Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/3p8YmioF3HRY7BVWPpEhfot3zSQ.roa
File: 3p8YmioF3HRY7BVWPpEhfot3zSQ.roa (raw, json)
Hash identifier: EcP1cwTiniFHVybyCqh4AyA6YA0cF/HHIJgFaejWvBo=
Subject key identifier: DE:9F:18:9A:2A:05:DC:74:58:EC:15:56:3E:91:21:7E:8B:77:CD:24
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0183EB01E14DCAB834713B3E1FED4A142027
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/3p8YmioF3HRY7BVWPpEhfot3zSQ.roa
Signing time: Tue 18 Oct 2022 12:11:52 +0000
ROA not before: Tue 18 Oct 2022 12:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15854
IP address blocks: 195.203.152.0/23 maxlen: 23
149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
217.27.2.0/23 maxlen: 23
195.203.0.0/17 maxlen: 17
217.27.0.0/23 maxlen: 23
195.203.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:01:e1:4d:ca:b8:34:71:3b:3e:1f:ed:4a:14:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Oct 18 12:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de9f189a2a05dc7458ec15563e91217e8b77cd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:2c:9e:32:af:db:8d:47:9e:d9:cb:16:d9:
0f:e7:08:03:54:41:29:30:ea:59:55:91:c2:18:c5:
16:a4:09:5a:fc:12:82:36:51:d2:61:15:74:4a:24:
56:14:73:ce:be:82:c1:44:b3:ed:82:95:05:ed:22:
ed:e0:ed:36:f4:91:e4:e6:06:77:77:d4:52:d6:92:
56:d2:e4:72:69:33:fa:ad:34:4b:8c:34:13:57:8d:
e0:4b:be:66:87:cc:7f:b2:5c:8b:4e:69:78:35:1d:
c1:a0:1e:69:75:a6:9c:12:a0:8d:91:72:61:31:65:
11:dd:1e:da:cc:da:65:9d:5e:00:a4:e1:e5:7b:d1:
45:ae:30:45:03:a4:d8:70:56:02:fe:b6:fd:cb:4b:
0e:8d:27:ac:a7:dc:18:21:b2:5f:00:a2:46:aa:db:
ef:c0:de:f1:c2:98:ae:b3:8d:47:2e:3e:5a:23:22:
0c:2f:0f:73:85:ae:80:bd:6a:67:9b:cd:37:fd:b7:
1e:4b:17:f6:72:d2:b6:c5:16:cf:62:f0:14:3e:7e:
ef:34:aa:86:99:f0:65:20:55:01:8c:d3:cc:55:72:
c4:33:41:58:0d:a2:5c:35:fd:69:c4:b9:9d:52:1c:
50:08:75:a2:80:a8:c3:51:7f:47:c7:05:2a:f6:19:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:18:9A:2A:05:DC:74:58:EC:15:56:3E:91:21:7E:8B:77:CD:24
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/3p8YmioF3HRY7BVWPpEhfot3zSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:21:27:65:27:1a:52:8b:b7:a7:6b:3f:4d:a8:05:ff:ce:8f:
6f:9d:c4:ec:75:c4:15:b5:a3:7b:37:8c:87:4d:78:58:99:a7:
9b:1a:cb:5d:9d:dc:49:08:a9:0b:88:bf:fa:24:cd:64:8e:27:
70:92:17:ea:21:92:b4:9e:42:e8:b6:3c:c1:b5:db:e3:0a:d2:
f4:84:77:9d:a0:03:75:4e:8f:b9:f1:60:ee:14:e4:ca:8e:e0:
dc:36:6d:f7:98:7c:60:a4:56:ae:ae:51:29:c4:fe:57:60:af:
6e:0f:7d:14:be:7b:26:6b:a9:42:4d:4b:e7:98:de:8f:52:1b:
33:fc:e4:bd:d8:75:9b:00:7c:5e:31:7b:60:a2:22:cf:c5:ee:
ac:92:cd:26:8d:56:ad:64:75:11:40:50:22:6c:0c:88:13:ce:
ea:36:4e:a1:96:26:ee:0a:d4:f0:27:25:a5:db:78:67:d6:ff:
e1:80:4e:9f:b2:ce:c0:51:da:fb:8f:5e:38:8e:79:dc:ef:2d:
4d:4f:2b:47:ed:b4:36:65:71:a7:60:20:6d:30:fc:98:db:9f:
87:18:5e:98:da:30:eb:c3:fb:3e:8f:1b:f7:06:6c:ec:1d:19:
cf:fb:75:69:1b:44:7f:b1:4a:7d:1b:d7:2f:94:06:f4:09:93:
8e:a8:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org