Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/3CfB8DRCN5SPXPwTQu4I0TZuow8.roa
File: 3CfB8DRCN5SPXPwTQu4I0TZuow8.roa (raw, json)
Hash identifier: Xq+0ayZYRftlKfZehIwwibIaeKelvHbyIL19bp9lq5o=
Subject key identifier: DC:27:C1:F0:34:42:37:94:8F:5C:FC:13:42:EE:08:D1:36:6E:A3:0F
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 35A4D3F0
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/3CfB8DRCN5SPXPwTQu4I0TZuow8.roa
Signing time: Sat 01 Jan 2022 04:55:54 +0000
ROA not before: Sat 01 Jan 2022 04:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197480
IP address blocks: 178.21.136.0/21 maxlen: 21
185.3.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899994608 (0x35a4d3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Jan 1 04:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc27c1f0344237948f5cfc1342ee08d1366ea30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:f3:18:47:c5:1d:0c:0e:23:21:40:b0:8b:
67:c7:83:01:65:51:fc:6c:0c:6c:69:89:a7:1a:07:
54:11:6b:00:ab:bd:d9:76:0e:53:20:d8:73:8d:e2:
67:be:9e:e5:d3:2a:fa:26:24:eb:b8:1d:2a:11:1c:
45:fe:5a:8c:7c:a8:18:c7:1c:31:0c:a8:0d:a5:1c:
13:db:15:fa:c5:64:17:34:c7:1b:c0:e0:d9:4d:b6:
21:04:a1:51:36:f9:80:fc:60:3d:bd:db:84:70:d5:
6a:54:e8:63:93:5b:fc:5f:81:b7:da:02:30:60:45:
0e:1a:a4:2b:e1:ac:fc:f4:fe:31:1f:38:5e:2c:88:
0b:aa:13:9b:10:0d:3b:ae:ce:bf:29:d0:c4:86:42:
59:a0:e8:9b:2f:4e:b2:95:51:dd:35:f8:11:ea:84:
47:6a:39:46:34:94:1c:82:9e:df:49:73:dc:c6:40:
9d:c5:c7:9b:bc:f7:ae:ef:f9:57:04:77:5e:1d:f0:
f9:c4:1b:1f:72:af:59:b2:85:90:98:2a:bc:05:e6:
a1:3a:a5:a7:9d:84:d7:b6:8d:6b:95:4f:56:11:37:
a3:ec:8a:7f:75:1e:f0:cb:1d:41:7f:c9:a4:f8:5a:
39:72:82:bf:3e:9f:f5:20:02:50:e6:4a:1b:fd:42:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:C1:F0:34:42:37:94:8F:5C:FC:13:42:EE:08:D1:36:6E:A3:0F
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/3CfB8DRCN5SPXPwTQu4I0TZuow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.136.0/21
185.3.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:40:d5:66:f5:ca:d3:00:55:7c:1e:81:67:5b:da:66:f5:80:
24:cf:da:2c:f7:2e:80:b2:3b:85:d3:9e:a9:28:ad:91:ed:b9:
3c:32:8e:a9:f0:d2:18:50:7b:5e:4d:85:5b:13:b5:b5:54:79:
d4:c5:2e:d7:1e:f5:2b:9c:54:50:94:f7:de:6f:1a:16:75:dc:
6f:65:74:a7:ad:99:69:7c:b9:b8:36:29:77:d5:9e:16:8c:ec:
33:f8:fc:37:a1:1b:13:bc:ec:03:94:3d:60:ee:17:a7:48:75:
72:0e:15:14:fa:1d:42:3c:e0:66:22:ff:cb:e0:83:36:39:55:
fb:d1:e5:81:4a:c1:17:cc:18:16:36:94:18:28:ce:48:b8:f2:
92:3d:8b:80:82:f4:16:bd:e1:09:02:27:2b:65:43:08:33:46:
16:40:3c:0f:36:d1:c3:36:a9:83:ec:57:94:7c:a8:5f:03:74:
22:32:a3:1e:c4:9c:74:99:68:0e:4c:92:31:0d:ba:dd:b7:bb:
67:27:51:66:0c:99:97:60:b5:7c:9b:59:e0:04:c8:52:b2:a4:
d9:fe:0e:12:44:bd:19:2e:3d:c1:4d:7f:5f:a5:5b:48:5f:99:
33:33:f6:a4:b2:3b:ed:76:fc:15:19:a2:b3:fe:34:2f:9a:33:
01:c6:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net