Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/3WvXMJpB0synqkdI2QzXyn7oq_g.roa
File: 3WvXMJpB0synqkdI2QzXyn7oq_g.roa (raw, json)
Hash identifier: iPXfWnwuUwHrNtOTizfJCxvQQPj970a3KF+5LMuX/44=
Subject key identifier: DD:6B:D7:30:9A:41:D2:CC:A7:AA:47:48:D9:0C:D7:CA:7E:E8:AB:F8
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 0AD85ADC
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/3WvXMJpB0synqkdI2QzXyn7oq_g.roa
Signing time: Mon 25 Apr 2022 12:16:46 +0000
ROA not before: Mon 25 Apr 2022 12:16:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15757
IP address blocks: 94.124.224.0/21 maxlen: 23
185.165.200.0/22 maxlen: 24
217.17.160.0/19 maxlen: 24
82.114.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181951196 (0xad85adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Apr 25 12:16:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd6bd7309a41d2cca7aa4748d90cd7ca7ee8abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:44:8b:f1:72:6d:f9:d3:db:14:da:02:c2:
e5:28:ae:5d:c7:7f:01:a0:c9:0c:31:6d:24:a4:21:
77:73:e5:61:8b:8d:f7:68:d0:da:c7:ad:54:f9:24:
39:73:b0:96:db:2f:df:b4:b9:11:f3:4c:fb:7b:fc:
6a:5d:05:9d:41:aa:63:09:d6:c0:a0:94:9b:bd:0b:
a8:8a:9a:08:ea:59:67:56:1c:16:e7:f9:97:04:9d:
1a:30:82:bc:b6:67:af:41:2e:5e:8a:bd:96:38:ff:
4f:cc:54:7f:4d:d2:40:6d:cd:3b:33:ad:e9:b2:96:
70:ca:9c:5a:9d:80:c4:e4:d6:2d:4b:a3:52:dc:6d:
08:c8:c7:a9:2a:95:93:a6:6d:e3:62:30:a1:c3:c9:
66:e3:24:de:58:2a:5b:23:bf:9d:97:bb:1d:85:b6:
aa:b9:a9:c5:ce:5a:54:bf:47:8c:99:90:d9:83:c7:
81:56:bd:6a:d5:27:01:ef:59:37:14:c9:d5:e0:ef:
c6:ad:f7:af:02:41:c2:82:40:b6:5c:1c:35:6d:c3:
27:6e:be:1c:b4:52:90:bf:9f:35:c5:30:d2:99:eb:
23:42:98:a0:27:d0:de:ad:34:28:0b:2a:9b:27:aa:
30:f7:04:8a:d0:72:39:d4:35:63:07:ea:89:d5:49:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:D7:30:9A:41:D2:CC:A7:AA:47:48:D9:0C:D7:CA:7E:E8:AB:F8
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/3WvXMJpB0synqkdI2QzXyn7oq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.128.0/19
94.124.224.0/21
185.165.200.0/22
217.17.160.0/19
Signature Algorithm: sha256WithRSAEncryption
43:9f:82:57:08:ed:5d:57:ac:ae:60:02:55:66:c4:34:46:e2:
b2:d2:f6:06:95:77:f2:83:b8:19:d2:5a:ba:ee:a0:00:7b:7e:
09:46:7a:99:1d:b1:50:81:1e:5e:6b:9c:ee:28:df:f1:88:17:
a6:28:fa:14:39:d5:f4:5a:7d:d7:53:75:8b:7a:c3:e0:17:48:
dd:8c:5e:ec:8b:12:ee:bb:18:1c:3b:91:ff:e2:02:5c:b8:56:
71:8d:f6:28:05:b2:40:ae:e7:41:28:17:68:94:39:39:3b:79:
f6:90:28:4a:db:4f:cd:7e:d8:43:bc:ce:3e:25:7a:f4:d7:0f:
fe:44:a1:e1:4a:2f:7f:48:48:f0:77:f7:c5:9b:1a:58:48:76:
77:0e:ef:35:02:ae:7f:21:09:22:6d:8d:b6:0d:43:a6:34:30:
b1:bd:f9:5c:27:b1:cd:d9:77:f4:e6:db:82:6b:07:a7:8d:63:
dc:90:ad:d5:6c:c8:dc:64:b7:37:3d:9b:3b:79:9e:d3:95:a9:
4a:d7:45:1b:a9:00:51:10:83:0d:bc:5c:48:b3:99:48:7b:d3:
54:b7:65:00:96:19:c5:c1:5c:3e:d2:ae:a7:74:65:78:8a:da:
32:d9:55:ab:17:65:6a:c2:77:e2:61:62:e4:e3:37:80:29:7a:
47:61:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:45 2024 by rpki-client on console-fra.rpki-client.org