Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/_3hRIL3jK3dZv9RYGpArdga_nTU.roa
File: _3hRIL3jK3dZv9RYGpArdga_nTU.roa (raw, json)
Hash identifier: 4Tcu+xESi1XSegu7FapCizxkQCuRDnTP8pB8Mx1WHhs=
Subject key identifier: FF:78:51:20:BD:E3:2B:77:59:BF:D4:58:1A:90:2B:76:06:BF:9D:35
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 01856D8AB231832D7719EA83E1A684D73729
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/_3hRIL3jK3dZv9RYGpArdga_nTU.roa
Signing time: Sun 01 Jan 2023 13:34:44 +0000
ROA not before: Sun 01 Jan 2023 13:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12337
IP address blocks: 87.237.216.0/23 maxlen: 24
87.237.218.0/24 maxlen: 24
87.237.222.0/23 maxlen: 24
192.189.151.0/24 maxlen: 24
206.195.32.0/23 maxlen: 24
2a04:5781:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b2:31:83:2d:77:19:ea:83:e1:a6:84:d7:37:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 13:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff785120bde32b7759bfd4581a902b7606bf9d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:d3:68:3c:a4:f8:74:52:b8:e7:2d:51:72:
63:9b:94:c7:16:be:8c:6f:3d:01:f0:17:28:12:3f:
11:06:52:5e:97:c7:07:00:f0:9a:2d:fc:58:30:34:
89:1e:70:8e:19:0b:ac:f1:5f:92:e1:ff:74:6d:80:
09:f1:13:4d:b7:11:42:fc:e0:2e:95:62:6e:3b:6f:
d7:93:9d:f9:4f:57:dd:6a:c0:2c:f4:db:13:6b:b6:
4b:ac:af:14:f2:7b:7c:c2:a5:85:1b:04:a2:e6:04:
09:e2:a2:33:10:3b:a6:69:bd:02:04:44:69:df:d6:
ce:b6:74:45:f9:ce:e3:dc:bd:52:96:57:4d:6e:cb:
25:c0:82:8a:90:9f:ba:01:b7:83:56:7d:e3:ac:d3:
8e:6f:6b:1a:4e:b1:d8:ee:ad:5c:40:f5:d8:98:94:
3a:78:ff:95:98:5a:d9:42:86:39:49:10:de:ac:f7:
05:fe:cf:b4:f5:56:b3:e1:2f:de:92:e6:13:5f:d1:
19:9f:00:bb:fb:3c:18:ad:7b:16:e4:7b:0a:f9:7b:
f3:6d:11:1c:8a:60:4a:6e:b1:6c:9a:be:8a:53:67:
08:4e:95:28:88:14:10:c9:3b:ae:fe:6d:5a:38:0c:
a5:1d:b8:d7:d0:c0:b8:00:a4:35:70:ad:6a:11:9e:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:51:20:BD:E3:2B:77:59:BF:D4:58:1A:90:2B:76:06:BF:9D:35
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/_3hRIL3jK3dZv9RYGpArdga_nTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.216.0-87.237.218.255
87.237.222.0/23
192.189.151.0/24
206.195.32.0/23
IPv6:
2a04:5781:2000::/40
Signature Algorithm: sha256WithRSAEncryption
67:bf:fe:af:ee:cb:c9:4a:36:ce:0b:7e:fd:ca:33:66:53:60:
92:d0:f9:48:eb:5d:0a:e6:4a:92:71:51:39:bc:ea:3f:05:7f:
b6:33:86:7b:7d:df:b5:1b:bb:f4:e2:f6:e4:71:f9:dc:46:09:
f6:d8:65:fc:ae:78:6e:0a:e9:d1:c9:1f:14:9c:db:e3:10:b7:
88:78:ba:56:d5:3a:fb:a4:24:7f:db:93:8b:05:e5:f8:d5:89:
41:c3:e8:7d:45:19:80:3c:21:f8:5c:3f:75:cc:4d:d2:4d:cd:
99:61:35:73:fe:55:1a:26:a6:89:42:98:10:0f:33:a8:83:c5:
73:c6:ee:41:2f:20:07:65:00:a8:ec:83:3c:2a:de:89:09:9d:
c2:87:b5:ae:75:91:2e:c4:62:39:89:eb:2a:3e:71:a6:23:04:
f8:88:67:70:a1:f8:ae:44:9a:f8:e8:ec:e8:7c:95:af:4b:cb:
9c:89:a3:f4:3a:e1:f0:32:25:89:f6:05:d2:23:cb:4b:03:c3:
45:82:10:24:82:5f:5f:49:30:6d:aa:b8:61:5c:c9:88:ae:72:
ff:57:54:94:a3:60:af:1c:32:c7:cc:f4:0d:eb:af:26:f9:6c:
72:1f:55:48:c7:58:d1:93:1d:ad:14:d2:86:2f:b6:5e:97:bb:
02:41:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:36 2025 by rpki-client