Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/3Xd_8eSscOv4ofVbN-IVd7FRD88.roa
File: 3Xd_8eSscOv4ofVbN-IVd7FRD88.roa (raw, json)
Hash identifier: aRttcEsMbVMCzHyGXiVFTbnnUBKMJ53DzOSCaVM+FIk=
Subject key identifier: DD:77:7F:F1:E4:AC:70:EB:F8:A1:F5:5B:37:E2:15:77:B1:51:0F:CF
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 0466AE71
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/3Xd_8eSscOv4ofVbN-IVd7FRD88.roa
Signing time: Tue 01 Mar 2022 08:30:07 +0000
ROA not before: Tue 01 Mar 2022 08:30:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198777
IP address blocks: 193.59.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73838193 (0x466ae71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 1 08:30:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd777ff1e4ac70ebf8a1f55b37e21577b1510fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:f4:99:da:b0:70:c0:9e:ee:b7:38:82:cb:
88:56:3e:36:e3:5a:3f:45:5d:2e:c6:cc:4b:56:39:
08:ae:19:ae:30:9b:b2:b2:76:41:b2:af:ae:c6:b7:
13:d1:e6:07:dc:3b:7b:fa:d1:6a:d5:4c:11:41:bf:
a2:ce:74:37:ce:6d:60:09:6d:85:bb:d3:73:df:99:
d2:96:61:69:14:e4:8d:34:85:c3:e5:56:9a:23:e2:
c6:4c:d8:16:08:37:d6:4c:42:fa:99:12:d1:55:14:
72:e7:a4:13:de:07:6a:bd:33:9c:37:09:6a:0d:08:
69:34:2e:37:48:2f:48:a7:49:3e:cb:15:c4:30:aa:
1e:ec:fa:e6:2a:01:17:06:a4:78:d0:65:e9:a3:7f:
31:e1:6d:0d:5c:d4:28:d2:71:77:38:02:ef:d0:af:
40:d8:4a:35:e4:5c:a1:af:60:04:b4:82:e1:0f:4d:
25:c6:8a:55:c7:d1:48:3c:94:a6:2a:53:7f:29:fb:
41:72:db:96:f0:9b:3f:6b:2f:59:4a:38:b6:40:be:
91:53:cf:54:56:7d:f1:41:2b:78:a3:ea:c4:50:d1:
15:3b:48:76:6d:6c:34:fa:71:31:b4:73:d7:d4:8e:
6a:ed:bb:c8:a3:38:44:e2:53:ec:cc:d1:73:41:76:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:7F:F1:E4:AC:70:EB:F8:A1:F5:5B:37:E2:15:77:B1:51:0F:CF
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/3Xd_8eSscOv4ofVbN-IVd7FRD88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.88.0/23
Signature Algorithm: sha256WithRSAEncryption
56:e1:a8:bd:ce:f5:0a:99:d4:2a:41:c8:bc:74:86:7e:cd:e4:
82:a8:3b:05:73:ec:a3:2f:94:63:0e:bd:87:7c:2c:49:61:34:
c9:0e:7e:0c:21:9b:b1:07:92:0a:17:37:4e:af:41:09:49:48:
76:e2:b4:f2:e0:f7:cc:0c:02:ff:0c:11:d5:c6:b1:1b:ab:a3:
c3:2b:77:21:f4:4e:06:40:a5:ad:fe:74:16:6e:62:6b:6a:33:
39:b8:8f:aa:7a:46:28:90:b8:cd:04:b0:7b:68:a0:d4:6c:1f:
70:5d:e6:c6:55:4f:66:fb:68:ac:88:6e:ac:99:a7:c8:68:08:
da:e9:1a:81:5a:a5:a6:8e:8c:ce:be:f7:9e:39:3a:21:81:c1:
2e:77:f2:af:2e:f8:7d:21:f3:12:e9:39:6e:1b:6e:a6:56:63:
c0:82:47:04:1d:41:f7:02:ba:55:23:a8:ae:18:52:18:fe:e1:
e6:5b:9c:eb:2f:b8:da:0a:0b:55:b9:6f:df:18:ad:b9:f5:c7:
68:3c:e1:22:07:08:4b:70:3d:4b:37:98:06:0b:e3:e4:30:c6:
68:af:ab:55:0f:89:ef:1e:f6:46:01:65:ef:30:df:88:cb:9c:
b9:0d:ae:e5:b8:8a:f3:34:b5:01:08:9e:ba:c6:3f:6c:19:97:
c3:3b:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net