Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Ps38JZPzou-_Kc4TtKzP77Of6Ss.roa
File: Ps38JZPzou-_Kc4TtKzP77Of6Ss.roa (raw, json)
Hash identifier: ZawhObZib5EiNz0Pin9iFAbDCA1gGKgTjRNPY15klFs=
Subject key identifier: 3E:CD:FC:25:93:F3:A2:EF:BF:29:CE:13:B4:AC:CF:EF:B3:9F:E9:2B
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 1802D4A3
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Ps38JZPzou-_Kc4TtKzP77Of6Ss.roa
Signing time: Tue 05 Jul 2022 06:30:25 +0000
ROA not before: Tue 05 Jul 2022 06:30:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52011
IP address blocks: 103.81.142.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.87.0/24 maxlen: 24
2a03:b000:b00::/40 maxlen: 40
2a00:16d8:52::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402838691 (0x1802d4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jul 5 06:30:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ecdfc2593f3a2efbf29ce13b4accfefb39fe92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:89:1e:70:77:2a:b9:96:8e:dc:e8:ba:b8:
0c:a5:8f:da:77:34:90:d5:a7:e5:5a:02:bf:83:bf:
97:88:82:e7:e6:56:6e:04:88:c0:46:f9:a3:d0:3e:
ab:b5:6f:2d:ab:bb:1c:56:14:66:09:81:5c:a9:76:
7e:b0:45:34:6d:b6:92:88:b0:f0:92:28:35:c8:73:
a9:43:78:48:e4:47:38:58:9f:5e:e1:07:31:8c:5f:
c9:88:3b:c2:29:10:82:0f:72:11:5b:83:07:35:31:
56:a1:24:f6:e8:e7:c5:3c:61:16:8d:61:38:db:f1:
f2:bb:be:0a:39:8a:23:54:a7:24:0e:c6:38:ec:95:
b9:58:8f:b9:e2:45:96:74:ff:3c:b2:86:5d:61:3a:
70:d4:e7:ca:95:c5:a8:04:35:ce:ca:79:97:87:34:
b2:11:d6:53:4c:a0:40:7a:15:86:03:5f:ff:b7:b3:
2b:89:97:1f:94:62:2c:51:ad:71:7e:88:44:79:88:
e1:ba:fb:77:ba:27:fc:2f:d1:9b:a9:40:5d:b7:75:
3f:2b:12:84:ab:cd:79:1b:81:94:e4:cf:ec:b4:4b:
88:de:2a:c7:69:9e:82:d5:28:57:9b:4d:9c:ff:eb:
3d:ec:95:da:82:3c:d4:63:04:c2:3d:9f:50:2a:a0:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:FC:25:93:F3:A2:EF:BF:29:CE:13:B4:AC:CF:EF:B3:9F:E9:2B
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Ps38JZPzou-_Kc4TtKzP77Of6Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.84.0/23
89.46.87.0/24
103.81.142.0/24
IPv6:
2a00:16d8:52::/48
2a03:b000:b00::/40
Signature Algorithm: sha256WithRSAEncryption
74:40:8a:e9:ba:d3:fe:b8:31:56:d7:20:11:ae:2f:fd:21:a3:
06:1f:b2:6e:d3:7a:5a:f8:ad:f5:49:86:f4:af:2b:69:ba:3d:
fb:5c:6d:86:97:76:b2:b6:5f:3c:78:59:9a:ca:7f:68:23:ec:
c2:dd:f6:08:08:47:5e:90:8e:aa:fb:d9:71:53:2f:89:83:45:
7d:ea:2f:fa:c4:cb:71:c2:a0:2b:59:14:9a:3c:6d:3d:be:15:
83:0c:21:49:e9:64:6b:dc:4f:62:b0:b7:20:b5:cc:5b:95:52:
a6:78:1e:71:92:c5:f0:25:4f:40:66:9b:37:8b:db:8d:90:fb:
b9:bf:93:ca:00:91:02:82:7b:42:6a:eb:b7:d2:46:4c:42:2d:
1b:ab:ea:5f:55:9f:42:fb:c2:2b:7b:93:4b:e7:43:9b:7f:3e:
be:c6:04:e2:de:30:21:01:b8:cd:e4:80:62:7e:4e:d0:38:50:
a0:41:cc:9e:ea:c0:9a:2c:32:86:9d:e5:cd:a6:b6:95:bb:d1:
52:a0:fd:1a:9f:18:bf:5f:68:9b:df:51:5d:ad:5b:65:b8:8d:
5a:b0:22:71:88:71:73:c9:2d:d0:27:d8:95:06:53:2f:67:1d:
80:3f:dc:ba:b3:10:19:7e:b4:78:79:d1:63:45:4c:de:55:9b:
3b:64:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org