Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/PxmO-GQpPranlPXLYZGhum7XrD0.roa
File: PxmO-GQpPranlPXLYZGhum7XrD0.roa (raw, json)
Hash identifier: Z/SUW9XiQHOsq4hR0j5gXsy/AA4Kyrf5XZ93dZBg0KY=
Subject key identifier: 3F:19:8E:F8:64:29:3E:B6:A7:94:F5:CB:61:91:A1:BA:6E:D7:AC:3D
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 0C4C61B6
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/PxmO-GQpPranlPXLYZGhum7XrD0.roa
Signing time: Sat 01 Jan 2022 03:58:53 +0000
ROA not before: Sat 01 Jan 2022 03:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198682
IP address blocks: 185.87.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206332342 (0xc4c61b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jan 1 03:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f198ef864293eb6a794f5cb6191a1ba6ed7ac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:f2:dd:ea:5e:3e:46:d1:52:a7:73:6b:15:
4b:4a:93:99:e5:a3:68:93:42:51:67:d8:55:74:2e:
a5:f9:8a:c9:19:da:ac:02:5d:31:cf:ba:45:7d:40:
2a:44:03:74:a8:d7:16:fb:5d:79:eb:f5:4e:8f:dd:
d9:d0:4b:a1:63:e1:fa:fb:b6:b0:cf:f6:8d:a0:7f:
e7:3c:17:57:d9:ce:db:ed:15:e8:47:c9:53:3d:d4:
d5:e1:c9:5c:37:b9:5a:37:bb:da:47:16:b0:af:7d:
9d:55:98:73:01:36:15:00:48:7a:ae:31:3e:4e:5c:
47:80:2b:2c:45:dd:5f:83:22:25:72:b0:86:e2:a3:
84:3a:c9:60:8d:bf:c6:de:0e:5b:41:56:b6:be:69:
6c:41:92:77:d3:24:46:4d:39:9a:32:df:af:10:a2:
dd:4d:4c:37:40:43:33:d3:1e:a6:8f:66:8c:12:3b:
1b:81:cb:9a:ee:03:57:86:14:a4:2c:20:68:97:22:
01:4b:06:44:4a:01:99:37:78:d9:5c:98:df:6e:63:
aa:88:86:59:0d:c1:5f:f7:80:91:4c:68:7c:36:22:
f6:a6:af:43:f4:5c:eb:49:39:b7:a9:1b:30:ff:06:
7a:52:e8:7f:9c:d1:e4:a5:dc:07:e7:76:b4:f2:7b:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:8E:F8:64:29:3E:B6:A7:94:F5:CB:61:91:A1:BA:6E:D7:AC:3D
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/PxmO-GQpPranlPXLYZGhum7XrD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.64.0/22
Signature Algorithm: sha256WithRSAEncryption
65:82:e6:92:50:a7:de:20:47:e3:c5:98:58:5d:73:1f:f4:9f:
b2:b4:45:c1:25:d8:35:a5:a3:ad:6f:52:6a:a8:95:b1:16:08:
20:58:92:a9:c9:2b:da:17:5f:f0:49:39:fb:32:a0:dd:d5:60:
2c:df:6c:94:f8:8a:c2:24:de:c8:27:8a:28:ac:b9:de:0a:a6:
36:92:3f:d4:fa:4e:06:3f:fb:54:0c:43:c2:2f:90:e9:ef:af:
28:10:6c:3f:8e:be:95:e2:d9:c6:9f:e0:2f:4b:ab:f5:6d:cb:
49:04:0e:d0:70:ee:e1:0f:60:a5:7c:98:27:12:da:18:c0:3c:
dd:25:a1:0a:72:5e:bd:52:62:69:8c:90:91:5e:6d:25:57:a5:
75:53:d5:fa:e6:3c:78:fb:8d:c2:24:f8:08:d0:9b:12:4e:2f:
27:72:39:78:84:27:12:92:7b:75:33:0c:50:80:20:63:60:99:
36:30:ff:8f:02:45:63:3c:b2:b0:16:27:60:f9:76:35:38:e6:
42:e7:0e:20:ef:e7:08:27:24:70:15:a9:0d:8c:5e:f8:3a:a0:
08:dc:ca:cd:e7:48:07:d0:91:9b:af:74:82:71:27:ed:c0:5e:
00:dd:3a:ce:72:c6:bf:dd:87:2f:11:7a:89:02:a5:de:9b:38:
ac:7a:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:10 2024 by rpki-client on console-ams.rpki-client.org