Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/PC_-l10-avYarnG10J4mA1BEYgs.roa
File: PC_-l10-avYarnG10J4mA1BEYgs.roa (raw, json)
Hash identifier: 4M9vcj8/pwwJIenOA9TA9XbtXwXl/u1rQPomf9/rI6E=
Subject key identifier: 3C:2F:FE:97:5D:3E:6A:F6:1A:AE:71:B5:D0:9E:26:03:50:44:62:0B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018570399E3961D75B1B56F8009782E5ED60
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/PC_-l10-avYarnG10J4mA1BEYgs.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6659
IP address blocks: 195.180.249.0/24 maxlen: 24
194.64.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9e:39:61:d7:5b:1b:56:f8:00:97:82:e5:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2ffe975d3e6af61aae71b5d09e26035044620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6d:68:43:d2:88:8e:84:8c:a2:01:d8:f1:86:
0d:7f:17:f9:5b:87:78:5d:87:29:d4:1f:b0:d8:d0:
17:e6:2c:0a:bf:f2:a8:94:26:68:e2:73:ef:a2:df:
26:f5:34:a6:2f:c4:34:ba:ad:46:7f:3b:e4:61:9c:
7e:88:aa:97:26:4f:a6:a1:68:61:06:76:81:26:8d:
a5:d3:9c:59:9a:5d:55:67:5b:77:67:df:d4:f5:b1:
45:5f:d7:8a:5f:98:3b:72:ca:c4:03:19:e6:f2:51:
79:86:e3:43:ad:9c:06:42:15:b0:29:0a:91:b6:97:
7e:ac:94:74:8a:e0:7a:a4:9d:bb:75:0b:7e:26:47:
28:32:7a:dd:e9:a9:38:ae:12:1a:4b:14:c3:66:61:
88:b8:aa:64:54:35:2e:9c:a0:1e:ec:52:7d:cb:b3:
4d:e6:e6:68:f1:10:01:0b:53:0e:25:c3:67:f1:58:
d3:ff:ce:61:6d:f2:06:82:68:6a:63:67:46:5a:70:
4f:2f:fc:b6:e6:b0:7f:6e:35:a6:8f:99:37:0b:26:
75:82:35:e5:24:62:56:7a:32:45:cd:be:29:c5:7c:
72:9c:bd:5f:03:26:e3:54:74:c3:d0:9a:b4:f2:64:
f6:a7:d7:72:7c:44:a8:67:92:c6:6d:4c:93:4b:95:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:FE:97:5D:3E:6A:F6:1A:AE:71:B5:D0:9E:26:03:50:44:62:0B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/PC_-l10-avYarnG10J4mA1BEYgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.31.0/24
195.180.249.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4d:ce:86:18:29:7f:61:c4:8b:87:18:92:37:f1:92:2d:39:
95:fe:6c:31:1c:fb:cb:65:98:0a:7c:58:52:54:c8:25:80:c6:
e6:15:e0:84:a6:73:f9:12:dc:c0:0a:fc:9f:53:5c:3a:43:84:
10:c8:d7:b4:f0:e1:6a:76:d8:24:e2:23:e7:42:9f:d5:a5:15:
53:bd:79:a8:85:98:52:5e:bc:c5:41:55:64:0a:3b:36:1c:d1:
24:32:3e:ed:f7:c5:dc:30:ee:1b:46:6b:98:08:51:a8:35:e8:
b7:76:43:f0:94:50:c5:d3:0d:1c:15:2f:ee:93:25:ce:38:d3:
43:1d:6a:63:26:9e:bd:44:43:fa:b3:77:f6:9d:d5:a0:5d:f1:
08:cb:83:ee:8b:70:f4:e1:c0:42:7b:6a:ad:a0:c8:17:97:01:
a7:91:dc:f8:e1:fc:4a:86:02:aa:9e:36:74:30:43:ff:11:28:
b6:d3:6e:a2:b1:fe:1e:08:17:1c:6a:fe:93:6d:49:7e:96:a6:
da:2a:44:ea:c3:90:53:a3:4e:8c:11:10:a9:30:0c:7a:40:ee:
a5:af:c8:4b:b8:92:d4:4e:06:ca:e9:88:7c:13:1f:c0:bc:22:
38:45:ef:73:6d:ca:6c:dc:3b:fd:0e:07:d0:bf:94:b8:cd:ba:
b5:0f:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:55 2025 by rpki-client