Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/Pmft9w8ILqPluQbegc71_RCdmfQ.roa
File: Pmft9w8ILqPluQbegc71_RCdmfQ.roa (raw, json)
Hash identifier: +MatprKnIPQCAsvNphmh34LmGZ/IR7yiVZ9UtrAv3Bw=
Subject key identifier: 3E:67:ED:F7:0F:08:2E:A3:E5:B9:06:DE:81:CE:F5:FD:10:9D:99:F4
Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial: 11034539
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/Pmft9w8ILqPluQbegc71_RCdmfQ.roa
Signing time: Sat 01 Jan 2022 07:03:42 +0000
ROA not before: Sat 01 Jan 2022 07:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31056
IP address blocks: 83.97.40.0/21 maxlen: 21
83.97.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285427001 (0x11034539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Validity
Not Before: Jan 1 07:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e67edf70f082ea3e5b906de81cef5fd109d99f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:19:63:46:a2:fb:96:3f:0d:50:08:58:d0:
55:4d:ee:3c:9a:f2:86:22:34:64:83:3a:cb:7b:91:
29:08:39:6b:ed:82:00:9a:e2:90:55:65:0d:62:8d:
28:44:24:77:d0:2a:96:d3:72:74:72:95:e7:78:92:
f5:15:a6:9c:0d:c6:d4:18:3d:09:65:44:76:f0:c8:
dc:64:1c:f5:d8:e9:f2:87:43:1a:55:6f:4e:b3:bc:
82:8c:75:d4:6b:b5:92:1d:c4:30:2e:3c:95:93:26:
16:ed:7f:45:58:f4:d3:14:fe:de:b6:a0:65:d7:6d:
4f:66:75:23:08:92:e9:b3:08:8a:af:0e:ed:21:6c:
0a:e2:72:c9:24:51:04:9c:9f:62:d4:9f:63:ed:c6:
10:16:24:66:64:d2:92:12:b0:8e:c4:6b:a6:15:e1:
cf:11:cf:70:4c:b7:b6:dd:d7:3c:d5:cd:ce:16:00:
79:45:05:73:b6:ac:28:fb:1d:54:99:f5:9c:53:97:
60:89:cc:a8:8d:f4:ad:76:34:f4:dc:c3:f8:10:05:
64:ff:70:24:b1:dd:6c:24:59:4d:06:4a:5a:c8:8d:
1e:bf:09:e9:f7:b0:5b:18:f6:b3:cf:32:40:42:1d:
42:98:8c:24:82:35:b9:d7:30:fd:61:d9:0f:a2:b4:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:ED:F7:0F:08:2E:A3:E5:B9:06:DE:81:CE:F5:FD:10:9D:99:F4
X509v3 Authority Key Identifier:
keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/Pmft9w8ILqPluQbegc71_RCdmfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.40.0-83.97.55.255
Signature Algorithm: sha256WithRSAEncryption
1d:ec:1f:d1:fb:08:0d:cd:a9:b9:16:4c:8d:cf:8f:6c:23:92:
07:79:7e:2a:2b:fc:7f:9a:e0:47:9e:a3:d3:51:91:9e:f3:9a:
e5:90:2d:19:a6:19:03:40:73:23:2b:6c:89:8c:27:8a:3a:17:
86:7b:02:7b:22:d8:b8:d6:51:cc:1a:97:10:d8:82:6d:62:fa:
94:1d:cb:ab:99:70:11:49:e1:20:8f:14:7c:15:67:3f:b5:0b:
36:89:40:a4:ce:13:5a:c6:01:92:72:a9:9d:54:56:ec:89:bd:
5d:0f:6e:2c:83:7c:b4:14:30:0d:4a:89:81:3c:a7:dc:f5:e0:
d4:54:34:ac:85:92:46:96:46:14:6e:fd:56:43:75:0f:1e:bb:
eb:2f:4b:8b:37:c1:ba:c5:d1:bc:9d:c0:3d:83:9b:c5:5a:fc:
73:cc:13:58:32:e6:08:69:5d:51:d4:8a:1f:93:62:50:fc:ce:
b0:08:38:fd:4b:a1:52:ed:8a:62:e9:1e:4d:24:90:2a:72:7c:
5d:d0:d1:c2:6b:cc:70:f5:52:5a:46:ae:4c:66:ad:1e:51:3a:
b4:04:a9:d1:5e:80:62:32:41:fd:93:5b:85:2e:e8:ad:17:d4:
dd:47:47:f2:8c:eb:e9:c6:37:47:f1:7c:1d:18:c0:57:86:6e:
3f:1b:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org