Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PCvQPrWBfHAaFdV6lNYe5NgVYRw.roa
File: PCvQPrWBfHAaFdV6lNYe5NgVYRw.roa (raw, json)
Hash identifier: yhWUBCttxYJg4dEhO7YeayD4PoxIDve361R9+s0wy4k=
Subject key identifier: 3C:2B:D0:3E:B5:81:7C:70:1A:15:D5:7A:94:D6:1E:E4:D8:15:61:1C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EF95F22
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PCvQPrWBfHAaFdV6lNYe5NgVYRw.roa
Signing time: Fri 10 Jun 2022 09:15:03 +0000
ROA not before: Fri 10 Jun 2022 09:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29030
IP address blocks: 94.156.20.0/22 maxlen: 22
87.121.152.0/21 maxlen: 21
31.13.200.0/21 maxlen: 21
94.156.244.0/24 maxlen: 24
87.121.65.0/24 maxlen: 24
94.156.199.0/24 maxlen: 24
94.156.197.0/24 maxlen: 24
94.156.195.0/24 maxlen: 24
94.156.196.0/24 maxlen: 24
94.156.198.0/24 maxlen: 24
94.156.194.0/24 maxlen: 24
94.156.208.0/21 maxlen: 21
87.121.24.0/22 maxlen: 24
31.13.242.0/23 maxlen: 23
87.121.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519659298 (0x1ef95f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 10 09:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c2bd03eb5817c701a15d57a94d61ee4d815611c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:07:f0:64:7c:17:72:78:d3:86:0c:35:b4:
26:a8:76:0d:7f:ee:7e:2a:c5:17:fe:18:2c:68:38:
f2:bf:25:e0:18:6b:f0:60:35:c2:6f:92:84:03:dc:
d8:57:b3:2b:7c:9f:56:0a:a7:92:2f:26:63:01:83:
58:93:68:07:fd:47:0d:b1:2c:bc:ed:ee:ee:5a:ee:
19:cc:e9:dd:9a:25:61:83:82:33:d8:98:01:39:f1:
42:04:bf:6e:ab:2f:f0:a6:18:7d:c3:35:49:8a:c9:
fc:52:0e:13:4d:f6:b5:d4:87:fa:33:95:e2:b7:ac:
6c:ac:c5:24:98:c6:d1:83:fa:9d:5a:33:00:c2:90:
82:1d:13:b1:f3:2f:58:e4:40:4e:77:64:18:5d:a8:
4e:7e:81:51:5c:2e:c3:4f:70:4d:8a:5b:63:50:21:
8d:33:c5:2c:db:8c:09:f5:59:1a:69:7b:af:c1:fa:
e3:08:09:de:4d:f0:13:a8:ba:80:56:5d:2d:aa:1b:
b4:a1:1b:1a:43:db:ee:09:0e:dd:db:9d:b0:83:59:
e9:93:ba:c9:8a:93:9c:1d:ca:ab:e1:f5:53:4c:73:
b0:ef:bb:1f:44:f5:d6:8a:e1:8e:7f:b6:08:c3:12:
44:10:3b:4a:17:e6:f1:f1:37:a9:a4:b4:94:18:dd:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:D0:3E:B5:81:7C:70:1A:15:D5:7A:94:D6:1E:E4:D8:15:61:1C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PCvQPrWBfHAaFdV6lNYe5NgVYRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.200.0/21
31.13.242.0/23
87.121.8.0/21
87.121.24.0/22
87.121.65.0/24
87.121.152.0/21
94.156.20.0/22
94.156.194.0-94.156.199.255
94.156.208.0/21
94.156.244.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b3:a4:7f:9f:2a:03:bd:33:33:0e:30:79:af:f7:a2:e9:af:
06:91:d9:29:04:78:c6:75:15:dd:0e:79:72:bb:92:fa:41:af:
b3:fe:ce:3c:6f:92:48:77:f7:22:a7:69:a9:d7:8b:5f:b0:16:
c3:2f:9b:1a:e0:af:cf:5c:32:cd:30:fe:ca:b0:e9:ef:d9:05:
0a:f6:e9:57:77:6a:46:6e:10:de:72:92:fa:d7:20:0f:86:62:
16:b9:c6:fe:b1:59:ac:b2:b6:50:0d:d4:47:d3:78:4e:f8:7b:
89:7f:2d:14:39:15:63:ae:d8:4b:ea:40:bd:7b:8d:16:db:61:
55:94:17:4a:3a:7f:72:17:30:57:b4:84:12:44:6d:9f:fb:d6:
71:78:c8:b5:25:2e:fe:47:9e:e9:4a:91:60:e9:ad:58:81:42:
32:4a:d8:68:74:1f:07:49:92:80:10:d5:96:e0:f7:f1:9d:6d:
ba:aa:2b:5b:fb:73:df:6a:d2:07:46:cf:a7:8e:8d:24:f0:d9:
a0:81:8c:42:03:56:9b:1f:54:f6:70:2d:1c:59:84:0c:84:24:
81:ea:0b:14:4e:e9:c8:f2:9f:57:ef:ee:ca:76:74:71:43:46:
9b:f3:f9:9d:9f:f7:c0:f9:08:6e:21:d9:ac:ae:6b:31:8a:cc:
92:b4:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org