Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/PfIuWMk9nH9qk2EGPdYOVtfoq20.roa
File: PfIuWMk9nH9qk2EGPdYOVtfoq20.roa (raw, json)
Hash identifier: l4TfrAHZXXuJsbgcvOem8ThsoVSn7Y5CJApaKQUv93s=
Subject key identifier: 3D:F2:2E:58:C9:3D:9C:7F:6A:93:61:06:3D:D6:0E:56:D7:E8:AB:6D
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 3D52B6FB
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/PfIuWMk9nH9qk2EGPdYOVtfoq20.roa
Signing time: Sat 01 Jan 2022 06:55:13 +0000
ROA not before: Sat 01 Jan 2022 06:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34088
IP address blocks: 92.204.152.0/21 maxlen: 21
151.106.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028830971 (0x3d52b6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 06:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3df22e58c93d9c7f6a9361063dd60e56d7e8ab6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:8d:8f:19:9d:7a:79:7d:d8:20:e9:bb:e3:
88:08:42:e4:c6:d4:cb:71:ca:45:22:f6:21:cb:7c:
03:36:73:23:9d:21:b7:dc:a4:ee:bb:8e:f6:da:32:
81:eb:d0:ba:92:73:ff:22:c2:e1:4b:d4:bf:d9:1d:
3c:02:c5:77:10:5b:a7:d6:69:8b:92:f0:8f:68:71:
d2:8f:26:10:73:1b:f9:6a:ba:df:ff:91:1a:e3:11:
9c:d8:4a:42:d2:6c:32:13:e5:b7:ac:14:7d:6a:84:
0a:5c:61:3a:7d:a8:c2:db:b4:a6:97:df:9c:08:2a:
34:f1:72:95:1f:5a:9a:de:10:16:57:b9:e1:a7:48:
9e:31:59:bd:a2:0a:1b:96:0f:4a:8a:ae:f7:55:aa:
92:ef:ef:e8:f2:98:11:2b:9a:43:58:51:f4:09:a4:
22:12:50:40:81:54:92:00:0e:ac:7a:ed:58:97:b3:
3f:80:5d:23:d9:f7:cb:e9:15:95:79:e1:04:5d:d0:
3c:98:c3:7d:af:6b:44:52:2d:15:1c:e9:ba:b1:7d:
87:df:51:12:5a:28:e1:cd:b7:1b:21:1b:48:87:10:
c5:9d:e2:7e:48:8b:e8:02:84:4c:ba:66:66:68:5c:
e2:38:81:e4:37:db:93:38:a0:3c:49:7c:bc:62:8a:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:2E:58:C9:3D:9C:7F:6A:93:61:06:3D:D6:0E:56:D7:E8:AB:6D
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/PfIuWMk9nH9qk2EGPdYOVtfoq20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.204.152.0/21
151.106.32.0/20
Signature Algorithm: sha256WithRSAEncryption
34:ea:04:61:21:5d:86:cc:59:e6:c8:73:ef:5b:ba:5d:86:b5:
b6:19:e8:20:50:b7:51:4d:5d:05:95:a3:e3:a1:9d:2a:60:a5:
68:ff:30:74:ae:3a:10:20:2f:21:c0:8f:08:b4:95:e6:6e:e2:
b5:e6:48:64:73:31:87:36:73:d2:6c:6e:28:9e:e9:ee:81:3c:
bc:e3:69:f5:91:49:3b:8d:4e:9c:0f:90:d3:04:39:bf:f3:b1:
79:d4:a6:d1:92:a8:b6:5c:71:49:eb:81:79:3b:cf:4a:84:87:
cc:d1:cd:5e:6b:8e:94:e3:4e:fb:dd:b9:7a:12:39:5e:04:8e:
a8:96:d7:a8:1c:09:aa:62:c1:78:84:18:52:f6:1e:25:3f:56:
89:bd:67:b0:6c:5d:ea:11:eb:bc:e5:5e:ad:60:78:68:8e:df:
9d:e4:3e:e3:9e:7c:d4:de:c4:fc:10:e2:b0:f2:5a:d9:df:27:
c8:96:b3:17:4c:9a:73:d5:e9:d6:9e:3e:21:48:c2:65:0f:11:
fa:c1:1c:f9:40:91:b8:c0:ab:ef:04:47:6f:df:de:b5:81:68:
6d:70:29:6e:02:a3:31:5e:05:a8:a6:0d:8f:68:0b:12:2e:28:
62:43:12:94:0c:0f:2a:89:20:19:fe:e6:73:46:4b:06:a3:f0:
d4:16:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org