Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/PumPR00XNiiYy8ZLQvciXqX7Bog.roa
File: PumPR00XNiiYy8ZLQvciXqX7Bog.roa (raw, json)
Hash identifier: gE9GRvt/wr2ndlslHUboiEiPmjAAmr8WYmuIZWRB5jw=
Subject key identifier: 3E:E9:8F:47:4D:17:36:28:98:CB:C6:4B:42:F7:22:5E:A5:FB:06:88
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 01828708DEE1EC9E3D51A7DD7C5B5BF35E98
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/PumPR00XNiiYy8ZLQvciXqX7Bog.roa
Signing time: Wed 10 Aug 2022 09:14:41 +0000
ROA not before: Wed 10 Aug 2022 09:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50181
IP address blocks: 88.132.224.0/20 maxlen: 20
185.45.196.0/22 maxlen: 22
88.132.240.0/22 maxlen: 22
109.110.128.0/19 maxlen: 19
2a01:7d60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:08:de:e1:ec:9e:3d:51:a7:dd:7c:5b:5b:f3:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Aug 10 09:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ee98f474d17362898cbc64b42f7225ea5fb0688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:60:1a:0d:07:31:e4:93:29:b9:b0:fb:8b:
c1:9e:ec:f2:2a:be:ec:e4:8a:4b:55:1e:67:eb:eb:
7e:aa:fd:0f:d7:c6:29:6c:40:0c:8a:e0:4d:9c:75:
99:6b:30:6f:57:4d:69:75:6a:e4:5f:7b:06:3e:c7:
8d:39:f6:05:8d:b0:8a:07:dc:54:46:e1:47:a5:d6:
70:1d:80:e3:fc:89:3f:22:2d:3c:be:99:c5:44:93:
48:43:67:b1:e2:ef:e8:c6:dd:a3:3c:0d:a2:9e:a2:
da:43:5e:55:ac:75:d4:99:93:b5:4a:0e:f8:6c:0f:
f0:bc:e1:7f:2c:86:35:a4:b9:6c:ae:d1:c1:4a:57:
b2:95:d3:3e:4a:8f:0f:81:58:bd:f0:5b:d7:98:00:
74:7c:bf:16:24:0f:32:7c:f1:b2:2b:c4:81:50:8f:
c5:c4:7f:0a:7b:16:ce:9c:55:d8:9b:89:ae:7d:cb:
74:12:88:5a:02:3f:3b:d0:61:68:94:63:3e:4c:00:
d0:a1:46:35:59:46:b0:12:c2:50:b4:8e:f7:9a:04:
d9:5c:15:50:02:0a:fc:d4:ca:26:ef:e7:3c:28:ee:
dd:8f:aa:57:cc:a9:c0:4a:5b:56:af:f9:f4:f6:0b:
87:93:fc:ff:46:50:b8:28:10:7b:41:b8:f0:ae:af:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:8F:47:4D:17:36:28:98:CB:C6:4B:42:F7:22:5E:A5:FB:06:88
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/PumPR00XNiiYy8ZLQvciXqX7Bog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.132.224.0-88.132.243.255
109.110.128.0/19
185.45.196.0/22
IPv6:
2a01:7d60::/32
Signature Algorithm: sha256WithRSAEncryption
d1:ba:2d:7f:60:38:d1:44:fb:9d:23:88:3f:e6:7e:78:bd:a5:
c3:d4:4b:d4:6c:1d:fe:16:2a:66:b1:0a:1e:83:f1:3b:67:e7:
a9:e1:f0:c9:e2:6f:9b:f6:b8:5e:15:25:42:e5:a6:7a:73:7b:
e6:d3:ed:53:6a:08:36:14:67:4a:c6:cc:39:7a:a4:52:f2:43:
4d:27:b3:8a:d2:f6:36:01:6a:23:c6:26:8a:43:ee:05:92:68:
2c:24:b7:cc:5b:7c:01:41:b2:5c:fc:7e:3a:31:55:b4:d6:b3:
95:c1:09:1a:9d:04:22:1f:43:c9:17:ec:4e:c0:84:ff:8c:bf:
0c:2a:89:57:e6:7b:42:67:d0:bc:d4:9d:64:4e:04:e9:80:af:
c4:2f:bd:80:c6:f2:b5:09:c9:8d:22:35:b3:c6:15:82:61:45:
19:74:45:80:88:97:d6:e9:12:82:16:e0:77:84:90:f2:04:a1:
c1:7c:c4:5c:92:e0:af:bd:42:eb:04:19:1a:75:02:5c:49:dd:
e3:d6:df:2d:a9:40:12:a5:96:9d:62:72:df:6d:2b:4f:00:d8:
5e:87:6b:38:94:a8:ef:fc:25:cd:4e:ba:e2:0c:66:67:9c:e5:
63:0f:e5:33:37:26:47:db:24:65:d0:9b:4f:ce:c5:d8:20:2d:
45:bb:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:50 2024 by rpki-client on console-fra.rpki-client.org