Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/PHiAlB5rGQ2NScP3341vrO7EPi4.roa
File: PHiAlB5rGQ2NScP3341vrO7EPi4.roa (raw, json)
Hash identifier: bnRqWtyfYaFlKo9QKR+LQ9Ec/caoxV5jkzxdiA5U9cM=
Subject key identifier: 3C:78:80:94:1E:6B:19:0D:8D:49:C3:F7:DF:8D:6F:AC:EE:C4:3E:2E
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 10E5AF35
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/PHiAlB5rGQ2NScP3341vrO7EPi4.roa
Signing time: Sat 11 Jun 2022 07:24:02 +0000
ROA not before: Sat 11 Jun 2022 07:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206559
IP address blocks: 194.105.132.0/23 maxlen: 23
185.183.36.0/22 maxlen: 22
2a0d:4980::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283488053 (0x10e5af35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Jun 11 07:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c7880941e6b190d8d49c3f7df8d6faceec43e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6b:92:ab:d9:9e:f1:c6:70:83:df:91:51:c4:
6b:60:2f:47:8d:7d:9a:25:a0:ad:34:61:f2:d1:2b:
6e:df:4f:14:8d:fe:af:be:01:60:8f:8c:ca:58:17:
0a:1c:d3:a7:71:3a:79:81:1f:5a:91:07:69:1c:9f:
50:1b:b3:1d:2e:d7:96:21:31:ca:96:cf:87:bc:27:
69:78:b8:8d:39:a6:96:75:a8:34:1f:11:dc:8a:2a:
f7:07:3a:fc:e8:f6:3a:d4:2e:1b:1f:f1:b8:2f:77:
a4:a9:59:74:10:98:2d:7b:72:c5:3f:ab:05:f7:c0:
e3:8c:5f:34:f6:b5:82:91:2d:bf:6e:7e:07:30:31:
80:ec:58:39:72:cb:07:63:f8:57:bb:70:79:ca:8d:
08:57:5a:38:4f:71:db:5c:69:de:3f:30:e7:d3:e4:
2a:c9:7f:62:87:dd:61:c2:07:c2:ff:04:47:b7:15:
d5:16:52:16:74:7b:56:79:c0:78:6c:75:25:2f:e9:
84:4b:14:2b:a6:9d:ff:0d:76:14:a4:08:6e:2f:96:
6f:3f:45:f8:37:4a:60:38:b3:a0:2c:66:95:1c:6e:
87:f3:54:a6:23:97:84:73:08:1a:e6:29:d9:e2:97:
06:9b:67:ad:2a:ae:33:3b:4e:3a:8c:89:58:90:16:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:80:94:1E:6B:19:0D:8D:49:C3:F7:DF:8D:6F:AC:EE:C4:3E:2E
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/PHiAlB5rGQ2NScP3341vrO7EPi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.36.0/22
194.105.132.0/23
IPv6:
2a0d:4980::/32
Signature Algorithm: sha256WithRSAEncryption
66:f2:db:ce:4c:93:2c:dd:f2:7e:51:24:8b:83:3c:0b:a1:be:
b8:cf:7b:91:91:e6:f6:de:31:c9:a6:d3:4b:0e:51:c8:b1:6b:
1d:13:67:8b:8c:18:83:d6:75:74:6b:80:45:a7:99:b6:43:f3:
39:28:78:e9:32:7d:74:38:40:a1:d7:fa:23:41:6d:0b:0f:d7:
13:ae:d6:15:31:f4:6d:a8:cf:43:7f:ed:40:3e:2c:ee:af:b9:
d3:be:33:91:1c:a4:0d:68:34:1d:c5:5f:55:9c:04:33:a9:3e:
fc:88:f9:39:37:eb:48:99:8d:06:87:dc:23:7b:75:34:2a:0b:
dc:50:25:cf:96:8a:c9:59:3e:2d:a1:35:39:43:ed:d6:67:b6:
40:bb:ba:89:80:09:14:14:3e:8b:0a:e9:85:91:a6:db:12:d7:
2d:59:97:df:7c:6c:cb:fd:4a:79:57:fa:b1:d3:3f:c3:40:28:
b0:48:c8:8d:41:7e:96:88:86:1b:fc:72:af:ac:45:a3:fd:1f:
a4:7a:fe:3f:22:c7:8a:66:e0:1d:31:51:f8:f5:12:06:87:e8:
94:48:38:24:cf:2e:fc:68:c0:9e:a1:ae:1a:40:2d:59:ce:4a:
7d:56:36:9d:85:ee:38:1c:44:5d:e2:5a:db:fe:eb:9a:73:be:
d5:5c:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:25 2024 by rpki-client on console-ams.rpki-client.org