Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/P4PHh2t2bDLtjtdQYlS_91-gOAY.roa
File: P4PHh2t2bDLtjtdQYlS_91-gOAY.roa (raw, json)
Hash identifier: nopuoaC5gcfeQzP2Dh/0Va4PSnG7ZDiCZaHFRRHO3eA=
Subject key identifier: 3F:83:C7:87:6B:76:6C:32:ED:8E:D7:50:62:54:BF:F7:5F:A0:38:06
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 168ACA41
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/P4PHh2t2bDLtjtdQYlS_91-gOAY.roa
Signing time: Sat 01 Jan 2022 14:54:47 +0000
ROA not before: Sat 01 Jan 2022 14:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64462
IP address blocks: 195.80.233.0/24 maxlen: 24
185.83.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378194497 (0x168aca41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jan 1 14:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f83c7876b766c32ed8ed7506254bff75fa03806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:46:0f:7c:97:da:4e:64:85:86:5e:0a:67:
30:18:f1:35:09:29:fd:7c:66:0f:8f:83:6a:53:df:
3e:e2:0c:00:21:8c:8c:67:b5:15:8d:3f:df:6e:a9:
2b:3d:09:b6:8b:5e:f3:53:84:f9:68:6a:fb:fb:05:
6e:7d:08:fa:cc:31:fc:7d:78:85:85:0c:df:98:f0:
9f:9d:5c:74:f6:f1:36:4d:2c:8a:11:8a:d9:52:ac:
1c:84:88:be:fe:78:f8:98:ba:80:6a:ef:8b:cf:40:
a2:22:56:55:ce:f1:c9:95:9a:ae:27:77:56:8a:54:
86:60:49:00:11:61:fc:14:29:90:d4:26:7b:01:5f:
e6:ce:61:da:b7:3d:fb:ff:c3:65:dd:1f:fa:24:16:
3e:d1:cf:0e:d1:65:00:a9:e2:39:07:6a:99:4f:01:
9e:83:17:70:44:4d:cb:9b:ac:6b:8f:97:83:50:d3:
af:fa:7c:c2:56:49:1e:1a:f3:01:69:b4:89:ee:c2:
1d:f9:13:c4:0a:6f:6b:b4:d4:1c:20:7f:ea:cb:4e:
6e:da:5c:22:4e:68:5b:4a:f4:52:41:27:80:47:bc:
39:de:5c:5a:a8:18:10:13:cf:92:16:31:96:4b:01:
a8:b4:31:37:c1:07:c7:74:26:af:09:91:8f:01:9b:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:C7:87:6B:76:6C:32:ED:8E:D7:50:62:54:BF:F7:5F:A0:38:06
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/P4PHh2t2bDLtjtdQYlS_91-gOAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.108.0/22
195.80.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:57:f5:7b:99:94:20:8e:a3:23:77:19:3f:53:7a:77:5e:eb:
64:52:01:be:5f:09:91:83:04:21:22:99:6e:19:12:46:b2:7b:
10:1c:f8:b2:59:0e:74:38:f2:b0:1c:de:cc:de:0a:e2:7b:5b:
fa:7b:39:89:00:11:06:a2:8b:4a:1b:20:8a:be:3a:df:93:5c:
80:25:2d:e6:dc:a7:65:6d:f2:e3:5b:5a:8d:f7:ce:ca:02:2c:
9f:16:8f:f2:23:96:85:51:22:53:05:13:aa:d0:50:c3:34:20:
35:ee:51:fa:c5:b2:17:e3:17:4b:af:46:46:d9:b8:f1:6d:d9:
65:e2:86:be:41:77:d6:8f:a9:97:d3:58:c2:af:21:64:2e:f0:
7d:db:a4:fe:68:4a:f2:39:a9:ab:6f:07:39:06:f4:27:81:cb:
f5:3d:a7:be:31:e7:2a:e9:ca:26:32:71:6d:8e:47:78:6a:21:
15:59:14:fc:a7:44:4a:e3:48:8a:2e:1f:71:50:78:3c:c3:8c:
f9:47:90:ab:f7:63:a2:26:1d:3a:8f:45:b6:00:6c:9b:cc:26:
48:57:ed:13:22:5f:40:3c:d5:96:93:4e:40:3a:f5:9d:b9:81:
97:9b:ea:5c:6e:91:b0:fa:cc:a9:ef:ee:05:a4:b0:d1:4e:12:
fd:10:f6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:52 2024 by rpki-client on console-ams.rpki-client.org