Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/3tS38pkCl5qpmJpeJLqOCZs6IeU.roa
File: 3tS38pkCl5qpmJpeJLqOCZs6IeU.roa (raw, json)
Hash identifier: 6+xNLV1k0xVn8LzMEYkjMdbrlnJ4lSJYIPVs4kbzoD4=
Subject key identifier: DE:D4:B7:F2:99:02:97:9A:A9:98:9A:5E:24:BA:8E:09:9B:3A:21:E5
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 01E5AD8A
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/3tS38pkCl5qpmJpeJLqOCZs6IeU.roa
Signing time: Tue 08 Feb 2022 13:22:54 +0000
ROA not before: Tue 08 Feb 2022 13:22:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 194.15.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31829386 (0x1e5ad8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Feb 8 13:22:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ded4b7f29902979aa9989a5e24ba8e099b3a21e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:55:45:e9:fd:b5:f4:6c:38:09:da:76:53:
5e:00:80:63:7a:a5:df:15:3e:f9:b1:74:2f:8e:d3:
ae:13:ad:2d:79:69:94:21:38:af:20:29:13:48:51:
75:51:f3:60:ce:86:76:e7:74:db:2d:81:35:d4:42:
3e:2b:1b:b2:07:65:a0:8e:6c:03:80:cf:73:26:a0:
ee:d7:33:2d:1e:c5:53:11:2c:cc:aa:63:1e:09:3d:
ba:3a:36:54:1f:aa:88:7b:34:89:f6:1c:7a:39:5a:
b5:2e:e4:02:37:78:9e:5e:21:59:ff:18:7b:a3:ae:
70:20:18:fa:16:42:a2:5d:97:f7:2c:31:78:ea:4e:
4d:84:57:0f:ed:5d:9f:67:8c:1d:24:db:f6:b0:df:
5b:c9:f3:cd:61:fa:3b:45:b2:d3:ac:17:b7:ad:f5:
42:7b:7b:bc:8f:d3:92:e6:d8:fe:26:b6:c2:54:a3:
c1:41:f9:c3:d3:98:4f:aa:89:3a:85:b6:87:f8:d5:
8c:c0:d1:4f:84:5b:6b:fd:dc:49:64:2a:56:d0:df:
b2:e5:1d:6b:21:6c:81:cb:18:36:39:6e:c2:56:dd:
8d:e5:46:94:6c:19:dc:3a:7d:5d:2a:dd:d5:55:16:
90:fa:0c:dd:08:08:e9:59:90:ff:cf:a2:94:0d:86:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D4:B7:F2:99:02:97:9A:A9:98:9A:5E:24:BA:8E:09:9B:3A:21:E5
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/3tS38pkCl5qpmJpeJLqOCZs6IeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f5:63:15:60:4a:44:a3:b0:d2:0a:06:dd:a1:d8:ed:a8:d3:
a6:44:18:7a:24:7c:fc:9e:65:17:a6:24:cc:18:d3:4e:36:67:
84:68:a2:42:11:c0:48:00:af:31:0f:4f:0f:43:f1:6e:b8:e1:
99:5a:54:76:62:f9:25:81:65:43:63:c6:0e:11:87:07:65:30:
6c:9c:d1:6a:c8:1c:6c:e7:d7:ae:05:28:1c:57:64:12:1d:bd:
5e:d7:7e:c3:05:31:e7:b2:b9:a4:ba:88:b6:21:77:15:cf:bb:
1f:89:30:d5:7c:e5:02:e3:77:a9:92:84:a2:ed:d1:bb:78:5e:
fa:2c:a1:3f:33:43:be:ca:43:3a:1e:0c:f9:96:19:82:67:cf:
39:52:0a:31:f9:37:70:e8:3b:30:30:bf:e2:18:6e:c8:a0:f2:
5a:45:fe:3a:4a:bf:db:fb:8f:a3:9d:ff:09:99:63:b3:63:a5:
ad:c5:ba:bf:07:e3:8a:8a:76:12:ae:01:97:21:c4:02:8f:f0:
52:46:8f:56:10:a5:c0:4b:f4:73:19:05:6b:2b:c9:b3:e8:6b:
1e:18:57:b6:5f:b9:28:ac:bf:2b:41:0c:74:76:a2:de:3a:b0:
69:d1:93:99:eb:51:53:1b:99:03:cf:ea:2b:4b:36:12:c1:c4:
7c:96:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:30 2024 by rpki-client on console-ams.rpki-client.org