Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/PtljBJedxl6joTfqmW7SMXVjOeI.roa
File: PtljBJedxl6joTfqmW7SMXVjOeI.roa (raw, json)
Hash identifier: 2wKoVGNUQDqF86iXXUJykHs6P5g06EJurKNIZn7BpTs=
Subject key identifier: 3E:D9:63:04:97:9D:C6:5E:A3:A1:37:EA:99:6E:D2:31:75:63:39:E2
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 0C3911F8
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/PtljBJedxl6joTfqmW7SMXVjOeI.roa
Signing time: Sat 01 Jan 2022 03:55:39 +0000
ROA not before: Sat 01 Jan 2022 03:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203851
IP address blocks: 185.87.212.0/24 maxlen: 24
185.87.213.0/24 maxlen: 24
185.87.215.0/24 maxlen: 24
185.87.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205066744 (0xc3911f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jan 1 03:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ed96304979dc65ea3a137ea996ed231756339e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:96:24:e5:bb:6e:45:62:fb:a8:02:01:a4:
f6:d9:3b:1b:99:15:00:9a:45:40:9a:17:d5:b9:75:
57:48:cb:d7:bc:b3:45:84:76:9f:bd:ef:3d:1f:aa:
54:60:16:35:34:d4:45:3a:b4:ec:a8:78:77:89:40:
c6:74:68:5e:0f:90:5d:f8:60:01:29:e1:cd:a5:c7:
d8:3d:2d:35:bc:08:e6:6c:6c:98:34:b4:05:05:f3:
6d:a1:bf:2f:6c:6d:27:c8:cc:55:87:2e:ea:5a:b5:
3d:2d:69:6d:63:01:9f:6b:84:bb:ce:47:a0:bc:08:
68:d4:64:35:7d:ac:d2:e5:9b:78:fb:e1:0a:2f:88:
d4:7d:32:dd:b5:34:aa:3a:51:fb:79:3f:ee:8c:eb:
56:62:42:58:12:8c:6f:20:2f:84:f2:1d:09:82:6d:
6f:98:e1:e9:fa:f8:71:89:49:d6:2f:42:2c:88:ea:
9b:d8:62:36:2a:52:6e:e8:51:aa:71:57:67:00:a6:
08:4d:53:2d:10:f1:7b:f4:ad:0b:3f:56:23:25:87:
ba:26:a1:02:5f:59:2d:74:bd:81:94:34:68:cf:a6:
97:d6:32:05:dc:22:15:e4:bd:25:1d:82:13:95:fe:
ed:2a:bf:bd:2d:d6:71:2d:1e:ff:34:28:71:63:8a:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:63:04:97:9D:C6:5E:A3:A1:37:EA:99:6E:D2:31:75:63:39:E2
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/PtljBJedxl6joTfqmW7SMXVjOeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:09:92:e8:f5:f7:44:b0:7f:8f:d1:fb:39:bd:b6:20:84:5c:
b9:aa:d5:18:62:17:bd:1d:be:76:6c:c4:a3:eb:ef:e5:30:e1:
80:e4:45:32:ef:a3:40:dc:61:21:94:bf:63:0a:fb:7e:6c:50:
7e:c5:6d:11:17:74:66:ed:0b:c5:98:91:20:21:96:ac:25:2c:
5f:4a:32:90:91:31:79:7f:a0:34:c1:96:53:12:65:1d:c2:7a:
33:13:5a:1d:d4:86:ef:24:93:38:a0:f6:92:c6:ce:f6:e2:ed:
8e:9f:12:6f:3e:62:bc:24:ec:a6:0e:28:59:e7:ba:ab:ad:31:
9d:7d:80:88:f9:79:a5:e3:f3:b1:c6:fd:b4:98:a1:55:63:9d:
3e:53:0b:e0:20:ee:ec:49:3d:3a:70:92:b8:0c:e4:04:11:53:
53:49:9a:10:da:81:99:fc:78:cf:c5:ec:d0:15:01:75:f4:2b:
2c:d1:2d:c6:16:8c:f6:e6:d1:78:e0:55:4e:c9:09:78:ec:ee:
e7:c4:79:06:f1:2b:0d:63:fd:d2:97:5b:be:11:14:7a:cb:69:
fc:9d:c2:f0:d3:2f:10:d1:b2:04:d3:9b:4a:3a:4b:18:ad:25:
2f:05:7a:fb:65:38:90:6d:74:5a:95:b7:5f:6c:8e:f1:64:94:
4d:d4:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org