Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/PfEn0M3zqd0VvkfjJTGzyOi1PeU.roa
File: PfEn0M3zqd0VvkfjJTGzyOi1PeU.roa (raw, json)
Hash identifier: j0OJmj3cWW/yivsBlKpeFOCMi2njUJHr2BGAv3scarw=
Subject key identifier: 3D:F1:27:D0:CD:F3:A9:DD:15:BE:47:E3:25:31:B3:C8:E8:B5:3D:E5
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200E95EF122B49A1927F79D7BCC483EC3
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/PfEn0M3zqd0VvkfjJTGzyOi1PeU.roa
Signing time: Fri 15 Jul 2022 08:11:10 +0000
ROA not before: Fri 15 Jul 2022 08:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47355
IP address blocks: 93.191.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:e9:5e:f1:22:b4:9a:19:27:f7:9d:7b:cc:48:3e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3df127d0cdf3a9dd15be47e32531b3c8e8b53de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:d6:2f:3f:aa:13:13:3c:55:1c:30:c0:c6:
a6:b6:e9:a5:40:12:e9:21:d8:95:c8:68:73:85:49:
ad:80:54:9f:a4:8e:86:e1:d0:39:06:6f:aa:ea:22:
bd:8b:9c:76:c2:4d:50:2d:d4:5c:4c:09:f1:0f:86:
b6:b8:1a:94:60:a1:7d:97:7a:0e:46:af:69:8a:75:
c5:2d:dc:10:76:97:22:75:64:2a:e0:bf:26:34:bc:
8b:af:03:18:e8:e8:33:ba:e0:8f:3a:41:f5:df:52:
f6:d4:8c:90:e9:c6:05:5d:33:98:16:ab:88:4a:7f:
3f:55:26:f1:7d:34:fa:f6:3e:a7:02:38:40:a1:c0:
f8:bd:23:1d:ae:72:03:25:ff:d6:b1:9f:82:c2:fb:
31:79:ba:31:a7:fe:0a:b6:ed:b7:41:f5:29:d2:1f:
8c:8a:5c:75:38:96:96:26:cd:64:81:46:0a:52:53:
10:59:02:a4:cc:96:c5:c0:ec:e3:07:2a:e0:d2:fd:
97:96:39:50:17:4e:4c:3b:a1:b5:40:b6:e1:d2:9c:
ea:06:71:94:ef:41:93:60:0a:b7:b6:8d:5d:91:a3:
03:48:b5:e9:90:ca:3d:ed:d7:66:d5:ed:e2:d6:43:
21:97:d1:6a:89:21:56:cf:b3:e7:66:9a:11:8e:23:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F1:27:D0:CD:F3:A9:DD:15:BE:47:E3:25:31:B3:C8:E8:B5:3D:E5
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/PfEn0M3zqd0VvkfjJTGzyOi1PeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:65:1d:f0:31:e0:ea:2f:5d:8c:aa:a2:46:57:f9:7c:e6:0e:
d4:b9:85:06:fb:8b:43:e5:dc:1c:c6:74:ed:df:02:0c:ca:eb:
4d:76:db:41:6b:7d:39:fd:e4:ce:40:f8:d3:78:78:0a:70:5d:
da:77:c0:6c:86:91:1d:68:76:56:fe:3b:82:5e:d1:68:08:7c:
59:6a:dd:48:65:8d:c2:1c:7e:52:45:84:32:30:4c:d1:71:95:
3a:4d:52:2d:63:79:54:33:40:46:36:cb:a8:53:b6:ec:2b:ec:
17:5b:03:96:03:b8:b7:e1:9f:26:b9:2c:5d:5e:72:64:d6:11:
7c:e9:6e:60:f8:92:26:74:3e:b3:e3:90:05:83:3a:75:a8:5a:
dc:40:fa:0f:c5:57:23:45:48:81:ee:ba:2e:3c:82:87:90:90:
85:bf:1f:f5:37:62:91:f4:39:24:99:95:e2:f2:4b:7a:89:35:
ed:a2:fb:28:9a:ec:cd:f9:5a:78:5a:a5:b0:e8:ef:e7:55:a3:
6f:70:69:da:09:d9:50:b0:3a:15:19:59:86:a3:01:59:12:69:
c9:d2:28:f8:ed:d9:2e:9f:bc:98:54:ae:73:23:70:46:b8:6b:
de:a7:cf:62:28:3f:9f:83:a3:b4:19:5a:28:c2:6a:e2:b1:1f:
5e:d0:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org