Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/3enPh2hqTQrCgg30tU7PjRZ4ZFs.roa
File: 3enPh2hqTQrCgg30tU7PjRZ4ZFs.roa (raw, json)
Hash identifier: 0chf/+gX1RufHhH0oQcgliSEewRPVm7qiAr1kEbLe+0=
Subject key identifier: DD:E9:CF:87:68:6A:4D:0A:C2:82:0D:F4:B5:4E:CF:8D:16:78:64:5B
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 304D7DB7
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/3enPh2hqTQrCgg30tU7PjRZ4ZFs.roa
Signing time: Tue 08 Feb 2022 20:39:11 +0000
ROA not before: Tue 08 Feb 2022 20:39:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211214
IP address blocks: 87.246.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810384823 (0x304d7db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Feb 8 20:39:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dde9cf87686a4d0ac2820df4b54ecf8d1678645b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:27:42:24:50:70:94:f0:a3:38:88:b0:1b:
c2:08:c1:d6:6c:b0:94:61:1a:f8:92:6b:d8:a9:7e:
30:f5:da:a0:67:41:e6:1c:00:9b:e6:40:73:35:c3:
a9:bf:49:f3:e1:69:96:c2:d9:18:c6:e7:ee:63:fb:
7f:f0:ef:2d:0a:bd:cf:15:95:db:b7:42:2c:8d:89:
ad:97:5d:31:1a:f5:47:33:35:d4:0d:32:60:33:9d:
c2:8c:c2:55:2e:61:9c:09:4d:3a:4a:89:f0:d0:77:
02:9a:13:76:7c:a7:50:91:64:07:e1:c0:84:6d:69:
b8:db:ba:16:5f:91:43:69:97:03:f6:1f:ce:5e:9a:
08:95:7f:d9:c1:c2:27:e4:b9:9e:79:0c:3b:5d:c5:
6a:1f:90:b3:73:43:9c:72:ec:81:83:08:a4:04:95:
f5:80:98:d2:cd:23:ab:fb:0f:e3:96:ae:a1:10:7d:
ae:df:24:7f:45:15:60:38:ef:3c:37:6f:23:42:10:
b8:59:16:22:b1:7f:7d:f1:47:cf:d1:13:78:b6:32:
e5:4a:75:7d:11:00:4a:0f:59:62:a0:45:96:f2:1b:
3c:5e:57:3c:d4:16:9a:d8:02:ef:96:7d:b3:3d:ca:
67:22:66:aa:45:2d:62:20:58:dc:d1:61:9d:f0:39:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:CF:87:68:6A:4D:0A:C2:82:0D:F4:B5:4E:CF:8D:16:78:64:5B
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/3enPh2hqTQrCgg30tU7PjRZ4ZFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
41:06:83:d5:2f:86:34:3f:b0:36:f6:72:08:4b:fd:2f:0a:bd:
29:18:ff:e2:c7:67:35:b3:25:c8:04:20:81:c7:23:13:51:88:
90:8d:5f:3a:76:19:d3:29:c7:0b:3a:6b:72:2d:28:ad:0d:1e:
42:12:62:55:eb:9d:f2:0f:b6:a5:bf:3d:2c:a5:d8:b3:fb:6b:
47:61:71:5d:ea:52:92:cd:17:2b:09:fa:d7:e3:cb:4f:cf:8a:
0a:20:28:81:b4:60:0a:a4:ed:c5:8a:7f:c1:8e:8b:93:ca:e2:
92:8e:7d:3a:b2:48:0c:10:6a:e3:4f:5a:d9:83:b5:a8:bc:5f:
ee:4a:7b:43:eb:bb:86:e3:ba:56:24:18:b2:aa:a8:36:d6:2d:
f0:27:ea:75:fc:a8:79:e4:70:ca:78:a6:03:e5:25:96:b2:60:
17:33:a1:a1:42:bd:af:a8:23:56:0d:85:5f:4a:c7:37:22:1c:
22:ea:11:b2:82:6f:e3:71:37:cb:f4:8a:ac:b1:8c:ea:73:df:
47:70:cc:af:f0:bb:f0:2b:1e:91:32:80:43:77:5d:c6:4f:64:
f2:f2:a6:33:29:5d:d8:5b:dc:8e:28:cb:a1:43:1d:6f:3b:11:
2c:df:5b:70:ff:ac:7b:f3:b2:ce:84:f4:e1:2a:77:3d:65:19:
d3:99:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org