Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/PgIsngI_75waS0BYtD9MASB6iYs.roa
File: PgIsngI_75waS0BYtD9MASB6iYs.roa (raw, json)
Hash identifier: AhEkb+kuiI6ZL/M12SpgefRMsWZhDQEcZJ29lexPXnY=
Subject key identifier: 3E:02:2C:9E:02:3F:EF:9C:1A:4B:40:58:B4:3F:4C:01:20:7A:89:8B
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 15E39E85
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/PgIsngI_75waS0BYtD9MASB6iYs.roa
Signing time: Sat 01 Jan 2022 08:01:14 +0000
ROA not before: Sat 01 Jan 2022 08:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.68.164.0/22 maxlen: 24
212.68.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367238789 (0x15e39e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Jan 1 08:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e022c9e023fef9c1a4b4058b43f4c01207a898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:63:63:c9:29:ea:ca:d2:17:47:c6:bb:ae:
b4:b5:60:6f:63:16:37:f1:8f:eb:71:13:b2:e6:85:
98:b5:90:3e:74:43:5d:e0:ae:56:b2:c9:40:c2:3b:
d0:18:60:0d:4c:21:81:ce:01:cc:81:6e:f5:72:00:
c5:12:0a:b0:d0:01:c8:eb:ef:b4:b4:3d:ad:52:9f:
08:d2:da:87:f3:b9:5c:c7:9e:fc:0a:1a:2c:8c:aa:
2e:ee:e5:4f:51:02:3c:45:f7:b6:47:13:d3:2d:8d:
e4:1a:2e:6f:6f:e1:6f:e6:a7:62:88:bd:2e:e6:0a:
60:7a:c3:43:50:a8:03:ec:bc:c4:cb:7b:cf:52:6f:
a6:94:01:8a:cc:24:fa:1f:75:aa:2d:84:cf:c2:18:
44:5f:9c:ed:13:76:b4:4a:2f:0b:a4:dc:04:f8:30:
5c:6a:b3:d8:af:70:40:7a:0d:c5:80:34:f3:15:99:
e6:85:6e:3c:51:d4:13:f2:7c:a5:d8:f5:dc:59:53:
d3:32:6c:c7:be:60:b3:19:c8:4e:d5:5d:73:1d:99:
b2:19:9e:7a:6c:ad:57:6a:e0:99:37:de:d6:66:87:
1f:89:f3:2e:1b:75:68:38:af:87:b2:15:9b:46:e5:
51:5f:1a:b8:7b:13:b0:23:2e:ba:f3:ea:1c:bf:e2:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:2C:9E:02:3F:EF:9C:1A:4B:40:58:B4:3F:4C:01:20:7A:89:8B
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/PgIsngI_75waS0BYtD9MASB6iYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.164.0/22
212.68.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:2a:b7:71:41:0b:99:a4:4c:17:7c:51:06:21:f6:ab:5c:f2:
57:e2:3f:a4:e2:9d:36:09:3f:4c:0a:9d:b4:1a:65:e3:84:79:
ca:22:f1:ff:6a:4c:6e:62:cb:83:5f:6b:86:52:e6:98:1a:81:
78:d2:47:68:51:58:4b:44:c1:92:fc:fb:53:d0:35:fa:e8:a4:
d6:5f:ed:8a:5b:d0:09:95:8d:cd:d8:a1:d8:5b:d0:e4:5a:4f:
42:11:03:d1:30:11:c1:97:4e:67:75:12:af:cd:68:9d:33:3b:
f2:76:c0:bd:a0:92:e9:4a:e7:dd:92:a4:9b:c1:41:c6:30:53:
7c:99:3b:5a:29:a6:0b:52:38:1a:83:54:d2:a1:01:99:4e:85:
7e:7b:2b:39:94:9b:0f:88:45:17:be:ea:53:1f:33:f5:1a:02:
5a:82:63:3b:d4:34:f2:dc:8d:2a:01:57:05:18:ed:76:71:2c:
c8:e6:c1:d8:c0:5a:6a:4f:1a:a4:2c:cc:9a:20:8d:a5:62:a4:
95:71:10:9f:d4:ba:81:38:9f:14:5f:13:74:69:34:55:a1:60:
23:c7:f8:ac:d3:3f:d9:68:49:c0:1b:15:cf:2d:83:e3:05:e1:
85:98:de:00:2d:60:8e:39:46:db:04:cc:b2:f6:70:5f:d4:4f:
ec:68:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org