Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pw-N6h4HbBYEagnM12HpRegrFS4.roa
File: Pw-N6h4HbBYEagnM12HpRegrFS4.roa (raw, json)
Hash identifier: 6rCRNOwO8OjSRUOgcGEhOrTNhZVNaKCS9Zo0mjDSuG4=
Subject key identifier: 3F:0F:8D:EA:1E:07:6C:16:04:6A:09:CC:D7:61:E9:45:E8:2B:15:2E
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 1AFC1E24
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pw-N6h4HbBYEagnM12HpRegrFS4.roa
Signing time: Sat 01 Jan 2022 13:05:41 +0000
ROA not before: Sat 01 Jan 2022 13:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20776
IP address blocks: 212.198.242.0/23 maxlen: 24
212.198.254.0/23 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
89.3.240.0/21 maxlen: 21
89.3.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452730404 (0x1afc1e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 13:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f0f8dea1e076c16046a09ccd761e945e82b152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:d2:14:50:a0:3a:7e:34:a8:6e:f6:fb:e3:
cd:b0:ac:ca:7f:08:01:b0:f2:1f:cc:ec:1d:9c:31:
9e:d0:ae:8b:16:a3:eb:fc:85:73:9a:f4:28:d8:d6:
d3:03:2c:d0:58:0e:e3:6e:93:b8:6a:9a:92:a5:42:
43:43:77:fc:3c:8d:dc:10:34:8b:42:f5:67:52:8b:
c9:32:c2:66:69:ba:00:47:f7:dc:c0:55:22:3c:90:
f3:02:ea:2f:32:3e:82:05:1e:cc:0f:32:08:e6:1b:
cd:8f:60:00:13:d1:23:be:67:dc:ac:28:fd:41:36:
45:32:ad:37:40:a1:b9:cd:54:57:41:a3:08:1f:1f:
0c:a2:a4:44:46:3a:8b:b7:84:0a:89:3c:0f:07:8b:
9f:6b:80:91:fc:1d:0a:fb:3d:7d:1f:c8:65:53:24:
07:2a:84:c8:dd:68:78:c6:ee:ba:7e:68:5a:6a:4c:
20:06:31:f8:2a:db:98:62:a4:83:ee:59:1e:a0:f6:
bf:e5:de:22:39:e4:58:ea:52:d8:1d:77:43:18:d3:
78:bd:00:b9:74:c1:f3:02:68:34:b2:97:43:43:0d:
fa:ea:27:ad:69:6b:b0:62:99:96:0f:5a:94:88:41:
42:54:95:9f:e7:b7:5a:1a:fd:69:bf:77:cb:72:d9:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:8D:EA:1E:07:6C:16:04:6A:09:CC:D7:61:E9:45:E8:2B:15:2E
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Pw-N6h4HbBYEagnM12HpRegrFS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.3.240.0/20
89.157.88.0-89.157.127.255
212.198.242.0/23
212.198.254.0/23
Signature Algorithm: sha256WithRSAEncryption
31:1b:4e:bb:87:62:ac:ba:7d:c9:58:52:1c:df:12:88:1b:6e:
dc:6f:df:39:a9:71:a6:b1:67:98:c5:fe:04:d8:5f:7c:78:c6:
d0:33:55:5b:21:89:f8:10:f2:92:3c:15:82:60:12:26:1a:cc:
c4:3d:29:32:6b:a5:b8:b7:c5:1e:fc:61:2c:b3:a9:96:3b:30:
d1:be:b3:e0:6d:08:13:57:6d:06:80:a7:fc:4a:f9:c7:b9:63:
1c:c7:95:ca:8d:04:67:f6:f9:3b:14:cf:37:ab:8f:66:56:18:
5b:1d:d3:bf:83:c9:39:e6:20:64:95:1f:c9:8c:7f:94:77:80:
fb:b2:2a:f7:d7:61:4d:02:6b:f3:de:bc:a6:43:13:9b:b8:13:
8a:c8:4b:76:f2:00:22:03:53:cc:53:d4:31:9d:23:50:4d:2c:
c9:bd:82:4b:28:12:1b:11:8f:b4:6a:26:55:c7:48:94:55:11:
56:31:f5:20:3b:51:9f:87:c4:c8:c8:e4:74:9f:8a:48:81:c6:
86:9a:69:02:48:d9:cf:f0:f4:97:5a:35:d5:d5:32:dc:d5:1d:
be:96:5e:11:a2:9c:0e:b0:d3:e2:b1:9f:b1:eb:69:9b:61:c1:
91:cc:c4:0a:cc:da:6d:16:47:bd:40:fd:ee:2b:47:5d:16:f2:
84:5b:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org