Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/3Dg_bCJk6mhz4_Q79Cvu6CsxfoI.roa
File: 3Dg_bCJk6mhz4_Q79Cvu6CsxfoI.roa (raw, json)
Hash identifier: mZrgj3knx1v19kq6HiD+6qlcDdXqhnOoOcxMgrE+lGc=
Subject key identifier: DC:38:3F:6C:22:64:EA:68:73:E3:F4:3B:F4:2B:EE:E8:2B:31:7E:82
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 01D412
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/3Dg_bCJk6mhz4_Q79Cvu6CsxfoI.roa
Signing time: Fri 25 Mar 2022 09:58:49 +0000
ROA not before: Fri 25 Mar 2022 09:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51588
IP address blocks: 194.56.94.0/23 maxlen: 23
194.56.94.0/24 maxlen: 24
194.56.92.0/24 maxlen: 24
194.56.92.0/23 maxlen: 23
194.56.92.0/22 maxlen: 22
194.56.95.0/24 maxlen: 24
2a06:3100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119826 (0x1d412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Mar 25 09:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc383f6c2264ea6873e3f43bf42beee82b317e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:de:b6:cf:ed:2a:88:5b:23:8b:2f:ab:04:
de:93:60:27:f9:f4:22:77:ba:93:6c:e6:97:d3:6b:
f5:55:f1:80:37:60:05:3c:25:37:db:35:b6:f0:33:
b8:44:01:13:43:16:81:2f:4a:ec:8e:52:54:e2:84:
75:5d:5b:6d:f5:b2:77:f5:54:32:f3:2d:98:09:82:
ab:e6:fb:d3:28:16:ce:62:76:32:8b:16:f4:21:79:
76:71:77:86:a6:fe:6a:82:02:c7:bb:27:4f:11:23:
25:16:ea:8d:44:2f:53:78:fc:5c:08:85:d0:d4:6e:
c9:3c:23:dc:33:f0:79:b6:32:18:a2:b9:c2:79:87:
69:1e:4c:76:93:4d:27:41:05:8a:59:58:ea:22:60:
d0:8b:ae:77:07:e5:f5:f1:59:0a:f8:b5:91:88:ef:
0e:03:57:b2:eb:bc:6f:da:4d:b7:5f:32:ff:b1:8c:
a9:27:c3:7a:df:4b:55:0a:e0:cd:ca:4a:c2:25:4f:
1e:e2:2e:16:55:34:50:c3:4a:f6:9a:30:45:cb:26:
99:d3:98:8e:ba:b3:07:56:29:95:76:2a:b7:7a:52:
4e:e1:41:62:49:9d:39:4c:ec:e8:25:41:d1:ed:2b:
c9:2d:c7:6e:48:cd:85:0a:62:ff:4c:26:0c:46:5e:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:3F:6C:22:64:EA:68:73:E3:F4:3B:F4:2B:EE:E8:2B:31:7E:82
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/3Dg_bCJk6mhz4_Q79Cvu6CsxfoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.92.0/22
IPv6:
2a06:3100::/29
Signature Algorithm: sha256WithRSAEncryption
31:af:05:e3:83:a8:7c:e5:84:38:fc:80:8d:07:31:35:36:d8:
bf:e4:78:0f:0d:a1:a1:96:c1:70:5b:b1:53:0b:2c:f1:ac:06:
86:6d:d7:2a:19:aa:1b:59:b9:52:ef:ef:90:7a:a6:43:7e:f7:
7f:e1:f5:85:bc:7a:c6:86:00:61:e7:cb:82:3e:ce:b5:2a:91:
b8:ca:a2:96:8f:03:92:a2:84:98:18:e4:0b:7a:90:98:be:52:
5f:5e:22:67:fa:a5:a6:8a:4a:d1:78:99:20:0b:e7:a4:c7:64:
68:03:cc:bd:31:b0:74:89:84:dc:1b:25:52:b6:e1:4a:70:74:
af:85:9d:ce:b1:6d:49:eb:f4:69:36:fb:2b:c4:3d:ff:78:61:
54:c4:2d:ed:c1:40:3b:a0:42:c8:35:ee:5c:e9:47:91:fc:90:
69:fc:82:e6:94:72:f1:96:42:c4:2f:64:e5:68:f5:37:ef:b7:
6f:45:34:09:30:04:c1:83:41:43:f4:80:b3:3f:ef:fb:79:b0:
c7:b3:b8:da:e7:62:dd:4c:d3:05:f4:cd:9b:20:5e:09:85:c3:
84:0e:a6:7c:83:c7:64:c8:ca:d3:bd:1f:19:61:51:e2:6b:19:
d0:bc:42:bf:0a:f4:c8:f5:62:7e:65:15:7a:69:4c:d8:35:7b:
ac:9e:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:07 2023 by rpki-client on console-fra.rpki-client.org