Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/3Abhypfn8OiRWoippvVtX4K7seQ.roa
File: 3Abhypfn8OiRWoippvVtX4K7seQ.roa (raw, json)
Hash identifier: 7hzMBoUqUfU+TgPaAcBavDylDbD932vWxu5fdvdiiRM=
Subject key identifier: DC:06:E1:CA:97:E7:F0:E8:91:5A:88:A9:A6:F5:6D:5F:82:BB:B1:E4
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 0F787D33
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/3Abhypfn8OiRWoippvVtX4K7seQ.roa
Signing time: Sat 01 Jan 2022 08:03:56 +0000
ROA not before: Sat 01 Jan 2022 08:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47846
IP address blocks: 64.190.62.0/23 maxlen: 32
91.195.240.0/23 maxlen: 32
2001:67c:64c::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259554611 (0xf787d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Jan 1 08:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc06e1ca97e7f0e8915a88a9a6f56d5f82bbb1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:e9:79:15:59:8b:48:39:bb:e9:83:b1:6f:
89:e2:d6:85:c6:21:1d:d0:13:3f:43:03:97:73:37:
1a:e2:58:bf:65:68:72:e3:80:88:57:0c:85:77:75:
54:d1:8b:ea:17:8e:89:bb:e5:61:fc:cd:85:45:c4:
7d:58:a6:06:8c:f2:55:a5:f3:86:3c:64:52:af:bf:
8b:f7:0c:2a:d6:1b:88:b8:89:9f:ce:c4:5a:88:40:
a5:9a:fa:89:5d:ba:2c:5c:67:8a:3a:60:e5:d5:90:
74:01:eb:05:78:d3:5b:f5:1c:47:74:1c:e2:97:ea:
2b:fc:2c:9c:f8:cd:e2:87:03:da:3a:57:f5:b3:23:
c3:9e:2c:7d:e8:1d:ea:fd:5c:e6:fc:52:47:f3:8e:
e2:d7:4a:d6:8c:64:cc:82:79:24:36:48:c7:bb:c5:
11:aa:3f:fe:c7:13:74:a2:b8:1c:07:ab:6f:14:da:
cd:68:e5:43:14:a5:ec:e0:51:89:89:e2:83:8e:0c:
dc:02:a5:ad:3a:e0:41:1b:9b:e6:5c:58:ef:bc:7e:
11:5c:62:bc:18:c4:a6:f4:5f:7a:04:4d:92:ec:9c:
c3:81:0e:55:3b:56:61:53:59:96:c0:4a:c3:8b:22:
1b:1f:a9:cc:29:f3:c0:d1:9a:61:96:c9:f6:ae:cc:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:E1:CA:97:E7:F0:E8:91:5A:88:A9:A6:F5:6D:5F:82:BB:B1:E4
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/3Abhypfn8OiRWoippvVtX4K7seQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.62.0/23
91.195.240.0/23
IPv6:
2001:67c:64c::/48
Signature Algorithm: sha256WithRSAEncryption
a5:b9:17:4c:b3:dc:cc:92:94:49:c8:f3:f9:6b:82:4b:78:ac:
65:ca:21:93:62:01:fe:e5:4d:c7:da:e0:37:6d:05:3c:d6:72:
52:76:2e:14:e1:8d:60:6a:bf:17:c0:a8:f3:e5:fa:59:b3:3a:
af:6b:b0:e5:72:a7:1b:cd:f5:6e:f8:d5:1a:be:b3:82:70:b3:
66:78:e8:02:96:d8:d3:e7:0a:76:65:29:5a:62:a8:5d:8c:d4:
3b:08:a2:f4:d4:b1:25:d8:90:d1:17:cb:73:ea:28:bd:d6:8f:
63:e2:75:15:eb:4a:4b:cc:f5:58:68:ab:22:54:c0:ed:dc:88:
67:66:b7:da:ff:cf:d2:78:cc:11:4a:bd:13:89:71:e6:6f:d1:
5e:7c:08:a3:b7:f2:af:a9:a5:92:d3:3d:01:26:4b:8c:52:b4:
4c:ca:64:86:80:df:36:b3:b7:0d:c3:2e:c8:45:73:28:64:3e:
b6:06:5b:0a:15:52:c3:85:97:59:6e:28:14:e1:88:b6:b1:c7:
05:13:1e:03:af:a9:ff:2b:96:fc:45:56:13:12:0e:74:5e:94:
80:eb:fd:35:e4:63:e5:8b:55:8d:84:34:a2:df:bb:4f:8d:92:
25:84:15:5b:10:62:40:6f:4b:7f:65:d6:4e:ec:87:3b:0a:ac:
ab:69:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org