Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/3CLTDP6iGfw2NsLsrv-U_KYmo-w.roa
File: 3CLTDP6iGfw2NsLsrv-U_KYmo-w.roa (raw, json)
Hash identifier: AzFhwf/EK6jgkSuxniK5VCXfrHUUVyaLRZWYxmZmgus=
Subject key identifier: DC:22:D3:0C:FE:A2:19:FC:36:36:C2:EC:AE:FF:94:FC:A6:26:A3:EC
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 0109CF
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/3CLTDP6iGfw2NsLsrv-U_KYmo-w.roa
Signing time: Sun 29 May 2022 05:52:13 +0000
ROA not before: Sun 29 May 2022 05:52:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57464
IP address blocks: 194.93.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68047 (0x109cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: May 29 05:52:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc22d30cfea219fc3636c2ecaeff94fca626a3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:02:e0:16:09:21:c5:85:16:3e:fb:10:e0:
11:75:35:83:42:22:26:85:2b:6b:ea:b6:3c:46:31:
6c:30:c8:e0:45:a8:df:c1:c8:26:3c:cf:05:bc:2f:
b5:56:87:ab:b9:1a:7f:21:df:04:99:0c:40:58:7a:
09:c7:09:f0:b3:34:18:3f:d2:09:c0:09:19:7b:2a:
d6:11:cb:1c:ae:f2:2b:32:d4:ff:74:dc:73:17:ae:
9d:7e:cb:0e:4e:9b:80:23:3e:51:3a:bf:15:10:1d:
59:0f:5d:45:7f:9c:e7:41:b0:ba:2e:04:53:7e:89:
1b:a8:da:4f:f5:9d:bb:0d:1a:fb:93:c5:99:92:b0:
fa:b4:83:f9:60:24:0b:e4:87:89:e1:f2:0f:c9:8f:
47:80:9f:e9:35:ff:a1:4a:5d:79:49:9f:92:87:21:
07:67:7a:7e:47:16:09:60:a1:8c:63:2e:e9:21:ae:
f1:f7:6c:a8:f3:e0:e5:8f:f2:f7:b6:bb:06:c9:51:
97:bf:76:55:0f:59:d3:c1:67:6e:b6:a8:75:ba:d1:
07:5d:b2:eb:b5:5a:7d:7c:2c:ca:aa:95:da:fa:a7:
0f:ee:28:38:1f:e2:e5:5d:d6:69:22:63:e4:4d:6f:
1d:b9:62:7f:62:18:a3:3e:6b:e3:06:8f:fa:7e:73:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:22:D3:0C:FE:A2:19:FC:36:36:C2:EC:AE:FF:94:FC:A6:26:A3:EC
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/3CLTDP6iGfw2NsLsrv-U_KYmo-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.100.0/24
Signature Algorithm: sha256WithRSAEncryption
54:37:5d:0d:ab:ba:cf:6c:cb:78:47:d4:76:d1:64:ae:5e:8e:
45:a1:e2:25:2a:81:54:91:af:ef:aa:69:6d:c7:15:c5:53:8d:
ea:8f:40:93:fd:b6:b0:ab:37:8b:63:81:4e:ad:7a:28:e1:d2:
10:44:82:fd:8f:37:30:a1:bc:49:80:04:f6:f8:e4:ad:76:4d:
79:74:df:cb:82:c8:b8:df:24:24:68:3e:78:09:6a:a5:6e:97:
05:30:19:ac:50:94:20:14:99:ef:6d:27:01:4b:c3:95:86:2c:
71:b2:67:62:cf:6f:7b:e8:ff:9e:d3:94:3c:81:36:88:b3:f6:
83:83:91:f3:63:9c:ba:13:34:88:e4:4f:61:ee:05:3d:0b:8b:
5e:df:71:b4:26:89:7e:1a:dd:86:27:8e:03:b0:31:44:aa:b9:
53:d7:0c:48:02:55:da:3d:a4:93:62:51:1f:5a:44:14:25:03:
e8:d3:08:88:07:62:cc:db:6f:66:4a:25:af:b2:92:66:2c:e8:
b4:e5:17:57:80:b2:8d:93:17:e3:90:45:a2:67:ec:38:63:12:
e3:95:50:2d:32:19:9e:c9:85:ad:c5:e0:74:3c:35:0e:d3:df:
1c:78:ff:76:fb:e2:fa:dd:9c:d9:75:94:e1:20:bc:ff:65:e3:
79:5a:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:02 2024 by rpki-client on console-ams.rpki-client.org