:fd:a1:41:85:8f:a6:76:a0:1a:
27:40:fa:cd:ef:7a:0f:08:84:5e:2a:98:e9:48:35:5c:0a:b0:
db:f7:2c:bf:48:a3:78:96:41:33:b2:f1:ba:24:29:c0:79:a9:
19:49:37:83:1e:83:11:6a:1b:a3:86:e6:ac:15:80:c1:7c:be:
8c:9a:6d:0f:fd:b7:00:b2:b2:64:01:12:89:d0:84:47:43:44:
3b:f4:8a:fc:b4:b5:3b:05:8e:cc:d0:c2:a3:4c:40:93:5d:34:
a4:a4:dc:89:62:d1:ac:4e:cf:41:b3:ed:b7:45:a7:23:65:76:
4d:f7:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-ams.rpki-client.org