Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/Pbf3ya_0_G0H6cG7aS4lQrvawgc.roa
File: Pbf3ya_0_G0H6cG7aS4lQrvawgc.roa (raw, json)
Hash identifier: S5sD1MBI/t6lns3IPPhB+aD+Gj4a8apDhnW2u8zkuB0=
Subject key identifier: 3D:B7:F7:C9:AF:F4:FC:6D:07:E9:C1:BB:69:2E:25:42:BB:DA:C2:07
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 105BBB
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/Pbf3ya_0_G0H6cG7aS4lQrvawgc.roa
Signing time: Fri 08 Apr 2022 07:53:44 +0000
ROA not before: Fri 08 Apr 2022 07:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60764
IP address blocks: 185.174.192.0/24 maxlen: 24
185.174.193.0/24 maxlen: 24
185.174.194.0/24 maxlen: 24
185.174.195.0/24 maxlen: 24
86.62.12.0/24 maxlen: 24
86.62.13.0/24 maxlen: 24
86.62.14.0/24 maxlen: 24
86.62.15.0/24 maxlen: 24
2a0b:b500:f800::/48 maxlen: 48
2a0b:b500::/31 maxlen: 31
2a0b:b500:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072059 (0x105bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Apr 8 07:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3db7f7c9aff4fc6d07e9c1bb692e2542bbdac207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:61:a3:1b:36:3a:ad:db:c5:f6:19:0c:6e:
0f:1c:61:c2:a7:27:11:60:e8:d6:8c:6f:67:63:63:
16:13:7e:e9:b5:88:61:66:ac:e9:74:a0:55:d2:7a:
43:8f:23:09:61:0c:5a:25:d5:c5:d8:d3:5b:f8:d7:
3c:44:b0:2b:6b:a9:e4:27:6b:75:95:04:05:b5:f4:
56:10:e4:32:3b:00:c7:28:dd:db:37:d3:ee:8d:ea:
0c:af:a8:ca:be:83:94:98:ad:bc:62:e1:a2:f4:05:
43:d0:49:5f:cc:13:7d:bf:5f:7e:79:f1:dd:ae:45:
0d:08:a9:fa:b1:7d:cb:94:6f:02:71:b5:ed:bf:02:
05:a9:83:e9:db:42:c5:61:a7:aa:dc:7e:52:72:ec:
8e:a5:73:11:fe:99:bc:28:78:5c:5c:c3:b4:6c:47:
ef:30:33:57:28:e7:41:3f:60:c3:ab:72:80:69:24:
ff:2d:3c:3d:b2:39:20:8c:df:3a:aa:20:ab:92:e7:
16:d9:2c:32:d5:8d:85:87:ef:2b:53:45:3e:24:74:
50:b9:65:47:0c:12:36:fd:08:db:08:32:78:42:a2:
94:23:8e:96:53:ab:0d:50:c2:45:5a:99:93:c0:5e:
d9:d6:64:ea:fe:e7:6c:0d:b6:0c:72:62:53:89:09:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:F7:C9:AF:F4:FC:6D:07:E9:C1:BB:69:2E:25:42:BB:DA:C2:07
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/Pbf3ya_0_G0H6cG7aS4lQrvawgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.12.0/22
185.174.192.0/22
IPv6:
2a0b:b500::/31
Signature Algorithm: sha256WithRSAEncryption
53:34:54:05:0e:3d:34:5e:27:e2:43:20:e2:0a:3e:94:13:d9:
f2:39:45:97:c0:cd:4c:d6:3c:88:5f:35:d7:86:cc:05:cc:67:
d0:43:72:08:50:a3:ce:be:73:e0:c8:34:8a:b3:d4:8c:df:f1:
c7:58:01:f2:a5:a0:2d:64:ac:99:21:00:12:ff:fe:7f:2b:95:
90:79:77:5b:f2:5f:9d:4b:1a:d9:8a:fd:79:91:f3:7f:80:6e:
8d:83:d9:dd:5b:2d:fc:84:95:9e:39:ae:52:fd:3e:e4:91:13:
67:5a:b4:c0:7e:4e:80:38:ea:de:69:87:6c:07:f0:e0:95:17:
ed:ed:8a:f4:cc:ce:ea:8e:fb:ab:25:d6:1a:29:5a:9e:07:73:
0e:0e:a6:ff:f6:c3:57:c8:2d:f0:aa:c1:bf:b5:44:e5:9c:f2:
74:bf:c9:78:05:67:cb:3f:f8:61:92:a0:bc:00:3f:89:01:4a:
2d:4e:2e:3a:13:76:90:dc:7e:b7:80:ff:b7:f1:9d:47:82:14:
b0:ab:42:be:aa:27:9d:1c:4f:80:b3:c3:a0:6b:34:86:0b:ba:
c8:4a:2b:a1:74:fe:1c:f2:81:70:9d:73:db:a4:77:db:a1:0f:
90:5b:52:70:c3:4d:72:0a:c0:d6:07:0e:09:5b:c1:f5:50:e4:
6f:ef:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:40 2024 by rpki-client on console-ams.rpki-client.org